Skip to content

Domain expiration: what happens and how to avoid it

What happens when a domain expires? Your website and email can stop, and someone else can buy the name. Here is how to prevent it.

Ward Security Team

· 5 min read

On Monday your website loads and your email works. By Friday, customers see an error page and your messages bounce. Nobody hacked you. The domain expired, and nobody renewed it.

This is one of the most common ways a small business loses its web address, and it is one of the easiest to prevent.

Renewal dateRenew before thisExpiredSite and email stopRecoveryRenew if still possibleReleasedAnyone can buy itThe steps and their lengths depend on your registrar and the domain ending.
A domain that is not renewed. The stages and how long each one lasts depend on your registrar and the domain ending, but the order is the same.

What does it mean when a domain expires?

A domain name is registered for a set period, and you pay to renew it. Your registrar is the company that manages the registration for you. If nobody renews it by the end date, the registration expires.

Think of it as a lease, not a purchase. Keep the lease current and the name stays yours.

Lapses rarely happen because someone chose to let a domain go. They happen because a reminder went to an old inbox, a card expired, or the only person who handled renewals left the company. Each of these is common, and each can be prevented before it happens.

What happens to my website and email?

Your website and your email usually stop working once the registration lapses. Visitors who type your address get an error, because the internet can no longer find your site by its name. Email has the same problem: messages sent to your addresses can no longer be routed to your mail provider.

For a business, the damage starts quickly. Customers can't reach you. Invoices and password reset emails stop arriving. Staff may spend hours looking for a problem in the email provider when the real problem is the domain.

Some visitors may still reach your site for a while, because copies of your address are stored in many places on the internet. Don't count on that. Treat the end date of the registration as the start of an outage.

Can someone else buy my domain?

Yes. Once the name is released, anyone can register it. A competitor, a criminal or someone who simply noticed the lapse can buy it as soon as it is free.

The new owner controls the domain's records. They can publish a website that looks like yours, and they can point the mail records to their own server. From then on, mail sent to your addresses reaches them, not you.

RenewedExpired, then bought✓Website: your hosting✓Email: your mail provider✓Replies go to you✕Website: their server✕Email: their server✕Your mail reaches themWhoever holds the domain decides where its mail goes.
Once someone else holds the name, they decide where its website and email go.

This is also how a lapse becomes a scam. A customer who writes to your old address may send an invoice, a password request or a payment detail to the wrong place. If a payment or bank detail changes, check it by phone before you pay, as explained in the fake invoice scam article.

How do I stop my domain from expiring?

Turn on auto-renewal, keep the payment method current, and keep the contact details up to date. Those three steps cover most lapses that happen by accident.

  1. Turn on auto-renewal at your registrar. Log in to your registrar's account, open the domain's settings, and look for an auto-renew or automatic renewal option. The registrar's help pages show where it is.
  2. Keep a payment card that won't expire. Renewal fails when the card on file is declined or has expired. Update the card before its expiry date, and check the account after any change of bank card.
  3. Keep the registration contact current. Renewal notices go to the contact email on the registration. Use a mailbox that more than one person reads, and test that it still receives mail.
  4. Put the date in a shared calendar. Set a reminder well before the expiry date, and name the person who handles renewals.
  5. Don't tie the account to one person. Make sure at least two people can log in to the registrar's account. An account that only one former employee could open is a common cause of trouble.

Check the renewal price, too. Some registrars sell a low first-year price, and the renewal price can be higher. Look at the renewal price before you buy, so the bill next year doesn't surprise you. If your registrar lets you choose a longer renewal term, you have fewer renewals to miss, but you pay more at once.

Store the registrar login in your password manager, and share it with a second person you trust. A forgotten password can cause a lapse just as easily as a forgotten payment.

ICANN's page on registrant rights says you are entitled to instructions from your registrar about how renewing and restoring a domain works. If you can't find them, ask your registrar for them: ICANN, Registrants' Benefits and Responsibilities.

How does Ward warn me before a domain expires?

Ward's domain check reads the expiry date and warns you when a domain has 30 days or less left. The warning is high when 14 days or less are left, and it is critical if the domain has already expired.

A Ward finding for a domain that expires soon. The title, explanation and advice are the ones Ward shows, in English.

Some domain endings don't publish their expiry date in a way Ward can read. For those, Ward can't check the date by itself. Enter the renewal date on the domain page, and Ward will remind you.

Ward reads the expiry date from public registration data, so it doesn't need access to your registrar account to warn you.

A warning only helps if you act on it. When one appears, renew the domain that day, and check that the renewal shows in the registrar's account.

What should I do if my domain has already expired?

Renew it right away. Many registrars let you restore a lapsed domain for a while, but the rules and prices vary, so don't wait.

Then check what else depends on the domain. Your website host, your email provider and any tool that sends messages with your address, such as invoicing or a newsletter, may all stop at the same time. Make a short list, and test each one once the domain works again.

  1. Renew at your registrar now. Ask whether it can restore the domain if the normal renewal window has closed.
  2. Give the site and mail time to come back. Once the renewal shows, test the website and send a test email to a mailbox outside your company.
  3. Tell your team and your key customers. If email was down, reach the people who matter most by phone or another channel, and say what happened in one sentence.
  4. Check who holds the name. If someone else registered it, the steps in the article on lookalike domains explain how to report it and ask for it to be taken down.

The short version

Renew early, pay with a card that won't expire, and keep the contact email current. Check the date yourself at least once a year, and let Ward remind you as the date gets close. Keeping a domain is a small yearly cost. Losing it can cost you customers, email and trust.

Certificates expire too, and they can break your site in the same way. See the article on expired SSL certificates.

Frequently asked questions

What happens when a domain expires?
Your website and email usually stop working. If nobody renews the name in time, it is released, and anyone can register it, including someone who wants your mail.
Can I get my domain back after it expires?
Often, but not always. Many registrars allow a renewal or restore for a short period after expiry, at a higher price in some cases. Check your registrar's rules now, not after the lapse.
Does auto-renewal guarantee that I keep the domain?
It helps a lot, but it is not a guarantee. Auto-renewal fails when the payment card is declined or has expired, so keep the card current and check the account.
Who gets the renewal notices?
The contact email on the domain registration gets the notices. Use a mailbox that more than one person reads, and make sure the address still works.
Does Ward warn me before my domain expires?
Yes. Ward warns when a domain has 30 days or less left and marks an expired domain as critical. For some domain endings, you enter the renewal date yourself and Ward reminds you.

Sources

  1. ICANN, Registrants' Benefits and Responsibilities
Written by Ward Security Team. We build Ward, a passive external security check for small businesses: it looks at your company from the outside, the way an attacker would, and tells you what to fix first.