Your website shows a parking page full of adverts, customers say their emails bounce, and then you find the renewal reminder sitting in an old inbox nobody checks. Your domain expired. It happens to small businesses and large companies alike, usually because a card expired or the account belongs to someone who has left. The good news is that a domain does not vanish the moment it expires. There is a well-defined sequence of stages, and at most of them you can still get it back.
The lifecycle of an expired domain
The exact timings depend on the extension and on your registrar, so treat the following as the typical pattern for generic domains such as .com, .net and .org. Country-code domains (.in, .uk, .de and so on) follow their own registry's rules, which can be quite different.
| Stage | Typical length | What happens | Can you recover it? |
|---|---|---|---|
| Expiry date | Day 0 | The registration term ends | Yes, normal renewal |
| Grace period | Up to about 30–45 days, registrar-dependent | Registrar may park the domain or stop it resolving | Yes, usually at the normal renewal price or a small late fee |
| Redemption grace period | 30 days | Domain removed from the zone; nothing resolves | Yes, but with a restore fee on top of renewal |
| Pending delete | 5 days | Domain is queued for deletion | No |
| Released | After pending delete | Anyone can register it | Only by registering it again, if nobody beats you to it |
What breaks, and when
Immediately or within days of expiry
Many registrars change the domain's name servers to their own parking servers soon after expiry, or otherwise suspend resolution. ICANN's Expired Registration Recovery Policy requires gTLD registrars to interrupt the domain's normal DNS for a period after expiry so that the owner notices. Once that happens:
- The website shows a parking or "this domain has expired" page, or fails to load.
- Incoming email stops arriving. Senders' servers may keep retrying for a few days, then bounce messages back.
- Anything using the domain for sign-in, such as staff accounts, password resets or API callbacks, can stop working.
- SSL certificates are not revoked, but the site behind them is unreachable, and automatic renewals that rely on DNS or HTTP validation will fail.
In redemption
The registry removes the domain from the live zone. Nothing resolves at all. Recovery is still possible, but only through your registrar and with a restore fee, which is usually considerably higher than a normal renewal.
After deletion
The domain becomes available to the public. Names with any history or traffic are often caught by automated "drop-catching" services within moments of release. If that happens, your only route back is to negotiate a purchase, or, if the new owner is abusing your trademark, a formal dispute.
The hidden risk: someone else receiving your email
A business domain that is allowed to lapse and is then registered by someone else is a security problem, not just an inconvenience. The new owner can set up MX records and receive any email still sent to your old addresses, including password reset links for accounts registered with those addresses. If a domain you no longer use was ever tied to banking, cloud or social accounts, update those accounts before you let it go.
How to recover an expired domain
- Check the status. A WHOIS lookup shows the expiry date and status codes.
autoRenewPeriodor a recent expiry date suggests you are in the grace period;redemptionPeriodmeans a restore fee will apply;pendingDeletemeans it is too late to renew. - Log in to the registrar account. If you cannot, because the account belongs to a former employee or agency, contact the registrar's support with proof that the domain belongs to your organisation, such as invoices, company registration documents and the original registrant details.
- Renew or restore. Pay the renewal or restore fee. Restores are usually processed within a day or so.
- Check the DNS. If the registrar changed your name servers to parking servers, change them back. Then confirm your website and MX records with a DNS lookup.
- Wait for caches to clear. Resolvers may have cached the parking records; a propagation check will show when the world sees your real records again.
- Test email both ways, and ask important contacts to resend anything sent during the outage.
How to make sure it never happens again
- Turn on auto-renew and keep a valid payment method on the account, with an expiry reminder for the card itself.
- Renew for several years. Most extensions allow up to ten years at a time.
- Use a shared, monitored email address for the registrar account and the registrant contact, such as an IT or admin mailbox, not an individual's address.
- Keep the contact email off the domain itself, or have a second address elsewhere. If the domain expires, reminders sent to an address on that domain will never arrive.
- Consolidate domains at one registrar so you have one list to watch, and record expiry dates in your own calendar as a backup.
- Register your company as the owner, not the developer or agency that set up the site.
Registrars for gTLDs are required to send reminders before expiry, typically about a month and a week ahead, and again shortly after. Those reminders only help if they reach someone who reads them.
Key takeaways
- An expired domain passes through grace, redemption and pending-delete stages before anyone else can register it.
- Websites and email usually stop working within days of expiry, long before the domain is lost.
- Renewal is cheapest in the grace period; redemption adds a restore fee; after pending delete it is too late to renew.
- Auto-renew, multi-year terms and a monitored contact address prevent almost every expiry.