Prevent domain expiry: never lose a domain to a lapse

Updated: 4 min read Editorial team Bin ich gehackt?
Short answer

To prevent domain expiry, switch on auto-renew, keep a valid payment method on file and use a contact email that isn't hosted on the domain itself, so reminders still arrive. If a gTLD such as .com does expire, there is usually a renewal window and then a 30-day redemption period during which you can restore it for a fee.

Most lost domains weren’t hacked. They simply expired: the card on file ran out, the reminder went to an address nobody reads, or the person who looked after it left the company. If you want to prevent domain expiry, those three gaps are the ones to close. It takes fifteen minutes.

Prevent domain expiry: the checklist

  1. Turn on auto-renew for every domain you want to keep. Many registrars enable it by default, some don’t.
  2. Check the payment method. Card expiry date, sufficient funds. A declined payment is the most common reason for an unintended lapse.
  3. Use a contact email outside the domain. If yourcompany.com expires and reminders go to [email protected], the final warnings stop arriving the moment the domain stops resolving.
  4. Keep a list. Domain, registrar, expiry date, who is responsible. One spreadsheet row per domain is enough.
  5. Set a calendar reminder 60 days ahead for the important ones, independent of the registrar.

Why an expired domain is dangerous

The obvious damage is that website and email go down. The less obvious damage comes later, when someone else registers the name.

Whoever picks up a released domain can set an MX record and receive all mail still sent to addresses on it. Customers using old contact details end up writing to a stranger. Worse, many accounts at banks, cloud services and platforms are still tied to the old address. One click on “forgot password” is enough. A missed renewal turns into a break-in that feels exactly like the scenario in domain hijacked, except that nobody broke in.

Then there are links. Other sites linking to your old domain now point to content you don’t control. Expired domains are bought precisely to exploit that trust, for ads, spam or phishing under a familiar name.

What happens after expiry

The timeline depends on the extension. For generic extensions such as .com, .net and .org, ICANN sets minimum rules. Under the Expired Registration Recovery Policy your registrar has to remind you at least twice before expiry, about a month and about a week ahead.

PhaseTypical gTLD (.com, .net, .org)What you can do
Before expiryReminders about 1 month and 1 week aheadRenew normally
Right after expiryRenewal grace period, length set by the registrarRenew, usually at the normal price
Redemption period30 daysRestore for an extra fee
Pending deleteAbout 5 daysNothing; the name is about to be released
ReleasedAvailable to anyoneRegister it again if nobody else did

Country-code extensions follow their own registries. Some have redemption periods similar to gTLDs, some handle expiry quite differently, and a few have no fixed expiry at the registry level at all. If you hold a .co.uk, .io or another ccTLD, ask your registrar what applies.

The contact email is the overlooked part

Reminders are your safety net, and they only work if they arrive. Three mistakes come up again and again:

  • The address is on the domain itself. When things get tight, that is the channel that fails.
  • The address belongs to someone who has left. Use a role address several people read, or forward it to two people.
  • The reminders land in spam. A filter rule for your registrar’s sender domain helps.

That address is also where password resets go. It deserves the same care as the registrar account itself, including two-factor login.

Domains you no longer need

Old project names, campaign domains, a former company name: they are easy to let go. Before you do, check two things. Are any accounts still tied to email addresses on that domain? Move them first. Does it still get meaningful links or visitors? Then renewing for a few pounds or dollars a year is often cheaper than the risk of someone else operating under that name.

For a .com at €14.99 a year the maths is usually quick. If you have a long tail of old domains, cut it down to the ones that matter and retire the rest deliberately, after moving every account off them.

Switching registrar without a gap

Registrar transfers are a classic moment for domains to slip through. The old service is cancelled, the transfer stalls and nobody feels responsible. Cancel with the old registrar only once the transfer has completed, then check that auto-renew is on in the new account. Turn the transfer lock described in registrar lock back on after the move.

At betadomain renewals cost the same as the first year, with no introductory discount, which makes planning simple. The current yearly prices for every extension are in the overview, and terms for .com domains and other extensions are on their own pages. If an old domain is already gone, an availability check for your old domain name shows whether it’s free again.

Step by step

  1. Turn on auto-renewEnable automatic renewal in your registrar account for every domain you want to keep.
  2. Check payment detailsCheck the expiry date of the card on file and add a second payment method if possible.
  3. Separate the contact emailUse an email address for the registrar account that isn't on any domain in that account.
  4. Keep a list and a calendarList every domain with registrar and expiry date and set a calendar reminder 60 days ahead.
  5. Retire domains deliberatelyDon't let old domains lapse while accounts or links still depend on them.

Found your domain? You can check and register it directly at betadomain – yearly price from €2.99.

FAQ

My domain has expired. Is it gone?

Almost never immediately. For .com and other gTLDs there is usually a period after expiry when you can still renew at the normal price, followed by a 30-day redemption period with a restore fee. After that comes a short pending-delete phase before the name is released.

Why is an expired domain a security problem?

Whoever registers a released domain receives every email still sent to addresses on it. That lets them reset passwords on services still linked to the old address. They also inherit links and trust pointing at the old domain.

Should I pay for several years in advance?

For gTLDs such as .com you can register for up to ten years, which reduces the chance of missing a renewal. With a registrar whose renewal price equals the registration price you don't save money, but you gain peace of mind. Keep auto-renew on anyway.

Does my registrar have to remind me?

For gTLDs, yes. ICANN's Expired Registration Recovery Policy requires registrars to send at least two reminders, roughly one month and one week before expiry. Country-code registries set their own rules.