Quick answer: Keep a record of the registrar, responsible account holder, renewal date, payment method and recovery route. Confirm the renewal actually completes. Auto-renew is useful, but “someone probably has the card on file” is not much of a continuity plan.
Start here: Separate the four services · Copy the renewal record
For: small businesses with a domain registered by an owner, employee or agency. This is an operational checklist, not legal advice about ownership disputes. Registrar and domain-extension rules vary.

- Your domain, DNS, hosting and email may live in four places
- Choose the next action from who controls renewal
- Check control without passing passwords around
- Use your own reminder window, not only the registrar’s email
- Example: the agency handles renewal, but the business still checks
- A renewal check is not a reason to change DNS
- Copy this renewal record
- If it has already expired, contact the registrar promptly
- Useful detail: Verify a renewal notice outside the email
Your domain, DNS, hosting and email may live in four places
The company that designed your site is not necessarily your registrar. The company hosting the site may not run your email. Start by mapping the services instead of treating “the website account” as one thing.
On a small screen, swipe the table sideways.
| Service | What you are locating | Evidence to retain |
|---|---|---|
| Domain registration | The registrar or reseller account used to renew the name | Account reference, registrant details, expiry and renewal confirmation |
| DNS management | Where the domain’s destination records are maintained | Provider, authorised administrator and a protected record of the current setup |
| Website hosting | Where the website runs and who can recover it | Hosting account, renewal terms, backup and support route |
| Email service | Where business mailboxes and their administration live | Provider, administrator, billing owner and recovery contact |
One provider can supply several of these. Still record the responsibilities separately. A hosting invoice does not, by itself, show that your domain has been renewed or that the mail service is included.
Choose the next action from who controls renewal
The business controls the registrar account: have the authorised account holder verify the displayed expiry, auto-renew status, current payment route and recovery contact. Assign a second person to check the completed transaction and updated registration period. Keep the account reference in the inventory, but keep credentials out of it.
An agency or reseller controls it: ask for the registrar or reseller name, the domain’s displayed expiry, what the service agreement covers, who approves any separate charge and what renewal evidence the agency will send. Record a support route that still works if domain email stops. A maintenance invoice alone does not settle those questions.
Nobody can demonstrate control: treat this as an open continuity issue. Collect existing invoices and domain records, contact the provider through its verified support route and involve the authorised business decision-maker. Do not guess credentials or move DNS while ownership is unresolved.
Expiry is close or has passed: make a direct provider status check the next task. Ask what action and deadline apply to this exact extension and account. Keep website, DNS and email changes separate so the team can tell whether renewal itself succeeded.
Check control without passing passwords around
Ask the responsible person to demonstrate access through the provider’s official account process. Confirm who can renew, update contact details and obtain support. A screenshot of a dashboard is useful evidence of a moment in time, not a substitute for a recovery process.
- Responsible account holder: identify whether the account belongs to the business, an individual or an agency, and document the arrangement.
- Authorised access: use the provider’s supported delegation where available. Keep credentials and recovery codes in an approved password manager, not the shared inventory.
- Recovery contact: check that it is current, controlled by an authorised person and accessible if the main website or domain email fails.
- Backup person: document who can act when the usual owner is away and how that access is approved.
If account ownership or authority is disputed, pause changes and involve the provider and the appropriate business or legal decision-maker. Do not try to solve an ownership problem by resetting another person’s account.
Use your own reminder window, not only the registrar’s email
ICANN’s renewal guidance explains expiry notices and the importance of current contact details. Requirements for generic domains should not be assumed to cover every country-code extension in the same way. Check your registrar’s terms for the exact domain.
Our suggested internal schedule: review critical domains 60 days before expiry, verify renewal arrangements 30 days before, then escalate anything unconfirmed at 14 days. These are proposed business checkpoints, not provider deadlines or a guarantee that waiting is safe.
- At the first review: decide whether the business still needs the domain, identify dependencies and confirm the responsible person.
- Before renewal is due: check the actual renewal price, currency, payment method and auto-renew setting. Confirm when the provider plans to collect payment.
- After payment or renewal: inspect the completed transaction and the provider’s updated registration period. A queued payment or an enabled switch is not completion.
- If confirmation is missing: contact the registrar or reseller through a verified support route. Keep the issue open until the provider clarifies the status.
Put the reminders in a calendar the team already uses. Another unmonitored dashboard is just a more decorative way to forget.
Example: the agency handles renewal, but the business still checks
Fictional example: a cleaning company pays its agency for hosting and maintenance. The domain sits in an agency-managed account and expires on November 30. The owner assumes the monthly fee covers everything.
The operations manager asks for the registrar, current expiry, renewal scope and responsible contact. The agency confirms that domain renewal is billed separately. They agree who approves that bill and what confirmation will be sent after renewal.
The business record now contains the agency’s normal contact and escalation route, the renewal due date and the evidence required to close the task. It does not contain the agency’s master password or other clients’ details.
This can be a workable arrangement. Immediate transfer is not automatically the safest next step, especially close to expiry. First remove uncertainty about renewal and access; plan a change of provider separately if the business wants one.
A renewal check is not a reason to change DNS
Do not change nameservers, delete records or move hosting just to tidy up the inventory. Those are separate changes that can affect the website and email. Record the current state and assign an authorised technical owner before planning them.
If you are changing agencies, use a controlled handover: identify which accounts stay where, what access changes and how the service will be tested afterwards. Keep a way to reach support outside the affected domain.
For a site move, use a separate migration and URL-mapping plan. Domain renewal, DNS changes and page redirects are related responsibilities, but they are not interchangeable tasks.
Copy this renewal record
- Domain / business purpose: name, active service and whether customers still use it.
- Registrar or reseller: provider and verified account or support reference.
- Responsible people: billing owner, authorised administrator and backup contact.
- Dates: displayed expiry, expected renewal transaction and internal review dates.
- Payment: renewal price and currency, payment-method owner and confirmation status. Do not include full card details.
- Dependencies: website, email, redirects, integrations and account-recovery addresses that rely on the domain.
- Evidence: completed renewal confirmation, updated registration period and next check.
Use simple statuses: confirmed, open or not applicable. “Auto-renew enabled, payment not yet checked” remains open. “Paid, updated registration period confirmed” is a stronger completion record.
If it has already expired, contact the registrar promptly
Follow the registrar’s current recovery process and ask what options apply to the domain’s present status. Do not rely on a generic grace-period countdown from a blog. Costs, timing and recovery availability can depend on the extension, provider and stage.
ICANN’s renewal overview explains why keeping the registration current matters and that ICANN cannot simply transfer an expired name back to you. Preserve the relevant account and payment evidence and keep customers informed through a working channel.
Next: add this record to your website handover checklist. When budgeting, keep domain and email costs separate in your hosting comparison.
Official guidance checked September 29, 2026. The internal schedule, example and record format are editorial recommendations, not registrar-specific guarantees.
Useful detail: Verify a renewal notice outside the email
ICANN says it does not send registrants domain-renewal requests and advises contacting the sponsoring registrar about a suspicious notice.
When a notice creates urgency, check the domain through your known registrar account instead of following the email’s payment link. A logo is not a confirmation of who controls renewal.
Try this:
- Use the registrar address already recorded in your domain register.
- Check the domain’s actual expiry and renewal state there.
- Record the verified next action; ask the registrar about an unfamiliar invoice before paying it.
Source: ICANN: fraudulent renewal messages. Checked October 3, 2026. The practical check is a PSL suggestion.

