Who controls your domain name, and when does it expire?

Most business owners never think about their domain name until the morning the website shows a parking page and the office inbox goes quiet. In our experience the domain was usually registered years ago by a web designer who has since moved on, or by an employee who set it up under their own login and paid with a payment method that expired long ago. The renewal notices went to an address nobody reads, the charge failed, and the domain name expired without anyone in the building knowing it was due. Below is how to find out who controls yours and when it runs out, and how to put it somewhere safe this week.

What happens when a domain name expired without warning

Your domain is the address everything else hangs on. The website points to it, and so does your company email, because an address like [email protected] only works while the domain is active. When the registration lapses, the registrar stops pointing the name at your website and your mail server, so both stop at the same time. Customers get an error page or a placeholder full of ads, and emails sent to you bounce back or disappear, which means quotes, invoices, booking requests and password reset messages never arrive.

Most registrars give a window after expiry where the original owner can still renew, sometimes with an extra recovery fee, but the rules and the length of that window vary from one company to the next. If nobody acts, the name can be released and bought by someone else, including people who buy lapsed business domains to sell them back to the owner. Getting it back at that point is slow and expensive, and sometimes it doesn't happen at all.

The awkward part is that the domain usually belongs, on paper, to whoever registered it. If that's a former designer or an ex-employee, you may need their help just to renew your own address.

Find your registrar and the expiry date

Start with a free public lookup. Go to the ICANN lookup site at lookup.icann.org, type your domain without the "www", and search. For a .com or .net address you'll see the registrar's name, the creation date, the expiry date and a list of status codes. For addresses ending in .co.uk or .uk, the UK registry, Nominet, offers a similar lookup on its own website that shows the registrar and the renewal date.

Write down the four things that matter:

• The registrar, which is the company the domain is registered with (often a different company from the one that hosts your website).
• The expiry date, usually labeled something like "Registry Expiry Date".
• The status codes, where "clientTransferProhibited" means a transfer lock is on.
• The name servers, which show who controls where the domain points.

The owner's name and email are usually hidden behind a privacy service, which is normal. What you're checking is the date and the company. If the expiry is only a few weeks away and you don't know who has the login, that becomes this week's job, ahead of anything else on the website.

Then search your old email and invoices for the registrar's name. A renewal receipt or a welcome message often tells you which person's account holds the domain, and that's who you'll need to contact.

Move the domain into an account the business owns

Here's what good looks like when you're done: the domain sits in an account opened in the business's name, the login email is one the owner controls, and a second trusted person also knows how to get in.

If the domain is in someone else's account, you have two routes.

1. Ask for an account change at the same registrar. Many registrars let the current account holder move a domain into another account with them. You open your own account at that registrar and send the holder your account details, and they make the move from their side. It's usually quick and the website stays online throughout.
2. Transfer it to a registrar you choose. The current holder unlocks the domain and gives you an authorization code (sometimes called an EPP or transfer code). You start the transfer from your new account, pay for a renewal, and approve the confirmation email. The renewal is normally added to the existing term, so you don't lose time already paid for.

Ask in writing and keep the request simple: you want the domain moved into the business's account, and you're happy to cover any fee. Most former designers are glad to hand it over. If the person can't be reached, registrars have a process for ownership disputes, and you'll need to show that the business is the rightful holder with documents such as invoices, old renewal receipts, company registration papers and records of the website running under your business name.

Try not to move the domain while other work is underway. If your email or website is being rebuilt at the same time, finish one job first, and leave the name servers alone during a transfer unless you know exactly where they should point.

Turn on auto-renew and the transfer lock

Once the domain is in the business's account, open its settings and check two switches.

Auto-renew should be on, with a current payment method saved to the account. Then look at the expiry date on that payment method too, because auto-renew does nothing when the charge fails. Put a reminder in your calendar a month before the payment details run out. Many owners also renew for several years at once, which gives more breathing room if something slips.

The transfer lock (sometimes called registrar lock or domain lock) should be on as well. It stops anyone from moving the domain to another registrar without first unlocking it inside your account. After you switch it on, run the public lookup again and look for "clientTransferProhibited" in the status list. Seeing it there means the lock is working.

While you're in the account, turn on two-step sign-in. A lock doesn't help much if someone can guess the password and switch it off.

Keep the recovery details current

Most of the domain trouble we come across starts with an email address nobody checks. Open the account's contact settings and look at the registrant, admin, technical and billing contacts. Each one should be an address the business controls and someone actually reads.

Keep at least one of those addresses on a different domain from your own, such as a shared business inbox with a large email provider. If your domain ever lapses, mail to your own domain stops arriving too, including the renewal warnings meant to save it.

Then check the recovery options on the account itself: the backup email and phone number, plus wherever the two-step backup codes are stored. Keep the login and the backup codes in the business's password manager or in a sealed envelope in the office safe, and make sure a second trusted person knows where to find them.

Twice a year, do a short check: log in, confirm the expiry date, confirm auto-renew and the lock are on, and confirm the contact addresses still work. When a staff member who had access leaves, add the domain account to your exit checklist, so you change the password and confirm that none of the contact addresses are theirs.

How Pixedi handles this in Care

In the Care plan, at $250 a month, watching the business's online accounts is part of the routine, and the domain is one of the first things we check. We confirm who holds the registrar account and when the domain expires, that auto-renew and the lock are on, and that the recovery contacts point to the business. If the domain sits in a former designer's account, we help the owner move it into one the business owns, and upcoming renewals or changes show up in the one-page monthly report.

Today, open lookup.icann.org, type your domain, and write the registrar's name and the expiry date on a note at your desk. Then try logging in to that registrar with the business's email, and if you can't get in, send a short written request to whoever set the domain up asking them to move it into an account in the business's name.

Sources

1. ICANN Registration Data Lookup

Ask AI about this article

Opens the assistant in a new tab with this page as the source.

ChatGPTClaudePerplexityGemini