Domain Renewal, Grace Periods and Brand Protection
What happens when a domain expires, why auto-renewal alone is not enough, and why registering similar extensions and typo domains protects a brand.
rabbitclip teamPublished: 5 min read
Short answer
A domain is not lost the instant it expires, but the protection windows are limited: an auto-renew grace period, usually up to forty-five days depending on the registrar, allows renewal at the normal price, a further thirty-day redemption grace period allows it back at a higher recovery fee, and once that passes the domain drops into public release. Per ICANN's registration policies, those two windows together run to roughly seventy-five days on average, but that is a ceiling, not a guarantee.
A business running an e-signature service can find its domain fails auto-renewal because the card on file has expired; the business usually notices this weeks after missing a warning email. At that point the domain can still be recovered, but at a cost several times the normal renewal fee.
What stages does a domain go through once it expires?
Domain renewal is an annual rent paid to the registrar; missing it does not open the name up to anyone else instantly, it moves through a set of grace periods first.
- Expiry: the site and email usually stop immediately or redirect to a holding page
- Auto-renew grace period, 1-45 days depending on the registrar: most registrars allow renewal at the normal price during this window
- Redemption grace period, 30 days: after deletion, the domain can be recovered, usually at several times the standard renewal fee
- Pending delete, roughly 5 days, followed by public release
Why is auto-renewal alone not enough?
Auto-renewal only works while the payment method on file actually works; it fails silently when a card expires, a bank changes, or the registrar's warning email lands in a spam folder. Weeks can pass before the owner notices.
The second risk is who the domain is actually registered to. If the person who originally set it up has left the business and the email on the registrant record is no longer reachable, neither the renewal reminders nor the recovery notices reach anyone.
Building a renewal calendar independent of the registrar
Relying on the registrar's own reminder leaves a single point of failure; keeping an independent calendar removes it.
- Mark the domain's expiry date separately on the business's own calendar
- Check once a year that the email on the registrant record still belongs to someone active and reachable
- Renew for several years at once where possible, three to ten, to reduce how often the reminder matters
- Give at least two people access to the registrar account, so it never depends on one person alone
Domain transfer and the transfer lock
Moving a domain to a different registrar means unlocking it first, then applying to the new registrar with the authorisation code the current one issues. The process usually takes a few days; leaving the lock off outside of a transfer leaves the domain open to an unwanted transfer attempt, so it should only come off while a transfer is actually in progress.
If a domain sits under a personal account rather than the business's own, any transfer or access change depends on that one person's sign-off. Registering under a company account removes that dependency from the start.
Brand protection: why register similar extensions and typo domains?
A brand needs to think beyond its main domain, to the near-misses a customer might type by accident or a scammer might register on purpose. That covers nearby extensions alongside .com, .co.uk, .net, and common misspellings of the brand, a missing or extra letter, a similar-looking character.
A fake booking page set up on a typo domain that mimics a spa chain's name can damage both customer trust and brand reputation in a single incident. Registering those names in advance and pointing them at a blank page or the main site is a defensive move, but an effective one.
What does UDRP do in a domain dispute?
If a domain is identical or confusingly similar to a registered trademark, the registrant has no legitimate right to it, and it was registered in bad faith, a complaint can be brought under ICANN's Uniform Domain-Name Dispute-Resolution Policy (UDRP). The process can resolve within months, without going to court.
UDRP is not a fix for every situation; the trademark needs to be registered and bad faith needs to be demonstrable. That is why defensive registration is a far cheaper and faster alternative to a dispute process.
Common mistakes
Domain management can turn into something set up once and forgotten; three mistakes are the direct result.
- Leaving a domain registered to the personal email of an employee who has since left
- Renewing one year at a time and repeating the same risk every year
- Never checking for extensions and typo domains that mimic the brand name
- Giving registrar account access to one person only, so it locks up the moment they cannot be reached
A domain is a business's digital address; once it expires, brand visibility goes first, then email, then the site itself. An independent calendar, current contact details and a handful of defensive registrations close off that risk at a small cost. A discovery call with rabbitclip is a good place to review your own domain portfolio.
FAQ
Is a site lost the instant a domain expires?
No, it goes through grace periods first. But those are not automatic; without a renewal or recovery action, the domain eventually drops into public release.
How many years should a renewal cover?
There is no fixed rule, but renewing for three years or more cuts down significantly on how often the reminder matters.
Is it necessary to register every similar extension?
No. A handful of extensions the brand genuinely operates in, plus the common typo variants that risk confusing customers, is enough.
Is a UDRP case expensive?
It is cheaper and faster than going to court, but it still carries a cost; defensive domain registration is usually the cheaper route overall.
Should a domain sit under a company account rather than a personal one?
Yes. A company account prevents access from locking up if one person leaves or becomes unreachable.
