What Happens When Your Domain Expires: A Timeline of Consequences
The consequences are immediate, escalating, and in the worst case, irreversible. Here's what actually happens, day by day.
Day 0: Expiration
The moment your domain expires, different registrars behave differently, but the pattern is broadly the same.
Most registrars stop resolving DNS immediately or within hours. Your website returns errors. Email bounces. API integrations that depend on your domain break. SSL certificates still technically exist, but browsers may show warnings as the underlying services become unreachable.
Some registrars are more graceful. A few continue resolving DNS for a brief window, or redirect your domain to a parking page. But this is registrar-specific and not guaranteed.
The important thing: your users and customers see the impact on day one.
Days 1-30: Grace Period
Most registrars provide a grace period (also called a renewal grace period or auto-renew grace period) after expiration. During this window, you can renew the domain at the normal price.
The length varies by registrar and TLD. ICANN-accredited registrars for .com and .net typically provide a 30-day grace period. Some ccTLDs are shorter; for example, .io domains have a much tighter window.
During the grace period:
- DNS resolution may or may not work, depending on the registrar
- WHOIS data may show the domain as expired
- The domain cannot be transferred to another registrar
- Your registrar may display a parking or "expired" page
This is the window where renewal is cheap and easy. Miss it, and things get expensive.
Days 30-60: Redemption Period
After the grace period ends, the domain enters a redemption period. The domain is now effectively suspended. DNS is definitely not resolving. The registrar has removed it from the active zone.
You can still get the domain back, but the registrar charges a redemption fee (typically $80-200 on top of the normal renewal price). Some registrars charge more. For premium domains or certain TLDs, the fee can be higher.
The redemption period for .com domains is 30 days. Other TLDs vary.
During redemption:
- The domain is completely inactive
- No DNS resolution
- WHOIS shows "redemptionPeriod" status
- Renewal is expensive but possible
Days 60-65: Pending Delete
After the redemption period, the domain enters a "pending delete" phase. This lasts 5 days for .com and .net domains. During this time, the registry queues the domain for deletion, and nobody (including you) can renew it.
This is the point of no return.
Day 65+: Public Availability
The domain drops back into the general pool and becomes available for anyone to register. If your domain has any traffic, brand recognition, or SEO value, someone will grab it. Domain drop-catching services monitor expiring domains and register them within seconds of becoming available.
Once someone else registers your domain, getting it back requires either buying it from them (often at a steep markup) or pursuing a dispute through UDRP (Uniform Domain-Name Dispute-Resolution Policy), which costs $1,500+ and takes months.
The Cascading Effects
Domain expiration doesn't just take down your website. The downstream effects ripple outward:
Email stops entirely. MX records no longer resolve. Incoming email bounces with "domain not found" errors. If your business communicates with customers via email, this is immediately visible. Worse, bounced emails from expired domains can damage your sending reputation even after you restore the domain.
SSL certificates become useless. Your certificates are technically valid, but since the domain doesn't resolve, HTTPS connections fail. Automated renewal (Let's Encrypt) fails silently because the ACME challenge can't reach your server.
Third-party integrations break. OAuth callbacks, webhook URLs, and API endpoints: anything that uses your domain as part of the URL stops working. SaaS platforms that verify domain ownership may flag or disable your account.
SEO value evaporates. Search engines deindex domains that return errors. Even after restoring the domain, recovering rankings can take months. If a domain dropper registers the domain and serves spam, Google may penalize it.
SPF/DKIM/DMARC stop protecting you. Without DNS, these records don't exist. Attackers can send email impersonating your domain, and receiving servers have no way to verify authenticity. These protections rely on TXT records in your DNS zone.
How to Prevent It
Enable auto-renewal. Every registrar supports this. Turn it on.
Use a reliable payment method. Auto-renewal fails when the card on file expires. Use a card with a long expiration date, or set a calendar reminder to update payment details annually.
Monitor domain registration dates. DNS monitoring tools can track your domain's registration and expiration dates and alert you well in advance of expiration. This is the safety net when auto-renewal fails.
Use a team email for registrar accounts. Don't use a personal email for the registrar account. Use a distribution list or shared inbox that multiple people monitor. If the person who registered the domain leaves the company, renewal notices shouldn't disappear with them.
Lock your domain. Enable registrar lock (clientTransferProhibited) to prevent unauthorized transfers. This doesn't prevent expiration, but it prevents someone from transferring the domain out from under you while it's still active.
Set multiple reminders. Most registrars send renewal reminders 90, 60, and 30 days before expiration. Add your own reminders on top of these in your calendar, your monitoring tool, and your team's task management system.
Domain expiration is entirely preventable. The domains that expire are the ones where nobody was paying attention. Pay attention.