A restaurant near where I used to work lost their domain name to a squatter. They'd been operating for eleven years under that name, built a local reputation, had thousands of Google reviews pointing to their site. Then the domain lapsed for eight days and someone picked it up. Getting it back cost them more money than they made in two months. The squatter knew exactly what they were doing.
This happens constantly, and it almost always happens the same way: someone registered the domain years ago with an email address they no longer check, or auto-renewal was set up with a card that expired, or the account at the registrar just got forgotten. Domain expiry is boring and routine right up until it's catastrophic.
Most people don't know how domain expiry actually works mechanically. Here's the sequence.
Your domain expires on a specific date. For the first roughly 30 days after that date, it enters a "grace period" — you can still renew it at normal price. After the grace period, it goes into "redemption" status, which typically lasts another 30 days. During redemption, the domain is locked and you can still reclaim it, but the registrar charges a redemption fee that can range from $80 to $200 or more depending on the TLD. Then after redemption ends, the domain is deleted and becomes available for anyone to register. That whole process from expiry to open availability takes roughly 70-80 days, which sounds like a lot of time — but if you don't find out until month two, you might be paying a redemption fee. Or worse.
The "or worse" scenario is when a domain monitoring service snaps up the domain the second it becomes available. These services run automated systems that watch for expiring domains with existing backlinks and traffic. A domain with 11 years of SEO history is exactly what they look for. They register it within seconds of it dropping and immediately list it for sale.
The situations I've seen or heard about directly:
The old email address problem. Developer registers a domain in 2018 with a Gmail account they used at the time. They switch jobs, their workflow changes, they stop checking that account. The registrar sends renewal reminders. Nobody reads them. Domain expires.
The lapsed credit card. Auto-renewal was set up and forgotten. The card on file expired. The renewal charge failed. The registrar sends emails — to that same inbox nobody checks anymore — about the failed payment. Thirty days later, the domain lapses.
The acquisition handoff. Company A acquires Company B. In the chaos of the handover, the domain for Company B's old blog gets lost — nobody transferred the registrar account, nobody knows the password, the contact email went to an employee who left. These orphaned domains sit quietly until they expire.
The freelancer who moved on. A developer registered a client's domain under their own registrar account as a convenience. Years later, the developer is unreachable. The client has no access to the domain they're depending on. Renewal fails, domain expires.
That last scenario is unfortunately common enough that I've started keeping a record of every domain I ever register for a client, regardless of whose name it's under, with explicit handoff procedures. Learned that the hard way.
Auto-renewal is not enough on its own. It's necessary but not sufficient, because it depends on a payment method that stays valid and an email address that someone actually reads.
The approach that works is layered:
First, enable auto-renewal on every domain you care about. Basic step. Do it.
Second, use a dedicated email address for your registrar accounts — something like [email protected] that multiple people have access to and that won't die if one employee leaves. Don't use a personal email.
Third, set up external domain expiry monitoring. This is where a tool like Alertiva adds real value: it independently tracks your domains and alerts you when expiry is approaching, regardless of what the registrar does or doesn't send. You get a notification 60 days out, 30 days out, 14 days out. If auto-renewal fires correctly, you can acknowledge and move on. If something failed, you have time to deal with it before it becomes a crisis.
Fourth, for mission-critical domains, consider enabling registrar lock and privacy protection. Registrar lock prevents unauthorized transfers. Privacy protection keeps your contact information out of WHOIS, which reduces the spam and scam emails that clutter your domain-related inbox and make it harder to spot real renewal notices.
Put all your domains in one place where you can see their expiry dates at a glance. Whether that's a spreadsheet, a DNS management tool, or a dedicated monitoring service — the important thing is that it's visible. Out of sight really is out of mind with domains, and the consequences of forgetting are entirely avoidable with a bit of infrastructure.
Monitor SSL, uptime, and domains automatically — instant alerts before anyone notices.
Get Started Free