Free Domain Expiry & Renewal Checker
Enter any domain below to instantly check its expiry date, registration details, status codes, DNSSEC, and renewal health. Powered by RDAP, the modern replacement for WHOIS.
Focused on renewal timelines and registration health. Need ownership and registrar details instead? Try the WHOIS Lookup tool.
New to domain management? Read our Domain Expiry and WHOIS guide for a full explanation.
What is a domain expiry check?
Every domain name has a registration period, typically 1 to 10 years. When that period ends, the domain expires and can be lost. A domain expiry check queries the authoritative registration database (RDAP) to show you exactly when your domain will expire, its current status, and whether anything is blocking renewal.
Understanding Domain Status Codes
Domain status codes (also called EPP status codes) indicate the current state and restrictions on a domain. Understanding these codes is critical for maintaining domain security:
| Status | Meaning |
|---|---|
| clientTransferProhibited | Transfer lock is enabled (recommended) |
| clientDeleteProhibited | Domain is protected from accidental deletion |
| clientRenewProhibited | Registrar has blocked renewal. Contact them immediately |
| serverHold | DNS suspended by registry. Domain will not resolve |
| redemptionPeriod | Domain expired and deleted, but can still be restored at extra cost |
| pendingDelete | Domain is queued for deletion and cannot be recovered |
Why Domain Expiry Monitoring Matters
- Prevent service outages: An expired domain means your website, email, and all services go offline instantly.
- Avoid domain hijacking: Expired domains can be registered by anyone, including bad actors who use them for phishing.
- Detect renewal blocks: Status codes like serverRenewProhibited can prevent automatic renewal and need immediate action.
- Protect brand reputation: Losing a domain damages customer trust and SEO rankings that took years to build.
- Manage portfolios: Organisations with multiple domains need a single view of all upcoming renewals.
What is RDAP?
RDAP (Registration Data Access Protocol) is the modern, ICANN-mandated replacement for WHOIS. Unlike legacy WHOIS which returns unstructured text, RDAP returns structured JSON over HTTPS, providing reliable and standardised domain registration data. Our tool uses RDAP exclusively for the most accurate results.
Monitor Domain Expiration Continuously
A one-off check tells you where things stand today, but domains can slip through the cracks when you manage dozens of them. Continuous domain expiration monitoring gives your IT team peace of mind by watching every domain on autopilot and alerting you well before anything expires.
ShieldMarc monitors domain expiration dates automatically alongside DMARC, SPF, SSL/TLS and DNS health. You get a single dashboard showing every domain your organisation relies on, with alerts for upcoming expiry, renewal blocks, and status code changes.
This free tool is perfect for quick checks. If you need automated expiry alerts, renewal block detection, and a unified monitoring dashboard for your IT team, start a free trial. Get notified before any domain expires, with up to 90 days free.
Want the full picture?
Our Security Grade scans domain registration and expiry alongside DMARC, SPF, SSL/TLS, and DNSSEC across your primary and alternate brand domains in one click.
Frequently Asked Questions
What happens when a domain expires?
When a domain expires, it typically goes through several phases: a grace period (0 to 45 days, varies by registrar) where you can still renew at normal cost, a redemption period (around 30 days) where restoration is possible but expensive, and finally pendingDelete where the domain is released back to the public pool.
How do I enable transfer lock on my domain?
Log in to your domain registrar and look for "Domain Lock", "Transfer Lock", or "Registrar Lock" in the domain settings. Enable it to set the clientTransferProhibited status, which prevents unauthorised transfers. This is a Level 4 (Resilient) requirement in the Security Grade.
Why does the checker show a different registrar than expected?
Some registrars use a parent or reseller relationship. The RDAP data shows the registrar of record as listed with ICANN, which may be the backend provider rather than the brand you purchased through. This is normal and does not affect domain ownership.
How far in advance should I renew my domain?
Enable auto-renewal and renew at least 90 days before expiry. The Security Grade requires 90+ days remaining at Level 4, ensuring a comfortable buffer against renewal failures or payment issues.