Skip to main content
ShieldMarc
100% free, no sign-up needed

Free Domain Expiry Checker: Check Any Domain's Expiration Date

Enter any domain below to instantly check its expiry date, registration details, status codes, DNSSEC, and renewal health. Powered by RDAP, the modern replacement for WHOIS.

Focused on renewal timelines and registration health. Need ownership and registrar details instead? Try the WHOIS Lookup tool.

New to domain management? Read our Domain Expiry and WHOIS guide for a full explanation.

What is a domain expiry check?

Every domain name has a registration period, typically 1 to 10 years. When that period ends, the domain expires and can be lost. A domain expiry check queries the authoritative registration database (RDAP) to show you exactly when your domain will expire, its current status, and whether anything is blocking renewal. Because it also flags renewal-blocking status codes, it doubles as a domain renew checker, not just an expiry date lookup.

Is the domain still valid?

“Valid” can mean three different things, and they often disagree. A domain can be registered, meaning a record for it exists at the registry. It can be inside its paid registration period, meaning the expiry date has not yet passed. And it can be resolving, meaning nameservers are delegated and DNS is answering. A domain in redemption is still registered but is outside its paid period. A domain carrying inactive or serverHold may be fully paid up and still not resolve. This checker answers the first two questions: it reads the registry record, so it tells you whether the domain is registered and when its paid period ends. It lists the nameservers the registry holds, but it does not query them, so it is not a test of whether the website or mail is working right now.

How to check when a domain expires

There are three practical ways to find a domain's expiry date. They do not always agree, so it helps to know which one is authoritative.

  1. Use the checker above. Enter the domain and it queries the registry over RDAP, then shows the expiry date, the number of days remaining, the registrar of record, and any status codes that affect renewal. There is nothing to install and no sign-up.
  2. Read your registrar's control panel.This is the fastest route if the domain is yours, but the date shown is the registrar's billing view rather than the registry record. It can differ: a registrar may render the date in local time when the registry holds a UTC timestamp, may show a renewal it has taken payment for but not yet passed to the registry, or may display its own grace-period deadline instead of the expiry date itself. When the two disagree, the registry record is the one that governs the grace, redemption and deletion deadlines.
  3. Query it from the command line. Legacy WHOIS still works: whois example.com returns free-form text whose layout varies by registry, so it is awkward to parse reliably. RDAP is the structured replacement, and curl -L https://rdap.org/domain/example.com redirects to the right registry server and returns JSON. The expiry date is the event with an action of expiration.

Understanding Domain Status Codes

Domain status codes (also called EPP status codes) indicate the current state and restrictions on a domain. Understanding these codes is critical for maintaining domain security:

StatusMeaning
clientTransferProhibitedTransfer lock is enabled (recommended)
clientDeleteProhibitedDomain is protected from accidental deletion
clientRenewProhibitedRegistrar has blocked renewal. Contact them immediately
serverHoldDNS suspended by registry. Domain will not resolve
redemptionPeriodDomain expired and deleted, but can still be restored at extra cost
pendingDeleteDomain is queued for deletion and cannot be recovered
autoRenewPeriodRegistry auto-renewed the domain. The registrar can still cancel it within the grace period
serverRenewProhibitedRegistry has blocked renewal. Your registrar cannot clear this one
inactiveNo nameservers are delegated, so DNS will not resolve

Domain redemption period and what each status code means

Those codes are not arbitrary. Most of them appear at a predictable point in the months after an expiry date, so the code a lookup returns tells you roughly how much time is left. For a typical gTLD such as .com, the lifecycle runs as follows.

  • Day 0. The expiry date passes. Some registrars stop the domain resolving that day; others leave it up through the grace period.
  • Days 1 to 30, registry maximum 45. The registrar grace period. You can normally still renew at the standard price, and this is where autoRenewPeriod usually shows up.
  • From roughly day 26. Some registrars begin auctioning expiring names well before they are actually deleted.
  • Around days 30 to 60. redemptionPeriod. The registrar has deleted the domain and it stops resolving, but it can still be restored for a fee for about 30 days.
  • The final five days. pendingDelete. Recovery is no longer possible, and the name is released roughly 70 to 80 days after expiry.
  • .uk domains run to a different clock. Nominet keeps the domain renewable at the standard price for 90 days, sends a suspension warning at day 23, suspends it at day 30, and drops it at day 95.

Why Domain Expiry Monitoring Matters

  • Prevent service outages: An expired domain means your website, email, and all services go offline instantly.
  • Avoid domain hijacking: Expired domains can be registered by anyone, including bad actors who use them for phishing.
  • Detect renewal blocks: Status codes like serverRenewProhibited can prevent automatic renewal and need immediate action.
  • Protect brand reputation: Losing a domain damages customer trust and SEO rankings that took years to build.
  • Manage portfolios: Organisations with multiple domains need a single view of all upcoming renewals.

What is RDAP?

RDAP (Registration Data Access Protocol) is the modern, ICANN-mandated replacement for WHOIS. Unlike legacy WHOIS which returns unstructured text, RDAP returns structured JSON over HTTPS, providing reliable and standardised domain registration data. Our tool uses RDAP exclusively for the most accurate results.

Domain expiry monitoring: tracking renewals across a portfolio

Checking one domain is easy. Tracking fifty is a different problem, and the failure is rarely that nobody knew the date. It is that the reminder went to a mailbox nobody reads any more.

Auto-renew is not a guarantee. Most registrars switch it on by default and charge a saved card shortly before expiry, but it fails quietly when the card has expired, the billing contact has left, or the account email is out of date. Nothing bounces back to you. The registry-side evidence that a renewal actually happened is the autoRenewPeriod status, not a toggle in a control panel.

Treat the two renewal holds differently. clientRenewProhibited is usually routine. Registrars commonly apply it immediately after a successful renewal as a protective lock, so on its own it is not a reason to act; it matters only if the domain later fails to renew on schedule. serverRenewProhibited is the serious one, because the registry has blocked renewal and your registrar cannot clear it.

Use more than one threshold.A single reminder is a single point of failure. Checking at 90, 30 and 7 days gives you a planning warning, a chasing warning and a last call, which matters when a renewal needs a purchase order or a client's approval. Ninety days is also the buffer the Security Grade expects at Level 4.

MSPs have an extra problem.The domain usually belongs to the client, not to you. You may not be the registrant, may not hold the registrar login, and will not receive the registrar's expiry notices, yet you are the one who gets called when mail stops arriving. Reading the registry record directly is the only view of a client portfolio that does not depend on having an account with every registrar involved.

ShieldMarc monitors domain expiry dates automatically alongside DMARC, SPF, SSL/TLS and DNS health, with alerts for upcoming expiry, renewal blocks and status code changes: start a free trial.

Want the full picture?

Our Security Grade scans domain registration and expiry alongside DMARC, SPF, SSL/TLS, and DNSSEC across your primary and alternate brand domains in one click.

Frequently Asked Questions

What happens when a domain expires?

When a domain expires, it typically goes through several phases: a grace period (0 to 45 days, varies by registrar) where you can still renew at normal cost, a redemption period (around 30 days) where restoration is possible but expensive, and finally pendingDelete where the domain is released back to the public pool.

How long after expiry can I recover my domain?

For most gTLDs such as .com, .net and .org you can usually renew at the normal price during your registrar's grace period (commonly around 30 days, registry maximum 45), then restore it for a fee during the 30-day redemptionPeriod, after which a 5-day pendingDelete phase makes recovery impossible, roughly 70 to 80 days in total. For .uk domains, Nominet lets you renew at the standard price until precisely 90 days after expiry, with the domain dropped at day 95. The safest and cheapest window is the initial grace period, so act as soon as the expiry date passes.

Do domains renew automatically?

Most registrars switch auto-renew on by default and attempt to charge your saved payment method shortly before expiry, but it fails silently if the card has expired or your account email is out of date. ICANN's Expired Registration Recovery Policy also requires registrars to email you at least two reminders (roughly one month and one week before expiry), though this rule does not apply to .uk, where Nominet operates its own notice schedule. Never assume auto-renew worked; check the expiry date independently.

Is this a domain renew checker as well as an expiry checker?

Yes. As well as showing when a domain expires, this domain renew checker reads the registration status codes that affect renewal, such as clientRenewProhibited or a registry serverRenewProhibited hold, so you can see at a glance whether the domain will renew cleanly or needs action before the deadline. It works for any gTLD and for .uk domains, with no sign-up needed.

When do .uk domains get deleted after expiry?

A .uk (or .co.uk) domain stays fully operational and renewable at the standard price for 30 days after expiry; Nominet emails a suspension warning at day 23 and suspends the domain at day 30, at which point it stops resolving. It can still be renewed until precisely 90 days after the expiry timestamp, then enters a five-day pending-delete phase and is dropped at expiry plus 95 days, at a published UTC time listed in Nominet's daily drop lists. Once dropped, it is available for anyone to register on a first-come, first-served basis.

How much does it cost to recover a domain in redemption?

Redemption (restore) fees are set by registrars and typically range from about £55 to £120 (US$70 to $150+) on top of the normal renewal price (GoDaddy charges around US$80, for example), plus a US$0.20 ICANN fee on gTLDs. By contrast, Nominet charges no redemption premium on .uk domains: you renew at the standard price at any point up to 90 days after expiry, although some registrars add their own late-recovery admin fees. Renewing during the initial grace period avoids these charges entirely.

Can someone buy my domain the moment it expires?

Not immediately. An expired domain passes through grace, redemption and pendingDelete phases before it is released, typically 70 to 80 days for a .com and 95 days for .uk. However, many registrars auction expiring domains well before they drop (GoDaddy lists expired names at auction from around day 26), and desirable names are drop-caught within seconds of release. Treat the post-expiry window as an emergency buffer, not a safety net.

What happens to my website and email when my domain expires?

Once the domain stops resolving (which can happen on expiry day at some registrars, and happens at day 30 for suspended .uk domains), your website goes offline and your MX records disappear, so inbound email bounces rather than queueing. Anything tied to the domain breaks too, including Microsoft 365/Google Workspace sign-ins and SPF, DKIM and DMARC authentication, and some registrars replace your site with a parking page during the grace period. Recovery restores the domain, but DNS propagation means services can stay degraded for hours afterwards.

How do I enable transfer lock on my domain?

Log in to your domain registrar and look for "Domain Lock", "Transfer Lock", or "Registrar Lock" in the domain settings. Enable it to set the clientTransferProhibited status, which prevents unauthorised transfers. This is a Level 4 (Resilient) requirement in the Security Grade.

Why does the checker show a different registrar than expected?

Some registrars use a parent or reseller relationship. The RDAP data shows the registrar of record as listed with ICANN, which may be the backend provider rather than the brand you purchased through. This is normal and does not affect domain ownership.

How far in advance should I renew my domain?

Enable auto-renewal and renew at least 90 days before expiry. The Security Grade requires 90+ days remaining at Level 4, ensuring a comfortable buffer against renewal failures or payment issues.