Run a full scan — every category, one report

Domain Expiry Checker

Find out exactly when a domain name expires and how many days are remaining.

Why Check Domain Expiry?

Losing a domain name because you forgot to renew it can be disastrous for a business. Not only does your website go down, but your email stops working, and competitors or squatters might register your domain.

It is highly recommended to enable "Auto-Renew" at your registrar to prevent accidental expiration.

Our Domain Expiry Checker queries WHOIS for any domain and returns its exact expiry date, the days remaining, and how urgent renewal is. Domain expiry is one of the few failures that takes down a website, all email and every service at once.

What is Domain Expiry?

Every domain registration is a lease, not a purchase. It runs for a fixed term — usually one to ten years — and stops working when the term ends unless it is renewed.

Expiry is not instant deletion. Most gTLDs pass through a defined lifecycle. After the expiry date the domain enters a grace period of roughly 30 days during which the original registrant can still renew normally, though the domain may stop resolving. It then enters a redemption period of about 30 days where recovery is possible but carries a substantial fee. Finally comes a pending delete phase of five days, after which the domain is released and anyone may register it.

The exact durations vary by TLD and registrar. Some country-code TLDs have much shorter windows, and a few have none at all.
  • Domain registration is a fixed-term lease that must be renewed
  • Expiry is followed by a grace period of roughly 30 days
  • Redemption recovery is possible but expensive
  • After pending delete, anyone can register the domain
  • Timelines vary considerably between TLDs

Why Domain Expiry Matters

An expired domain takes everything down simultaneously. The website stops resolving, email stops being delivered and starts bouncing, any API depending on the hostname fails, and SSO integrations break. There is no partial degradation.

The security consequences outlast the outage. Once a domain is released and re-registered by someone else, the new owner receives all email sent to it — including password reset links for accounts still registered to addresses on that domain. Expired domain hijacking is a well-established attack, and lapsed domains with residual traffic are actively bought for exactly this purpose.
  • Website, email and every dependent service fail together
  • Recovery from redemption carries a substantial fee
  • A re-registered domain gives its new owner all inbound email
  • Password reset interception is the usual follow-on attack
  • Expired domains with residual traffic are actively targeted

How This Domain Expiry Checker Works

The tool queries WHOIS for the domain and extracts the registration dates.
  1. Validates the domain input against format and SSRF safety checks
  2. Queries the authoritative WHOIS server for the TLD
  3. Extracts the expiry, creation and last-updated dates
  4. Calculates the days remaining until expiry
  5. Reports an urgency assessment based on the time left

How to Use the Domain Expiry Checker

  1. Enter the domain name you want to check
  2. Run the check to query WHOIS
  3. Review the expiry date and days remaining
  4. If renewal is due within 90 days, act now rather than waiting
  5. Confirm auto-renew is enabled and the payment card on file is current

Understanding Your Domain Expiry Results

The check reports the key registration dates and what they imply:

Field / Value Meaning
Expiry date When the current registration term ends. The domain may stop resolving on this date, though the grace period means it is not immediately lost.
Days remaining Time until expiry. Under 90 days warrants attention; under 30 days is urgent, particularly if auto-renew status is unconfirmed.
Creation date When the domain was first registered. Older domains carry more trust with search engines and spam filters, which is why aged domains have resale value.
Updated date When the registration record last changed. An unexpected recent update can indicate a nameserver change or an unauthorised transfer attempt.
Registrar The company managing the registration. This is where you renew, and where you enable transfer locks.
Status codes EPP codes such as clientTransferProhibited indicate a registrar lock is active. redemptionPeriod or pendingDelete mean the domain has already expired.

Common Problems & How to Fix Them

Renew immediately. Do not rely on auto-renew without verifying it.

Log in to your registrar and confirm three things: that auto-renew is actually enabled for this specific domain, that the payment method on file has not expired, and that renewal notices are going to a monitored address. A failed auto-renew charge is the single most common cause of accidental expiry.

Registrars send warnings to the registrant contact email. If that is a departed employee or an address nobody checks, every warning is missed.

Update the registrant contact to a monitored role address such as domains@yourcompany.com rather than an individual. Ensure the address is not on the domain itself, or an expiry outage will prevent you receiving the notices about it.

Act immediately — the window shrinks daily.

During the grace period, roughly 30 days, you can usually renew at the normal price. After that, the redemption period allows recovery but at a substantial fee, typically a hundred dollars or more. After pending delete the domain is released and recovery is no longer possible.

Contact your registrar directly rather than relying on the self-service interface, which often does not expose redemption recovery.

Almost always a payment failure — an expired card, a declined transaction, or a billing address mismatch.

Update the payment method and verify the renewal succeeded rather than assuming. Set a calendar reminder 90 days before expiry as a backstop that does not depend on the registrar contacting you.

Domains accumulate across teams, registrars and acquisitions, and expiry dates drift apart. The one nobody remembers is the one that lapses.

Maintain a central inventory with expiry dates and registrar details, and monitor it automatically. For critical domains, register for a multi-year term so there are fewer renewal events to miss.

Best Practices

  • Enable auto-renew and verify the payment method annually
  • Use a monitored role address for registrant contact, not an individual
  • Keep the registrant contact on a different domain from the one registered
  • Register critical domains for multiple years to reduce renewal events
  • Maintain a central inventory of every domain with its expiry date
  • Set independent calendar reminders 90 and 30 days before expiry
  • Enable registrar lock to prevent unauthorised transfers

Security Recommendations

  • Treat domain expiry as a security event, not merely an availability one — a lapsed domain hands all inbound email to whoever registers it next
  • Remember an attacker receiving your email can initiate password resets on any account still using an address at that domain
  • Enable registry lock on high-value domains, which requires manual verification for any change
  • Never leave the registrant contact as a departed employee, since account recovery may depend on it
  • Monitor WHOIS for unexpected changes to expiry, registrar or nameservers, which can indicate a hijack attempt
  • Audit dormant and legacy domains rather than letting them lapse silently, as they often still receive mail and traffic

Frequently Asked Questions

It typically stops resolving on the expiry date, then enters a grace period of about 30 days where normal renewal is still possible. After that comes a redemption period with a high recovery fee, then pending delete, after which anyone may register it.

Usually around 30 days of grace at the normal price, followed by roughly 30 days of redemption at a substantial fee, then five days of pending delete. Exact periods vary by TLD and registrar, and some country-code TLDs are far less forgiving.

Once it completes pending delete and is released, no. It becomes available to anyone, and desirable domains are often caught by drop-catching services within seconds. Recovery then means negotiating with the new owner.

Nearly always a payment failure — an expired card, a declined charge or a billing mismatch. Auto-renew does not guarantee renewal; it only attempts it. Verify the payment method annually and confirm renewals actually completed.

A serious one. Whoever registers it next receives all email sent to that domain, which includes password reset links for any account still using an address there. Expired domain hijacking is a well-established attack technique.

At least 90 days before expiry for anything important. This leaves room for payment problems, registrar support delays and holiday periods. Registering for multi-year terms further reduces the number of renewal events that can go wrong.

No. Renewal adds the new term to the existing expiry date rather than restarting from the renewal date, so nothing is lost by renewing well in advance.