Intelligence

How Domain Expiration and Transfer Locks Work

Expiry dates and transfer locks are where timing and safety meet. Here is how each works and what they mean when you want to acquire a name.

·Founder, Westmore· 9 min read

The short answer

Expiration follows a fixed lifecycle with grace and redemption periods before a name drops; transfer locks are standard protections lifted during an agreed transfer. Both shape the timing and safety of an acquisition.

Two parts of a domain record decide a great deal about how and when a name can change hands: its expiration date and its transfer lock. One is about timing, the other about safety. They are often misread, an expiry treated as an instant opportunity, a transfer lock treated as a closed door, when in fact both are more nuanced and, once understood, more useful. This guide explains how each works, what they mean when you want to acquire a name, and how the two ideas come together in a clean, safe transaction.

The expiration lifecycle

A domain does not vanish the instant it expires, and assuming it does is one of the most common and costly misunderstandings a buyer can have. Instead, an expired name moves through a defined lifecycle. After the expiry date there is usually a grace period during which the current owner can still renew the name normally, at the ordinary price, as if nothing happened. If they do not renew, the name typically enters a redemption period: still recoverable by the owner, but only by paying a premium restore fee, and during this window it is not available to anyone else. Only after redemption ends does the name reach pending delete, a short final stage, and then it drops, becoming available to register again. Each of those stages behaves differently, and knowing which one a name is in changes everything about what you can and should do.

Why the lifecycle matters to a buyer

Each stage is a different kind of opportunity. A name approaching its expiry date may belong to an owner who is quietly losing interest, which can be a natural, low-pressure moment to open a conversation before they decide whether to renew. A name already in redemption or pending delete signals a possible drop, which shifts your strategy away from negotiation and toward timing and, often, competition, because genuinely valuable dropping names attract other buyers and specialist drop-catching services. Reading the expiry date together with any lifecycle status tells you whether to approach the current owner now, while they still hold the name, or to prepare for a name that may soon be in open play with rivals.

The trap of waiting for a drop

It is tempting to assume that a valuable expiring name will simply fall into your hands if you wait. It rarely does. Good names are watched, and the redemption and pending-delete stages exist precisely to give the current owner every chance to recover the name before anyone else can. Many owners renew at the last moment, and those who let a good name lapse often find that drop-catchers, not patient individuals, secure it the instant it becomes available. Waiting passively for a drop is usually the weakest strategy. Opening a quiet conversation with the owner while they still control the name is frequently the stronger one.

What transfer locks are

A transfer lock, shown as clientTransferProhibited or its server-level equivalent serverTransferProhibited, prevents a domain from being moved to another registrar without proper authorization. It is one of the most common status codes on valuable names, and it is a good sign, not a bad one. It means the name is protected against theft and hijacking, which is exactly what you would want on any asset worth acquiring. It is emphatically not a barrier to a legitimate acquisition, and a buyer who backs away at the sight of a transfer lock is misreading ordinary, prudent security as a refusal to sell.

How a locked transfer actually happens

In a real acquisition, the lock is simply part of the choreography. Once terms are agreed, the seller unlocks the domain at their registrar and provides an authorization code, sometimes called an EPP code or auth code. The name is then moved to the buyer's registrar or account, and the transfer lock is reapplied afterwards to protect the new owner. Done properly through escrow, the payment is only released to the seller when the transfer actually completes, so neither party has to trust the other blindly, the buyer is not out of pocket before receiving the name, and the seller is not handing over control before being paid. The lock never prevents the deal. It simply structures it so that it happens safely.

Grace and redemption in a little more detail

The two recovery windows deserve a closer look, because their timing shapes what a buyer can realistically do. The grace period after expiry is generous by design: the current owner can renew at the normal price as though nothing happened, which is why a name that has just slipped past its date is not yet meaningfully in play. The redemption period that can follow is stricter. The name is no longer resolving, the owner has clearly missed the ordinary renewal, and recovery now costs a premium restore fee. That combination, a name gone dark and an owner facing an extra cost to get it back, is often the moment an owner is most open to simply letting it go to a buyer instead. Reading which window a name sits in tells you not just whether it might become available, but how the current owner is likely feeling about it right now.

Auto-renew and why drops are rarer than they look

Most serious registrations are set to renew automatically, with a card on file, precisely so that a valuable name never lapses by accident. This is why waiting for a good name to drop is usually a losing strategy: the system is built to prevent exactly that outcome for owners who care. When a quality name does slip all the way through to deletion, it is rarely an oversight that a patient buyer can quietly scoop up, because specialist services monitor the drop lists and compete aggressively for anything worthwhile the instant it becomes available. Understanding this reframes the whole question. The reliable path to a name you want is almost never to outwait its owner. It is to open a conversation with that owner while they still hold it and still have every reason to talk.

The authorization code and the mechanics of a safe handover

When a deal is agreed, the practical handover turns on one small item: the authorization code, sometimes called the EPP or auth code. The seller retrieves it from their registrar after unlocking the name, and it acts as the key that permits the transfer to the buyer's registrar. The sequence matters. In a well-run transaction the code is not handed over in exchange for a promise, it is coordinated through escrow so that the money and the name change places together, under a neutral third party, rather than one side going first and hoping. This is the single most important safeguard in a domain purchase, and it is why the transfer lock, far from being an obstacle, is part of what makes a clean, fraud-resistant handover possible.

Common timing mistakes and how to avoid them

  • Assuming an expired name is instantly available: it is not, grace and redemption stand in the way, and the owner usually recovers it.
  • Waiting for a valuable name to drop: auto-renew and drop-catchers make this the weakest play for all but the most obscure names.
  • Reading a transfer lock as a refusal to sell: it is standard security, lifted as a normal step in an agreed deal.
  • Rushing an unlocked transfer without escrow: this is where fraud happens, never send money against a bare promise.
  • Ignoring the expiry date entirely: it is one of the clearest signals of when an owner might be most open to a conversation.

Avoid these five and you have sidestepped most of the ways domain timing goes wrong.

Timing and safety together

The two ideas meet in practice, and a good buyer holds both in mind at once.

  • Expiry answers when to move: approach before a renewal decision, or prepare for a possible drop.
  • Transfer locks and escrow answer how to move safely once terms are agreed.

A buyer who understands both avoids the two classic mistakes. The first is waiting so long that the name renews, or that someone faster grabs the drop, and the opportunity evaporates. The second is rushing a transfer in a way that exposes you to fraud, paying before the name is secured, or trusting an unlocked handover without escrow. Westmore's free tool surfaces the expiry date and transfer status on every registered name and flags when a name looks close to expiry or appears to be dropping, so the timing signal is never buried.

Reading the expiry date without over-reading it

The expiry date is one of the most useful single fields in a record, but it rewards a measured reading. A date far in the future often means an owner who has paid for years ahead, a sign of commitment and a name unlikely to lapse soon. A date approaching within months is worth noting, not because the name will necessarily become available, most are renewed, but because the run-up to a renewal decision can be a natural, low-pressure moment to open a conversation. What the expiry date does not do is predict availability on its own. Pair it with the name's status codes and its history before you read anything into it, because an imminent date on an auto-renewing, actively used name means very little in practice.

Escrow, and why it protects both sides

It is worth being explicit about why escrow sits at the center of a safe transfer, because it is the mechanism that lets two strangers transact a valuable, intangible asset without either being cheated. In an escrow-backed deal, the buyer places funds with a neutral third party, the seller then transfers the name, and only once the transfer is confirmed does the escrow agent release the money. Neither side has to go first on trust. The buyer is not exposed to paying for a name that never arrives, and the seller is not exposed to handing over control before being paid. For any acquisition of consequence, skipping escrow to save a small fee is a false economy that trades a modest cost for a serious and avoidable risk.

Bringing timing and safety into one plan

In practice, a buyer folds both ideas into a single approach. You read the clock, the expiry date and any lifecycle status, to decide when to move and how urgent the moment really is. You plan the mechanics, unlock, authorization code, transfer, and re-lock, all through escrow, to decide how the name will change hands safely once terms are agreed. Handled together and handled quietly, the two turn what can feel like a maze of jargon into a straightforward sequence, approach at the right time, agree terms without revealing your true urgency, and complete the handover under protection that leaves nothing to blind trust.

The takeaway

Expiration is the clock, and transfer locks are the seatbelt. Read the clock so you approach at the right moment, whether that means talking to an owner before they renew or preparing for a name that may soon be in play. Respect the seatbelt so the handover is safe, with the lock lifted only as part of an agreed, escrow-protected transfer and reapplied once you own the name. When both are handled well, and handled quietly, an acquisition moves from possibility to completed transfer without drama and without exposure.

“Expiry tells you when a name might move. A transfer lock, used properly, is what makes sure that when it moves, it moves to you and stays yours.”

Westmore

Look up a domain free with Westmore WHOIS

Look it up

Frequently asked

Questions buyers ask

Not immediately. Expired names pass through grace and redemption periods where only the owner can recover them, before finally dropping and becoming available.

Keep reading

Confidential buyer-side representation for premium-domain acquisitions.

LinkedIn
Insights
Briefs
Who Owns
Westmore
Research
UDRP
Support
Buyer-side only· Escrow-protected· NDA on request

© 2026 Westmore. All rights reserved.

A note on privacy

Westmore uses a few essential cookies to keep this site secure and running smoothly. Nothing about your identity or interest is ever sold or shared.