Playbook

Domain Registrars: The Lease That Quietly Expires

Platform claims verified July 25, 2026

What this mechanism is

A domain is not property that sits still. It is a lease with an expiry date, and it stops working if a card declines. That makes it the one asset in a digital estate with a deadline that does not wait for probate.

The failure is usually a cascade rather than a single loss. The card on file is cancelled when the bank is notified of the death. The renewal fails. The domain expires. Any email address on that domain stops working. Every password reset for every other account was pointed at that email. The estate now cannot recover services that have nothing to do with the domain, and the thing that would have fixed it, a renewal costing about the price of a coffee, was missed because nobody knew it was pending.

The lifecycle after expiry is standardised and short:

Roughly two months from expiry to gone, and the last five days are unrecoverable by policy rather than by negotiation.

Set it up now

1. List every domain you hold and which registrar holds it. People routinely forget the ones they bought years ago for a project that ended.
2. Turn auto-renew on for every domain that matters, and extend the registration term. Ten years of prepaid registration is the single most effective estate-planning act available here, and it costs less than most probate paperwork.
3. Move the registrant contact email off the domain itself. If admin@yourdomain.com is the contact for yourdomain.com, expiry destroys your only channel for recovering it. Use an address at a provider you do not control the DNS for.
4. Check what card is on file and whether it outlives you. A personal card is cancelled early in estate administration; a card on an account the estate keeps open, or a long prepaid term, survives it.
5. On the account card (Layer 1), record: each domain, its registrar, the registrar login email, the expiry date, and which services depend on that domain for email or sign-in. That dependency list is what tells an executor this is urgent rather than administrative.
6. Put the registrar password and its recovery codes in Layer 2, and see the authenticator playbook: registrars are a common place for 2FA to block an executor who otherwise has everything.
7. Re-check expiry dates on your liveness cadence.

What AmberKey stores

• Layer 1 (metadata): domain names, registrars, expiry dates, registrar login email, and what depends on each domain. Safe for the executor packet, and the part that creates urgency.
• Layer 2 (bearer secrets): registrar account password, recovery codes, and any registrar-specific auth or EPP code you have saved.
• Do not store the EPP transfer code as your only record and then let it go stale. Registrars regenerate them; treat a saved code as a convenience, not a guarantee.

What your survivors do

1. Renew first. Argue about ownership afterwards. Anyone with the registrar login can renew, and a renewal is cheap and reversible. Waiting for letters testamentary is how domains reach redemption. If the account is reachable, renew every domain today, ideally for several years.
2. If the login is not reachable and the domain is close to expiry, contact the registrar immediately and say the registrant has died and the domain is at risk. Ask specifically whether they can place a hold or accept payment pending documentation. Registrars have discretion here and use it.
3. Once the immediate risk is handled, start the registrar’s transfer-on-death or estate process. Each registrar runs its own; there is no ICANN-wide procedure, and GoDaddy, Namecheap, and Cloudflare all differ.
4. Expect a 60-day transfer lock after any change of registrant, which prevents moving the domain to another registrar during that window. ICANN has approved removing this lock and registrars are implementing the change through 2026, so confirm the current rule with the registrar rather than assuming either way.
5. If a domain has already dropped, check whether it has been re-registered. If it has, it is realistically gone. If it has not, register it immediately in the estate’s name.

Required documents

Registrar-dependent, with no ICANN-wide standard. Expect a certified death certificate, letters testamentary or equivalent, requester photo ID, and the domain names plus the registrar account email. Some registrars also want a notarised transfer request. Ask the registrar for its checklist in writing before assembling anything, because the sets genuinely differ.

Expected timeline

Renewal with the login in hand: minutes. Registrar estate transfer: weeks, and longer if documents are returned for correction. Redemption of an expired domain: possible for 30 days at a restore fee. After pending delete begins: five days, then nothing.

Gotchas

• Auto-renew does not save you if the card dies with you. This is the most common way domains are lost in an estate. Auto-renew plus a dead card is the same as no auto-renew, and it fails silently.
• Email on the domain is a circular dependency. Losing the domain loses the mailbox you would use to recover the domain. Break the loop before you need it.
• Privacy or proxy registration can obscure who the registrant was. If WHOIS shows a privacy service, your executor may struggle to prove the deceased held it. Record ownership in Layer 1 so the estate is not relying on public records.
• A dropped domain can be caught within seconds. Expired domains with any traffic or age are monitored and re-registered by services that exist to do exactly that. There is no grace once it drops.
• Business domains may not belong to the estate at all. If the registrant is a company, succession runs through the company’s ownership, not through personal probate.
• The dependency list is the point. A domain in isolation looks like a minor asset. A domain that carries the family’s email is a single point of failure for the entire digital estate, and only your notes will tell an executor which one they are holding.