What actually happens when a domain expires
The day your domain expires, your website goes down and every email address on it stops working. Most registrars replace your site with a page of ads. You get a grace window to renew at the normal price, often around 30 days, but the site and email stay broken the whole time. After grace comes redemption, where getting the domain back costs a restore fee on top of the renewal, commonly $80 or more. After that the domain drops, and domains with any traffic get grabbed by automated services within seconds. The new owner can park ads on it or offer to sell it back at whatever price they like.
This doesn't happen to careless people. It happens to busy ones. The card on file expired. The renewal notices went to an old employee's inbox, or to an address on the domain itself, so the warnings died along with the domain. The web guy who registered it in 2019 moved on. Nobody notices until a customer calls to say the website's gone.
Find out where your domain actually lives
You can't protect a domain you can't find. Go to lookup.icann.org (ICANN runs the domain system, and the lookup is free), type in your domain, and click Lookup. Three fields matter:
- Registrar: the company the domain is registered through (GoDaddy, Namecheap, Squarespace, IONOS). This is where the account and the renewal bill live. If you registered at Google Domains, that business was sold to Squarespace, so your domain is there now.
- Registry Expiration Date: the exact day it expires. Put it in your phone before you read on.
- Name Server: usually your website host or Cloudflare. Not urgent today, but write it down while you're here.
If the expiration date is inside the next 60 days, stop reading and renew first. The rest of this guide will still be here.
Get the account in your own name
Your business should own its domain the way it owns its truck: registrar account in your name, registrant contact is you, login in your password manager. Three situations:
- You have the login: sign in and confirm the account email and registrant contact are current. Password lost? Run the reset with every email you might've used back then.
- A web designer or agency registered it: ask them to hand over the login or move the domain into a new account you create at the same registrar (registrars have a free internal 'change account' option). A good designer does this without drama, and you can still pay them to manage the site afterward.
- The person who registered it is gone or won't cooperate: contact the registrar's support directly. If the domain matches your business name and you can show business documents, most registrars have a recovery process. It's slow, so start now, not the week it expires.
While you're in the account, change the account email to one that doesn't live on the domain, like a Gmail address. If renewal warnings go to josh@yourbusiness.com, they die the moment the domain does, right when you need them most.
Turn on auto-renew and pay years ahead
Auto-renew takes two minutes:
- GoDaddy: sign in, click your name in the top right, then My Products. Find the domain and switch auto-renew on. The card on file is under Renewals and Billing.
- Namecheap: Domain List in the left menu, click Manage next to the domain, flip the Auto-Renew toggle.
- Squarespace: Settings > Domains, click the domain, confirm auto-renew is on.
- Cloudflare: auto-renew is on by default. Just keep the card current under Billing.
Auto-renew fails quietly when the card on file expires or gets replaced after fraud. The real safety net: renew manually for extra years while you're logged in. A .com can be registered up to 10 years out and runs about $10-20 per year at mainstream registrars. Fifty dollars buys five years where none of this can go wrong.
Lock the account down and set backup reminders
Ten more minutes closes off the other ways domains get lost: hijacked accounts, bounced verification emails, and warning emails nobody sees.
- Turn on two-factor authentication. GoDaddy: Account Settings > Sign-In and Security > 2-Step Verification. Namecheap: Profile > Security > Two-Factor Authentication. Without it, a stolen password is enough to transfer your domain away.
- Check the transfer lock. Most registrars turn it on by default; it shows as Locked or Transfer Lock: On in the domain's settings. Leave it on unless you're deliberately switching registrars.
- Keep the registrant contact accurate. ICANN rules require it, and registrars send verification emails when contact details change. If that email bounces or sits ignored, the registrar can suspend the domain.
- Create two Google Calendar events, 60 days and 30 days before the expiration date, repeating yearly. Put everything in the event itself: 'Domain badgerplumbingwi.com renews March 14. Registrar: GoDaddy. Login: joshtanner@gmail.com. Confirm the charge went through and the card hasn't expired.'
After any renewal, re-run lookup.icann.org and confirm the expiration date actually moved out a year. Charges fail, and the receipt email is easy to miss. One more date worth a reminder: the month your credit card expires. That's when auto-renew starts quietly failing on everything, not just the domain.
If it already expired
Move today, not this weekend. In the grace window (length varies by registrar, often up to 30 days) you can usually renew at the normal price: sign in and pay, or call the registrar's support line and say 'expired domain, need to renew.' Past grace you're in redemption, which typically lasts about 30 days and adds a restore fee on top of the renewal, often $80 or more. Annoying, but pay it. It's still your domain.
If it fully dropped and someone else registered it, don't fire off an email offering to buy it back. That marks you as motivated and raises the price. Run the ICANN lookup to see who took it; if it's parked with a for-sale page, the listed price is an opening number, not a final one. Meanwhile, register a close variant, get email working again, and update your Google Business Profile so calls keep coming while you sort it out.