Domains & DNS
Domain expiry recovery: what happens after a registration lapses
Domain expiry recovery depends on the registry lifecycle, registrar policy, and how far the name has progressed after its expiry date. The safest recovery plan is prevention: account access, valid payment, renewal notices, and enough lead time to solve a failed charge before services disappear.
Confirm the exact lifecycle state
Check the registrar account, WHOIS/RDAP status where useful, expiry date, registry status codes, and whether the domain is still in an auto-renew, grace, redemption, or pending-delete phase. Names and TLDs do not all follow identical timing.
Do not rely on the website still resolving as proof that renewal is safe; DNS can remain cached while the registration is already in trouble.
Restore registration before changing DNS
If the registrar offers normal renewal or restoration, complete that first with the existing account/registrant identity. Changing nameservers or hosting cannot repair an expired registration that the registry will not delegate.
Expect some DNS and service recovery delay after restoration because cached failures or delegation changes may persist.
Protect mail and certificate dependencies
Expired domains can affect website resolution, inbound/outbound email identity, password resets, SaaS verification, and certificate renewals. Inventory critical dependencies so recovery testing extends beyond the homepage.
Watch for phishing or account-recovery attempts during an expiry incident.
Prevent recurrence
Enable appropriate auto-renew, keep a valid payment method, use a monitored role address for notices, maintain MFA/recovery access, and track important domains in an asset register.
- Verify registrar/registry state.
- Renew or restore before DNS changes.
- Test email and integrations after recovery.
- Maintain renewal ownership and alerts.