How Domain Registration Works

The complete lifecycle — availability, registration, management, renewal, and expiry.

The players

  • You (the registrant) — the person or organisation that holds the registration.
  • Registrar — the retailer you buy from (e.g. Cloudflare, Namecheap, Porkbun).
  • Registry — the operator of the TLD (e.g. VeriSign for .com).
  • ICANN/IANA — oversight and root zone coordination (gTLDs).

The lifecycle

  1. Availability check — You search a registrar. They query the registry's database (via EPP) or a cached copy. If the domain is free, you can proceed.
  2. Order & payment — You provide contact details (registrant, admin, tech, billing) and pay. The registrar sends a create command to the registry via EPP (Extensible Provisioning Protocol).
  3. Registry creates the domain — The registry adds the domain to its authoritative database, assigns name servers (or parks it), and returns success.
  4. Propagation — The registry publishes the new delegation to its authoritative name servers. This is near-instant for most TLDs (seconds to minutes).
  5. Active registration — You can now set DNS records, use email, build a site. The domain is yours for the registration period (1–10 years).
  6. Renewal — Before expiry, you pay the registrar. They send a renew command to the registry. The domain stays active.
  7. Expiry & grace periods — If not renewed:
    • Auto-renew grace period (0–45 days): registrar may auto-renew on your behalf; you can still renew normally.
    • Redemption grace period (30 days): domain is deleted from the zone; recovery is possible but expensive (registry fee + registrar fee).
    • Pending delete (5 days): domain cannot be recovered; soon drops to available.
    • Available — anyone can register it.

Key concepts

EPP (Extensible Provisioning Protocol)
Standard XML protocol registrars use to talk to registries (create, renew, transfer, update).
Registrant contact
The legal owner. Keep this accurate — it's used for verification, disputes, and recovery.
Name servers
Where DNS queries go. You can use the registrar's DNS, your hosting provider's, or a third party (Cloudflare, AWS Route 53, etc.).
Auth code (EPP code)
Transfer password. Required to move a domain to another registrar. Keep it secret.
Domain lock
Prevents unauthorised transfers. Enable it unless you're actively transferring.

Transfers

Moving a domain between registrars (gTLDs):

  1. Unlock the domain at the current registrar.
  2. Get the auth code.
  3. Initiate transfer at the new registrar (pay for 1 year renewal).
  4. Confirm via email (FOA — Form of Authorization).
  5. Wait 5 days (or less if current registrar approves).

ccTLD transfers vary — some use the same process, others require paperwork or don't support transfers at all.

Common pitfalls

  • Letting a domain expire — recovery is expensive; the domain may be snapped up by drop-catchers.
  • Using a personal email for registrant contact — if you lose access, you can't prove ownership.
  • Not enabling auto-renew — the #1 cause of accidental loss.
  • Ignoring registrar emails — ICANN requires annual WHOIS accuracy verification.