Hosting Expired and the Website Is Down: What Is Still Recoverable

Hosting expired, website down, and you found out because a customer called. Here's the reassuring part: with the website down and hosting not paid, your site is almost certainly still sitting on the server exactly as you left it. Expiry normally triggers a suspension, and suspension is a switch, not a delete. So website hosting expired, what to do first? Mostly it comes down to how much time you have left before that switch turns into a shredder.

We're a web studio near Seattle and we've walked owners through this more than once, usually after a card expired quietly and the renewal notices went to an inbox nobody checks. Below is the real timeline, using the numbers hosts actually publish rather than the ones support agents say on the phone.

Website hosting expired: what to do in the first hour

1. 1Log in to the host's billing area, not the control panel. Billing usually still works when hosting does not. Look for an unpaid invoice and a renewal button.
2. 2Check whether the domain expired too. Hosting and the domain name are separate purchases with separate renewal dates, and a card that failed for one often failed for both.
3. 3Pay the renewal. On most hosts a paid renewal restores the site automatically within minutes to a few hours.
4. 4If renewal isn't offered, open a ticket immediately. Ask in writing whether the account is suspended or terminated, and what date the data is scheduled to be purged. Get the date in writing.
5. 5The moment you're back in, download a full backup. Do not skip this. You just found out you had no copy, and the next expiry will not warn you either.

Suspended is not deleted, and the difference is everything

The "This Account Has Been Suspended" page that most people land on is generated by the hosting control panel, and it is doing exactly one thing: redirecting visitors away from your site. cPanel's documentation is blunt about the distinction. Suspension imposes limitations that stay in place until the account is unsuspended, while termination permanently deletes all of the account's data from the server. Nothing in the suspension process removes a single file.

If the page you're looking at is a suspension notice rather than a dead connection, you're in the second row and you're fine. Our separate guide on why a website says account suspended covers the non-payment causes and the other ones, like a terms violation or a malware flag.

How long you actually have, according to the hosts

This is where the advice online turns to mush, because most of it is guessing. Here is what these five companies publish in their own terms and knowledge bases, and where they publish nothing at all.

Two more things the table hides. First, on Bluehost and HostGator the 30 days start at suspension, not at expiry, so the true window from a missed payment is longer by an amount nobody publishes. Second, plenty of hosts include far less backup than owners assume. GoDaddy, for example, sells extended backup history as a separate paid add-on rather than including it as standard, so check what your plan actually keeps before you rely on it.

Website down, hosting not paid: what to pay first

If money is the reason this happened, spend it in this order. It is not the order most people pick under pressure.

1. 1The domain renewal, always first. Hosting can be replaced with a competitor for a few dollars a month. A domain that gets deleted and picked up by somebody else is gone, and no amount of money reliably gets it back.
2. 2The hosting renewal, if the data is still there. Paying to unsuspend an account that still holds your site is far cheaper than any rebuild.
3. 3A restoration fee, if you're past the grace period. Some hosts, SiteGround among them, will restore a terminated account from a kept copy for a fee. Compare that fee against what rebuilding the site costs. It's usually a bargain.
4. 4New hosting elsewhere, last. Only once you know whether the old data is recoverable. Moving to a new host before you've retrieved anything just means you have two accounts and still no website.

If the domain lapsed as well

Domain expiry runs on its own published schedule, and it's stricter than hosting. ICANN's lifecycle for a typical gTLD like a .com runs from expiry into an auto-renew grace period of up to 45 days, then a Redemption Grace Period of 30 days, then a pending delete stage of usually about five days before the name is released for anyone to register.

The cruel detail is that your website and email stop working long before the name is actually lost. ICANN's Expired Registration Recovery Policy requires that DNS resolution be disabled during the Redemption Grace Period, and that for registrations deleted eight or more days after expiry the existing DNS path be interrupted for at least the last eight consecutive renewable days. In other words, the internet takes you offline while you can still technically fix it. Registrars layer their own timing on top: GoDaddy publishes that a domain is parked and the connected website and email stop working five days after expiration, and that the domain leaves your account entirely at 72 days.

Recovering a domain during redemption usually costs a redemption fee well above the normal renewal price, and it's paid to your registrar rather than anyone else. Our guide on what happens if my domain name expires has the full sequence.

The part nobody warns you about: email

If your mailboxes were part of the hosting account, they went down with it, and messages sent to you during the outage bounced rather than queuing. Customers who get a bounce assume the business closed. This is usually the most expensive part of an expired hosting account and it's the part owners discover last.

Once you're back online, this is the moment to move email off the hosting account entirely. Mail on a separate provider means the next billing accident takes down the website and nothing else.

How to make sure it never happens again

Every expired-hosting call we take traces back to the same handful of causes. All of them are fixable in half an hour.

1. 1Fix who gets the renewal email. Log in to the host and the registrar and set the contact address to something the business reads every day, ideally a shared inbox rather than one person's. If the notices are going to a former employee or an old developer, nobody sees the warning.
2. 2Turn on auto-renew for both hosting and the domain. Then check that it is actually on, because it silently turns itself off when a payment fails.
3. 3Use a card that will not expire quietly. A business card with a long expiry, and a diary note a month before it does expire.
4. 4Put both renewal dates in a shared calendar. One entry each, a month ahead, with the account login email in the note.
5. 5Run an off-site backup on a schedule. Then an expired account is an annoyance rather than a threat, because you already hold a copy.
6. 6Register the accounts in the business's name. If the hosting is under a personal Gmail belonging to somebody who left, the renewal problem is only the first problem you have.

If you'd rather hand this to someone

None of the above needs an agency. If you can log in to the billing area and pay an invoice, you can do this yourself, and plenty of owners do. Where it goes wrong is the quiet middle: the year where nothing happens, the card expires, and the notices go somewhere nobody looks. If you'd rather that not be your problem, managed hosting is part of our care plans from $99 a month, which means we hold the hosting account, watch the site, and run daily off-site backups. The maintenance plan is the other half: renewals tracked, and someone who notices a site is down before your customers do.

If the reason the site is down turns out to be the host itself rather than your invoice, read what happens if your web host goes out of business and then work through the 24-hour rescue steps.