A domain name can cost only a few dollars a year, but forgetting to renew it can interrupt a company website, custom email, customer forms, remote-access links, and other services that depend on that name. The expensive part is not the renewal fee. It is the lost calls, missed orders, bounced email, emergency labor, and risk that the domain becomes difficult—or eventually impossible—to recover.
ICANN explains that a domain registration is yours only for the period you registered, usually from one to ten years. To keep the domain and associated services such as a website or email working, it must be renewed through the registrar before it expires. ICANN also warns that it cannot simply transfer an expired domain back to you. This is why a short renewal-safety check is worth doing before there is an outage.
The problem: one small account can control several business systems
Your registrar is the company through which the domain is registered. Your DNS host publishes records that tell the internet where to find your website and email. Your web host and Microsoft 365 or Google Workspace subscription may be separate again.
That separation causes confusion. A business owner may pay Microsoft 365 every month and still lose custom-domain email because the domain registration expired elsewhere. Microsoft notes that DNS setup affects important business activities such as email, while Google explains that the domain is the unique name used after the @ in an email address and in the website address.
You are affected if you use any of these
- Email addresses such as
[email protected] - A business website, online store, booking page, or customer portal on your own domain
- VPN, remote-desktop, camera, NAS, or server links that use a domain name
- SPF, DKIM, or DMARC records tied to your domain
- Short links, QR codes, app sign-in redirects, or marketing campaigns that point to the domain
You are less directly affected if…
- You use only a provider address such as
@gmail.comor@outlook.comand have no custom domain. - Your website is hosted only on a provider subdomain you do not own.
Even then, check whether invoices, business cards, social profiles, or recovery accounts still point to an old domain. Also remember that domain renewal is not the same as renewing web hosting, Microsoft 365, Google Workspace, or an SSL/TLS certificate. Each may have its own billing and expiration date.
The 15-minute domain renewal safety check
1. Identify the real registrar
Start with your company records: the last legitimate renewal receipt, accounting records, and the bookmark your administrator normally uses. If that is unclear, use the official ICANN Lookup service to review registration information. Privacy services may hide personal details, but the lookup can still help identify the registrar.
Caution: Do not sign in through an unexpected renewal email. Open a saved bookmark or type the registrar’s known address yourself. A realistic-looking “domain renewal notice” can be an advertisement, a transfer solicitation, or a phishing attempt rather than a bill from your actual registrar.
2. Confirm the exact domain and expiration date
Inside the registrar account, confirm the spelling, top-level domain, status, and expiration date. Check every business domain, including defensive spellings, old domains that still forward, and domains used only for email.
Example: example.com, example.net, and examplefl.com are separate registrations. Renewing one does not renew the others.
3. Turn on auto-renew, then inspect the payment method
Auto-renew is useful only if it can complete. Confirm that it is enabled for the correct domains and that the payment card is current, has not been replaced, and is allowed to process online recurring charges. Review the registrar’s renewal price and terms rather than assuming the first-year promotional price continues.
If the domain supports multi-year renewal and the organization expects to keep it, renewing early for more than one year can reduce annual failure opportunities. It does not replace account security or regular review.
4. Protect the registrar account
- Use a unique password stored in a reputable password manager.
- Enable multifactor authentication, preferably an authenticator app or security key when supported.
- Save recovery codes in the company’s protected documentation—not in the same inbox the domain controls.
- Use a company-controlled account rather than an employee’s personal account.
- Add a second authorized administrator or documented recovery contact if the registrar supports it.
This account deserves the same care as banking or Microsoft 365 administration. Anyone who takes over the registrar account may be able to redirect the website, disrupt email, or initiate a transfer.
5. Update renewal contacts without creating a circular dependency
ICANN advises registrants to keep contact information current so renewal notices arrive. Confirm the account email, phone number, business address, and backup contact.
At least one recovery path should work even if the custom domain is already down. For example, a protected alternate mailbox or verified phone number can be safer than making [email protected] the only way to recover yourcompany.com.
6. Document DNS before changing anything
Take a screenshot or export the DNS zone if your provider offers that option. Record:
- Registrar and registrar account owner
- Authoritative nameservers
- DNS host
- Website A/AAAA and CNAME records
- Email MX records
- SPF, DKIM, and DMARC TXT records
- Important verification and service records
Do not change nameservers or DNS records merely because you are renewing the registration. Renewal normally does not require a DNS change. Microsoft warns that changing an MX record can redirect all mail for the domain, so accidental DNS edits can create an outage even when the renewal itself succeeds.
7. Add independent reminders and ownership review
Create company calendar reminders 60 days, 30 days, and 7 days before expiration. Include the registrar name, responsible role, and a link to the internal procedure—not a password. Assign a backup person and review ownership whenever an employee, contractor, or IT provider leaves.
For a small business, a quarterly check of domains, web hosting, email subscriptions, DNS, and certificates is usually easier than an emergency recovery call.
8. Verify the result instead of trusting the receipt
After renewal:
- Read the registrar’s confirmation and verify the correct domain was charged.
- Sign back in through the trusted bookmark and confirm the new expiration date.
- Check the domain again with ICANN Lookup after registration data updates.
- Open the website from a normal browser and a phone on cellular data.
- Send a test email to and from an outside account.
- For Microsoft 365, review Setup > Domains and use Check health if the admin center reports an issue.
- For Google Workspace, confirm the expected registrar, nameservers, and MX records in the Admin console and DNS host.
Good setup versus risky setup
Good
- Company-owned registrar account with MFA
- Auto-renew enabled and a current payment method
- Two authorized people and a documented recovery path
- Independent calendar reminders
- Current registrar, nameserver, DNS, and billing documentation
- Recovery contact that still works during a domain-email outage
- Verification after renewal
Bad
- The domain is registered in a former employee’s or web designer’s personal account
- The only recovery address uses the domain that may stop working
- No one knows which company is the registrar
- Auto-renew points to an expired card
- Staff pay any renewal-looking invoice without checking the registrar
- DNS is changed during renewal without a documented reason and rollback copy
What to do if the domain already expired
- Contact the registrar immediately through its official website or known support number.
- Ask for the domain’s exact status and the registrar’s renewal, grace-period, and redemption options. Timing and fees can vary.
- Do not create a new registrar account and start changing DNS unless the current registrar directs you to do so.
- Do not pay an unrelated company that claims it can “recover” the domain without verifying who it is.
- Preserve screenshots, receipts, prior invoices, account ownership records, and DNS documentation.
- After recovery, verify the website, inbound and outbound email, forms, redirects, and DNS records.
ICANN’s Domain Name Renewal and Expiration FAQ and Expired Registration Recovery Policy overview explain the general framework, but your registrar’s current terms and the domain’s live status determine the practical recovery path.
Frequently asked questions
If my website hosting is paid, can the site still go down?
Yes. Hosting can remain active while an expired domain stops directing visitors to it. The same applies to email subscriptions.
Does auto-renew guarantee the domain will renew?
No. A failed payment, outdated contact information, account restriction, or configuration problem can still interfere. Use auto-renew plus independent reminders and post-renewal verification.
Should I transfer the domain to another registrar while it is close to expiration?
A transfer may be reasonable, but do not make a rushed transfer during an outage or immediately before expiration. Review transfer timing, locks, authorization codes, DNS hosting, and renewal terms first. Renewing safely in place may be the lower-risk immediate action.
Will renewing the domain restore email immediately?
Sometimes service returns quickly, but DNS caches, registrar status, nameserver changes, and provider settings can delay recovery. Test inbound and outbound mail and check the provider’s domain-health tools.
Should the web designer or IT company own the domain?
The business should normally retain clear legal and administrative control, with vendors receiving only the access they need. Ownership, billing, renewal responsibility, and the exit process should be documented.
Is a registrar lock enough to protect the domain?
No. A transfer lock is helpful, but it does not replace a unique password, MFA, secure recovery methods, current contacts, and regular review.
Related practical checks from The IT Guys
- Set up emergency admin access before a lockout stops the business
- Make a one-page tech emergency sheet before something breaks
- Check SPF, DKIM, and DMARC before email spoofing hurts your business
- Save MFA backup codes before your phone goes missing
Actionable next step
Open your registrar through a trusted bookmark today and write down four items: registrar, expiration date, auto-renew status, and backup account owner. Then confirm the payment method and MFA. If any answer is “unknown,” treat that as a business-continuity gap worth fixing before the next billing cycle.
Sources
- ICANN: Renewing Domain Names
- ICANN: Domain Name Renewal and Expiration FAQs
- ICANN: What Registrants Should Know About the Expired Registration Recovery Policy
- ICANN Lookup
- Google Workspace Help: Domain Name Basics
- Microsoft Learn: Find and Fix Issues After Adding a Domain or DNS Records
Published July 29, 2026. Provider interfaces and policies can change; verify current terms and live account status before making changes.