Most domain losses begin with an expired payment method, an abandoned email account or unclear ownership. A simple control system is more reliable than hoping auto-renewal will work.
Before you make a change
Do not wait for a domain to stop resolving. If expiry is close or contact details are inaccessible, contact the registrar immediately and preserve all invoices and account evidence.
Put the domain in the right hands
The registrar account and registrant record should reflect the business’s legitimate control. Do not let a temporary developer, marketing agency or former employee remain the only person who can renew or recover the name.
Use layered renewal controls
- Enable auto-renewal where appropriate.
- Keep a valid payment method and review expiry notifications.
- Record the expiry date in a separate business calendar.
- Review the domain register quarterly.
- Use a monitored recovery address independent of the domain itself.
- Assign a second authorised person who knows the recovery process.
Protect the account
| Control | Purpose |
|---|---|
| Unique password | Limits damage from another breached service |
| Multi-factor authentication | Reduces account takeover risk |
| Registrar lock where available | Makes unauthorised transfer harder |
| Change alerts | Provides early warning of edits |
| Restricted access | Reduces accidental DNS or contact changes |
Understand expiry without relying on grace periods
Registries and registrars may provide post-expiry stages, but the timing and available actions vary. Treat the published expiry date as the deadline. For .UK domains, check current Nominet and registrar procedures rather than assuming the domain will remain recoverable for a fixed period.
Run a recovery exercise
Once a year, confirm that the business can identify the registrar, receive a recovery message and reach support without the current administrator. Do not complete a password reset unnecessarily; the goal is to prove the route exists.
Plan for staff and supplier departures
A domain can be renewed successfully for years and still be operationally lost when the only administrator leaves. Include registrar access in employee and contractor offboarding. Transfer ownership of password-manager entries, remove old recovery methods, rotate credentials and confirm that invoices still reach a monitored finance or operations address.
Do not use an address on the same domain as the only recovery address. If the domain or its email service fails, the recovery message may become unreachable precisely when it is most needed.
Final publication check
- Renewal is monitored independently of auto-renewal.
- The recovery address works even if the domain email fails.
- A second authorised person can identify the registrar and recovery route.
- Departed staff and suppliers have been removed.
Sources and date checked
Technical and policy information was checked on 21 July 2026. Recheck provider-specific procedures before making a live change.
Keep the decision under your control
Retain the relevant accounts, source material, supplier terms and recovery information. Recheck changing prices, interfaces and rules before acting.