Losing a domain rarely takes anything dramatic. A missed renewal email, an expired card, or a contact address that stopped working years ago is enough. These are the rules I follow across my own domains so that never happens to me. None of them take long, and most you set once and forget.
1. Never use an email address on the same domain
The email address on your domain’s registration, the one your registrar writes to about renewals and transfers, should never be an address at that same domain. If you own example.com, don’t make [email protected] the contact for example.com.
Here’s why it matters. Under ICANN’s expired domain rules, registrars must send at least two renewal reminders before a generic domain expires, about a month and about a week out, and one more within five days after expiry. Those reminders go to the registrant. But after a domain expires, the registrar also has to interrupt its DNS, so the domain stops resolving. If the registrar deletes the name within eight days of expiry, that interruption starts the moment it expires. If your contact email lives on that domain, it can stop working just when the most urgent emails are being sent.
Use an address on a domain you’re not about to lose, or a big free provider like Gmail, and check that it still works.
2. Turn on auto-renew, and keep the credit card current
Auto-renew is the cheapest insurance in domains. It only works if the payment method behind it does, though, so update the credit card on file whenever yours is replaced or expires. An auto-renew that fails on an expired credit card is barely better than no auto-renew at all.
Add a backup payment method too, like a second credit card or PayPal. Registrars such as GoDaddy and Dynadot support this. At GoDaddy, if the payment method on an auto-renewal can’t be charged, it tries your backup methods instead. Dynadot lets you set a backup payment method for each domain’s auto-renewal. Either way, one declined or expired credit card doesn’t cost you a name.
Auto-renew doesn’t replace looking at your names. I still review my renewals in monthly batches, at least 30 days ahead, with a recurring reminder on my phone. In the first week of November, for example, I go through everything expiring in December. That’s how I decide which names to keep and which to drop, which I wrote about in how I decide whether to renew a domain or let it drop. The point is that dropping a name should always be a decision, never an accident.
3. Keep the registrar lock on
Your registrar can lock a domain against transfers. Behind the scenes, this sets a status called clientTransferProhibited, and ICANN describes what it does plainly: the registry rejects any request to transfer the domain to another registrar. To move it, you first ask your registrar to remove the lock, which is exactly the step a thief can’t take without getting into your account.
Leave it on unless you’re actively transferring the domain, and turn it back on afterwards. For a very valuable name, some registries also offer a Registry Lock service, a stronger lock set at the registry level. ICANN notes it takes longer to remove than the registrar’s own lock, which is the point.
You can check which locks a domain has by looking it up. I explained how in how to check when a domain expires, and the status codes show in the same lookup.
4. Protect the account, not just the domain
A registrar lock is only as strong as the account that controls it. Anyone who signs in as you can unlock a domain, change its contacts, and move it. So the account deserves the same care as your bank login:
- Turn on two-step verification, ideally with an authenticator app like Google Authenticator or Authy.
- Use a unique password that you don’t use anywhere else, kept in a password manager.
- Make sure the account’s own email address follows rule 1, too.
5. Keep your contact details current
Your registration details are how your registrar reaches you. Check them once a year: the name, the organization, the email address, and the phone number. If you’ve moved, rebranded, or changed email providers since you registered a name, the record may still have your old details.
6. Change contact details after a transfer, not before
This one catches people out. Under ICANN’s Transfer Policy, changing the registrant’s name, organization, or email address counts as a change of registrant. Unless you opt out before you make the change, and your registrar offers that option, the registrar then locks the domain against transfers to another registrar for 60 days.
So if you’re planning to move a domain to a new registrar, transfer it first and update the details afterwards. Do it the other way round, and you may be stuck at the old registrar for two months.
That rule is due to change. In June 2026, ICANN’s Board adopted a set of recommendations that remove the 60-day lock after a change of registrant data, and cut the lock after a new registration or a transfer from 60 days to 30. They still have to be implemented, so for now the 60-day lock applies. I’ll update this post when the new rules take effect.
7. Know what happens if you do miss a renewal
If a domain does expire, it’s usually not gone straight away. Registrars must let the owner renew during the period after expiry while the domain’s DNS is interrupted. Even after a generic domain is deleted, its registry must offer a 30-day Redemption Grace Period (sponsored domains are the exception), and during that time you can still redeem it through your registrar.
You shouldn’t count on any of that, but it’s worth knowing before you panic. If the domain expired just days ago, read can you transfer an expired domain before you renew it.
The short version
If you only do three things today, make them these: move the contact email off the domain itself, turn on auto-renew with a credit card that won’t expire soon, plus a backup payment method, and switch on two-step verification at your registrar. The rest you can do on your next monthly review.
Top photo: Jason Blackeye / Wikimedia Commons (CC0).
