Understanding the Domain Name Lifecycle

A domain name is never really owned outright. You lease it for a fixed term, usually one to ten years, and the registry decides what happens when that lease runs out. Understanding the domain name lifecycle matters whether you are protecting a business website, managing a client portfolio, or waiting for someone else's name to become available. This guide walks through each stage in order, explains the EPP status codes you will see in WHOIS and RDAP records, and shows what you can still do at each point.

Who controls the lifecycle

Three parties shape what happens to a domain. The registry operates the top-level domain (for example, Verisign runs .com and .net). The registrar is the company you buy from, such as Namecheap, GoDaddy, Porkbun or Cloudflare Registrar. The registrant is you, the person or organisation listed as the holder.

For generic top-level domains (gTLDs), ICANN sets baseline rules through its registrar agreements and the Expired Registration Recovery Policy (ERRP). Registries and registrars then add their own policies within those limits. Country-code TLDs (ccTLDs) such as .de, .uk or .tr are not bound by ICANN contracts in the same way, which is why their timelines can look quite different.

The stages at a glance

The table below shows the typical lifecycle of a .com domain. Exact durations vary by registrar, so treat these as common ranges rather than guarantees.

Stage 1: Registration and the active period

When a domain is first registered, the registry records an expiration date and a short add grace period of five days, shown as addPeriod. During this window a registrar can delete a new registration and receive a credit, which is why you sometimes see freshly registered names vanish within days.

For the rest of the term the domain is active. Most registrars apply clientTransferProhibited by default as a security lock, and you may also see clientDeleteProhibited or clientUpdateProhibited. These are protective statuses, not warnings. You can renew at any time during this period, and with most gTLDs the extra years are added to the existing expiry date, up to a ten-year maximum.

Renewal reminders are required, but not reliable

Under ICANN rules, registrars must send renewal reminders roughly one month and one week before expiry, plus a notice shortly after. In practice these emails land in old inboxes, spam folders or the mailbox of a former employee. Relying on them alone is the most common reason businesses lose domains.

Stage 2: Expiration and the grace period

On the expiry date, a gTLD registry such as Verisign automatically renews the domain and charges the registrar. This starts the auto-renew grace period, which can last up to 45 days at the registry level. The registrar then decides how long to give you before it deletes the name and claims its credit back.

In practice, many registrars offer somewhere between 30 and 40 days of grace, though a few are shorter. ICANN's ERRP guarantees at least eight consecutive days after expiry during which the registrant can still renew, and it requires that the website and email stop resolving for part of the post-expiry period so that the owner notices. That is why expired domains often show the clientHold status or point to a parking page.

What happens to your website and email

Once the registrar applies clientHold or changes the nameservers, your site goes offline and incoming email may bounce. Renewing usually restores service within minutes to a few hours, depending on DNS caching. This stage is the cheapest and simplest time to fix a missed renewal.

Registrar auctions during the grace period

Many large registrars list expiring names in their own aftermarket while the domain is still in grace. GoDaddy Auctions, NameJet and Dynadot are common examples. If someone wins the auction and the original owner does not renew, the domain is transferred to the winner instead of continuing towards deletion. This is one reason some names never reach the public drop.

Stage 3: The redemption grace period

If the registrar deletes the domain at the end of the grace period, the registry places it in the redemption grace period (RGP) for 30 days. The status changes to redemptionPeriod, and the domain no longer resolves at all.

Only the last registrant, through the same registrar, can restore it now. Restoration requires a restore fee in addition to the renewal. Restore fees vary widely and are typically somewhere around 80 to 250 US dollars at retail, so a forgotten 10 dollar renewal can become an expensive mistake. Once a restore request is submitted, you may briefly see the pendingRestore status while the registry processes it.

Not every TLD offers redemption. Most gTLDs do, but many ccTLDs have their own processes, and some new gTLDs set different fees. Always check the registry policy if the domain matters.

Stage 4: Pending delete

After the redemption period ends without a restore, the domain enters pendingDelete for five days. This status is final. No registrar, support agent or payment can bring the domain back to its previous owner at this point.

For anyone hoping to acquire the name, pendingDelete is the signal that a drop is imminent. Because the length of this phase is fixed, the drop date can be calculated quite precisely, and backorder services begin preparing their registration attempts.

Stage 5: The drop and re-registration

At the end of pendingDelete, the registry deletes the domain and it becomes available to register. For .com and .net, Verisign processes deletions in a daily batch that usually starts in the afternoon, US Eastern time. Desirable names are typically registered within a fraction of a second by drop-catching services that hold many registrar connections.

If nobody catches it, the domain simply sits in the available pool and anyone can register it at the normal price through any registrar. A dedicated backorder strategy explains how to compete for names at this moment.

How ccTLDs differ

Country-code domains are governed by national registries, and their timelines vary considerably. A few examples illustrate the range:

• .uk (Nominet): expired domains are suspended after about 30 days and, if not renewed, are typically cancelled around 90 days after expiry.
• .de (DENIC): renewal handling depends heavily on the registrar, and deleted names follow DENIC's own procedures rather than ICANN's redemption model.
• .tr: since the transition to the TRABIS system, rules are set by the national authority and accredited registrars, so timelines should be confirmed with your registrar.

The lesson is simple: never assume the .com timeline applies to every extension in your portfolio.

How to protect your domains: a practical checklist

1. Turn on auto-renew at your registrar and confirm the payment card on file will not expire before the domain does.
2. Use a role-based email address (for example, domains@yourcompany) as the registrant and account contact so reminders do not depend on one person.
3. Renew important names for several years to reduce the number of renewal events you need to manage.
4. Keep the transfer lock enabled and use two-factor authentication on your registrar account.
5. Track expiry dates independently of your registrar. A separate watchlist catches problems when registrar emails fail.
6. Check the status codes regularly. A sudden clientHold, redemptionPeriod or pendingDelete means you need to act immediately.

TLDix was built for exactly this. Add your names to a watchlist in your domain panel and you will receive expiry alerts well before the deadline, alongside SSL and hosting renewals. When you want to see the current state of any name, a quick WHOIS and RDAP lookup shows its expiry date, registrar and EPP status codes in one place.

Reading lifecycle signals in WHOIS and RDAP

WHOIS and its modern replacement, RDAP, expose the data you need to place a domain on the timeline. Look for these fields:

• Registry expiry date: the authoritative expiration date stored at the registry. Note that after auto-renewal, this date may already show next year even though the registrant has not paid.
• Domain status: one or more EPP codes. autoRenewPeriod, redemptionPeriod and pendingDelete each place the domain at a specific stage.
• Updated date: a recent change around the expiry date often indicates a registrar action such as deletion or hold.
• Registrar: tells you who to contact if you are the owner trying to recover the name.

If you are watching other people's names rather than your own, the expiring domains list on TLDix helps you spot names approaching the later stages of the cycle.