A domain does not stop working the moment it expires, and it does not become available immediately either. What happens is a sequence of stages, each with different costs and different chances of getting it back.
Knowing the sequence matters because the price rises sharply partway through, and most people find out at the expensive end.
The stages
Expiry. The registration lapses. Many registrars stop the domain resolving at this point, so the site and mail go down immediately even though you can still renew normally.
Grace period: typically up to 30 days, though it varies by registrar and by TLD. You can renew at the normal price. This is where you want to notice.
Redemption period: usually 30 days after that. The domain can still be recovered, and it now costs a redemption fee on top of the renewal: often a hundred dollars or more, set by the registry rather than your registrar.
Pending delete, about five days. Nothing can be done. The domain is queued for release.
Released. Anyone can register it.
Roughly two months from expiry to available, and the affordable window is only the first month of that.
The site breaks before the domain is lost
Worth separating, because people assume they have a month of working site.
Most registrars stop resolution at expiry or shortly after. So the website goes down, mail stops arriving, and certificate renewal fails, while the domain is still perfectly recoverable for the normal fee.
Several unrelated things breaking at once with nothing changed on the server is worth checking the expiry date for, and it takes ten seconds:
whois example.com | grep -i expir
Recovering one
In the grace period: log in and renew. It is an ordinary renewal.
In redemption: contact the registrar. This is usually not self-service, it involves the redemption fee, and it can take several days to restore. Start immediately. The periods run on registry time and nobody extends them.
In pending delete: nothing works. Waiting for the release and trying to register it is the only option, and you are competing with services that do this automatically.
Why it happens, and it is rarely forgetfulness
Four causes account for nearly all expiries, and all four are preventable.
Auto-renewal was never on. It is off by default at many registrars, and it does not carry across a transfer. What to check after transferring explains that specifically.
The card expired. Auto-renewal with a dead card fails exactly like no auto-renewal.
The notices went to an address nobody reads: often one belonging to a developer or an employee who left.
The notices went to an address on the domain itself. Once the domain stops resolving, the warnings about it cannot be delivered.
That last one is the cruellest and the easiest to fix.
Preventing it, in five minutes
Turn on auto-renewal and confirm a valid payment method is attached. Enabling auto-renewal has the detail.
Set the registrant contact to an address you read, on a different domain.
Add domain expiry to your external monitoring, so a warning arrives from somewhere that does not depend on the domain working. Setting up uptime monitoring walks through adding that check.
And for anything important, register for several years at once. A domain paid until 2031 cannot lapse through a card problem in 2028.
Someone else registering it
A domain with any traffic or history is not sitting unnoticed. Expired domains are tracked, and valuable ones are registered within moments of release.
After that you are negotiating a purchase, at whatever price the new holder wants. There is no process that returns it to you because you had it first.
Trademark disputes exist and are slow, expensive, and only apply if you hold a mark. They are not a plan.
Registering an expiring domain you want
The same sequence from the other direction.
A domain listed as expired may still be in grace or redemption, where the current holder can take it back at any moment. Nothing is settled until it is released.
Backorder services attempt registration at the instant of release. They work sometimes, they cost money whether or not they succeed with some providers, and for a contested domain you are competing with many others doing the same thing.
Check the actual status in whois rather than trusting a listing site, and be prepared for it to be renewed by its owner in the meantime.
The parts that are not the domain
Recovering the registration does not restore anything else.
The hosting account may have been suspended or removed separately. Certificates issued during the lapse could not be renewed and need reissuing. And search engines that crawled during the outage saw a site that did not exist.
So a recovered domain is the start of the recovery rather than the end, check the DNS records survived, run certificate issuance again, and confirm mail is flowing before assuming it is over. What to Do When Your Website Goes Down walks through the checks.
Check yours now
Look up the expiry date of every domain you hold, confirm auto-renewal is on for each, and confirm the contact address is one you read and is not on the domain.
It takes a few minutes across a portfolio and it is the entire content of this article, applied before rather than after.
A domain can stop resolving for a second reason that looks identical and has nothing to do with payment. See What Happens When Domain Contact Details Are Unverified.