Underneath every ICANN domain lifecycle for a generic top level domain sits the same script, whether it’s a three character brandable .com or some niche .app nobody’s heard of yet. What differs is visibility. Most registrants never actually watch it play out, mostly because it happens quietly between a registrar and a registry long after anyone clicks “buy now.”
From the first day of registration to the moment a name either renews or slips back into the public pool, that’s what this guide walks through. Every number below comes straight from ICANN’s Expired Registration Recovery Policy and the standard registry agreements behind .com, .net, and .org. Not a registrar’s marketing page, not a forum thread, the actual contracts.
What the ICANN Domain Lifecycle Actually Covers
A standardized sequence of registration states a gTLD moves through is what the ICANN domain lifecycle really is, enforced through contracts ICANN holds with registries and registrars rather than through ICANN managing individual domains itself.
Three parties keep this machine running. Mix up their roles, which happens constantly, and most of the confusion around expired domains traces back to exactly that.
ICANN
Sets the policy floor, nothing more. The Expired Registration Recovery Policy and the Base Registry Agreement lay out mandatory minimums, the 30 day Redemption Grace Period being the clearest one, that every gTLD registry has to honor regardless of which company operates it.
The Registry
Runs the actual database sitting behind a given extension. Verisign operates .com and .net. Public Interest Registry handles .org. Each implements ICANN’s minimums through its own Registry Agreement, and a handful build extra structure on top of that baseline, though not by much in most cases.
The Registrar
The party that actually sells you the domain. GoDaddy, Namecheap, Mostdomain, and every other accredited registrar sits between registrant and registry, holding discretion over whatever ICANN leaves open. How long the Auto-Renew Grace Period runs is the biggest example of that discretion in practice.
The Full Lifecycle at a Glance
Six distinct states, from initial registration through either renewal or final deletion, make up a typical gTLD domain lifecycle, and each one carries a specific EPP status code that surfaces in any whois ICANN or RDAP lookup.
| Stage | EPP Status Code | Typical Duration | Who Can Still Act |
| Active registration | ok | 1 to 10 years | Registrant, no restrictions |
| Add Grace Period | addPeriod | 5 calendar days | Only the registrar, and only for a refundable delete |
| Auto-Renew Grace Period | autoRenewPeriod | 1 to 45 days, registrar’s call | Registrant, standard renewal price |
| Redemption Grace Period | redemptionPeriod | 30 days, fixed by ERRP | Registrant only, and it costs a premium |
| Pending Delete | pendingDelete | 5 calendar days | Nobody |
| Deleted, available | none, dropped from zone | Immediate | Anyone, first come first served |
Stack the two longest windows on top of each other and a domain that expires without a single renewal attempt can take close to 80 days before it actually clears the registry database for good. Not exactly overnight.
Stage 1: Registration and the Add Grace Period
A 5 day window immediately following registration, during which the registrar can delete the domain and get a full refund from the registry, is what the Add Grace Period actually is.
Sounds like a minor technical footnote. It wasn’t always one.
- Built originally so registrars could fix genuine mistakes without anyone losing money, typos, duplicate charges, obvious fraud
- Abused heavily through the mid 2000s by a practice called domain tasting, where speculators registered names in bulk, ran ad revenue tests for four days, then deleted whatever underperformed for a full refund right before day five hit
- Reined in eventually by ICANN’s AGP Limits Policy, effective 1 May 2009, capping refundable deletions at whichever is greater between 10 percent of a registrar’s monthly net new registrations or 50 domains
Registration itself runs anywhere from 1 to 10 years, a ceiling the Base Registry Agreement sets and nobody negotiates around. Renew a 5 year term partway through, though, and the total just stretches back out toward that 10 year cap from wherever today happens to sit.
Stage 2: Staying Active, and the Grace Windows Buyers Rarely Hear About
Two more grace periods apply while a domain just sits in ordinary, healthy use. Both matter more to anyone flipping or transferring domains than the expiration drama most people fixate on.
Five days. That’s what the Renew/Extend Grace Period gives a registrar to reverse a renewal transaction and get credited back, mirroring the Add Grace Period but for renewals rather than brand new registrations. The Transfer Grace Period works the same way for registrar to registrar moves. Also five days.
A rule trips up more people underneath both of these than it probably should. ICANN’s Inter-Registrar Transfer Policy blocks any domain from moving to a new registrar for 60 days after initial registration, then again for another 60 days after any completed transfer. Move it earlier and the request simply fails, no matter how valid the authorization code looks on paper. WHOIS usually flags this window as clientTransferProhibited or serverTransferProhibited for as long as the lock holds.
Stage 3: What Happens the Moment a Domain Expires
Nothing vanishes the second an expiration date passes. A domain enters the Auto-Renew Grace Period instead, a window running anywhere from 1 to 45 days depending entirely on the registrar’s own terms of service, not on some fixed ICANN number.
A handful of things happen at once during this stretch. The registry has technically auto-renewed the domain already, even though nobody’s paid for it yet. DNS resolution can legally be interrupted for up to 8 days as part of the required notice process, so a site and its email might go dark before the domain is genuinely at risk of disappearing. Renewing still costs the standard fee, no penalty attached at this point. And some registrars quietly send names to auction during this exact window under their own terms, which is precisely why reading that fine print once, well before anything expires, tends to save a lot of panic later on.
Right here is usually where drop catching platforms start tracking a name, since one clearing this window without renewal is heading somewhere fairly predictable next.
Stage 4: Redemption Grace Period, the Last Legal Chance to Reclaim It
RGP, short for Redemption Grace Period, is a mandatory 30 day window set by ICANN’s ERRP that starts the moment a registrar formally deletes an unrenewed domain. The last point where the original registrant can still pull the name back, essentially.
This stage runs noticeably stricter than the one before it, for a few reasons.
- DNS resolution gets disabled entirely for the full 30 days, not just interrupted here and there like in the prior stage
- Transfers to another registrar are blocked outright during RGP, aside from narrow exceptions carved out for ICANN-approved bulk transfers
- Restoring the domain requires a redemption fee on top of the normal renewal price, and that fee is often the steepest cost anywhere across the entire cycle, sometimes ten times the base renewal rate depending on the registrar
- Sponsored gTLDs like .museum, .aero, and .coop sit exempt from offering RGP at all, so a domain under one of those can move straight from expiration toward deletion with no safety net waiting
Hardly anyone actually checks this, but it’s worth knowing anyway: the registry’s public record has to explicitly flag a domain as sitting in RGP for the entire time it stays in that state.
Stage 5: Pending Delete, the 5-Day Lockout Nobody Can Touch
A fixed 5 calendar day status following an unredeemed RGP is what Pending Delete is, and during it, nobody involved (not the former registrant, not the registrar, not even the registry) can renew, transfer, or touch the domain in any way.
Think of it as a hard buffer. A cooling off period baked into the registry’s own database logic, not a courtesy extended to anyone out of goodwill. Once those five days run out, the domain gets purged from the registry, dropped from the zone file, and the name string opens up for whoever claims it next.
Stage 6: Deletion, and Where the Domain Actually Goes Next
One of three routes opens up once a domain clears Pending Delete, and which route it takes depends mostly on how much demand the name attracted before it even dropped.
General Availability
Standard first come, first served registration, available at whichever registrar gets there first, is what awaits any name nobody flagged in advance.
Auction
Rarely does a name with recognizable value make it as far as general availability. Registrars and third party platforms tend to route those into aged domain auctions the moment deletion clears, sometimes earlier, mostly because bidding extracts more value than a flat registration fee ever could.
Backorder or Drop Catching
A standing order gets placed on a domain before it drops, and then the service races to register it the instant the registry actually releases it, sometimes within the same second the status flips.
Whichever route a domain takes, it re-enters Stage 1 as a fresh registration the moment someone claims it. New owner, same cycle, starting over. Most people only get comfortable with what happens next once they’ve actually done it themselves, which is basically why so many separate guides exist, some walking buyers through how to buy expired domain names without accidentally inheriting a stranger’s penalty history, others covering what transferring an expired domain actually looks like once a win clears.
EPP Status Codes Mapped to Each Lifecycle Stage
At least one EPP status code, visible through any whois ICANN lookup, sits on every domain, and matching that code against the table below tells you exactly where the domain sits in its lifecycle without tracking dates by hand.
| EPP Status Code | Lifecycle Stage | What It Signals |
| ok | Active registration | Nothing restricted, resolves normally |
| addPeriod | First 5 days after registration | Registrar can still pull a refund on delete |
| autoRenewPeriod | Auto-Renew Grace Period | Expired, auto-renewed by the registry, still unpaid |
| clientTransferProhibited | Any active stage, set at the registrar’s discretion | Transfer locked, most often that 60 day post-registration window |
| redemptionPeriod | Redemption Grace Period | Deleted, DNS switched off, restorable by the original registrant and nobody else |
| pendingDelete | Pending Delete | Fully locked down, just counting toward purge |
Codes stack. A single domain often carries several at once, and ok paired with clientTransferProhibited turns up more than any other combination on names a registrant actually bothers protecting.
Why gTLDs Follow This Lifecycle and ccTLDs Don’t
Generic top level domains specifically, .com, .net, .org, plus the newer batch like .app or .xyz, are what this entire lifecycle applies to, since ICANN’s contracts bind gTLD registries directly. Country code domains answer to somebody else entirely.
A national registry that ICANN doesn’t contract with the same way gets delegated a ccTLD like .uk, .de, or .ae, so each one writes its own rulebook. Nominet runs .uk on its own schedule. DENIC does the same for .de, and the two don’t line up at all. Some ccTLDs skip a redemption window altogether and delete straight to availability, no in between step. None of that breaks any rule. It just sits outside the boundary of what ICANN’s authority actually reaches. That boundary stops precisely at the gTLD space ICANN directly contracts with, at least under the current agreements.
gTLDs, ccTLDs, and the newer top level domain categories differ structurally in ways this article doesn’t have room for. That distinction gets covered in more depth elsewhere on this site.
Why This Timeline Actually Matters Beyond the Technical Detail
Where exactly a domain sits in this lifecycle changes what a buyer, seller, or portfolio manager should actually do next. Guess wrong at any single stage, and it tends to cost real money, not just time.
Buyers watching a target domain benefit from knowing the difference. A name still inside its Auto-Renew Grace Period could get reclaimed any day. One already deep in Pending Delete, though, sits genuinely locked down, worth timing a backorder around instead of refreshing WHOIS every hour out of anxiety.
Sellers letting a domain lapse on purpose can lean on the Add Grace Period to correct an accidental registration without eating the cost. Only if they catch it inside those first five days, though.
Portfolio managers scanning WHOIS status codes across dozens of names can spot one drifting toward accidental expiration before its Auto-Renew Grace Period even kicks in, since clientTransferProhibited by itself says nothing about renewal status. Age and authority signals come into play here too, probably more than most buyers initially assume. Anyone hunting for aged domains that carry real backlink history, the kind covered in guides on how to buy old domains with PageRank without getting penalized, is essentially reading this same lifecycle backward: looking for names that survived long enough to build something genuinely worth acquiring.
None of this replaces actually reading a registrar’s specific terms before buying or transferring anything expired. ICANN sets the floor. Registrars build their own rules on top of it, and that gap between the two is exactly where most surprises happen.
FAQ
How long does it take for a domain to fully expire and become available again?
Somewhere around 65 to 80 days from the expiration date, assuming the registrar offers close to the maximum 45 day Auto-Renew Grace Period. Layer on the mandatory 30 day Redemption Grace Period and the fixed 5 day Pending Delete, and that adds up fast, even before counting whatever notice period the registrar sends beforehand.
Can I still get my domain back once it hits Pending Delete?
No. By design, Pending Delete is locked, and nobody involved, registrant, registrar, or registry, can reverse it once it starts. That last real chance was the Redemption Grace Period right before it, not this stage.
Does ICANN manage every domain extension the same way?
Only generic top level domains follow this exact policy. Country code domains like .uk or .de answer to rules their own national registries set, and those can differ significantly from ICANN’s minimums, sometimes skipping a redemption period entirely.
What is the real difference between the Add Grace Period and the Auto-Renew Grace Period?
Just the first 5 days after a brand new registration, mainly built to correct mistakes, is all the Add Grace Period covers. The Auto-Renew Grace Period only kicks in once an existing domain expires, runs up to 45 days depending on the registrar, and is where most of the actual expired domain activity plays out.
Why do some expired domains skip straight to auction instead of general availability?
Before deletion even clears, auction platforms and registrars often flag high value names based on backlink profiles, domain age, or leftover traffic, then route them into a bidding process instead of leaving them open for standard first come, first served registration.
Are EPP status codes the same across every registrar?
Yes. The codes themselves are standardized by the protocol and show up consistently no matter which registrar or registry manages a given domain. What varies is how long a domain actually spends in some of these statuses, the Auto-Renew Grace Period being the clearest example of that variance.
References
- ICANN, 5 Things Every Domain Name Registrant Should Know About ICANN’s Expired Registration Recovery Policy
- ICANN, Implementation of Expired Registration Recovery Policy
- ICANN, AGP (Add Grace Period) Limits Policy
- ICANN, EPP Status Codes List
- ICANN, .com Registry Agreement Appendix 7
