Manage domain names - Domain Names - Alibaba Cloud Documentation Center

Manage domain names in Alibaba Cloud: renew, update registrant information, configure DNS, transfer between registrars or accounts, and secure your domains.

Core management tasks

Domain name lifecycle (renewal, redemption, and expiration)

A typical domain name lifecycle includes an active period, a renewal grace period, a redemption period, and a pending deletion period.

Stage	Time window	Domain status	Actions and cost
Active	Within the domain's validity period	Resolves normally	Perform manual renewal. The fee is the standard renewal price.
Renewal grace period	Approximately 0 to 30 days after expiration Note `.hk` domain names have a 28-day renewal grace period. After this period, they are immediately deleted.	Resolution may be suspended	You can still renew at the standard price.
Redemption period	Typically 31 to 60 days after expiration Note The redemption period for CNNIC domain names such as `.cn`, `.中国`, `.company`, and `.network` is 31 to 44 days after expiration.	Resolution suspended	You must pay a redemption fee, which is significantly higher than the standard renewal fee.
Pending deletion period	After the redemption period ends	Pending deletion	The registry deletes the domain, making it available for public registration. At this point, the original owner can no longer recover it.

The console displays the actual stage and renewal deadline for your domain name.

How to renew:

Manual renewal: Go to the Alibaba Cloud Domain Names console. On the Domain Names page, find the domain name that you want to renew and click Renew in the Actions column.
Batch renewal: On the Domain Names page, select multiple domain names and click Renew at the bottom of the page.

Registrant and contact information

Update registrant information when ownership changes (such as a sale or restructuring) or when contact details change.

Operation type	Description
Modify registrant information (transfer of ownership)	Change the domain name registrant, such as after a sale or when transferring from an individual to a company. Update only the registrant's contact information, such as email, phone number, or address.
Modify other contact information	Change the administrative, billing, or technical contact for the domain name. Does not affect ownership.

DNS resolution and DNS servers

DNS resolution maps a domain name to your server's IP address. Changing authoritative DNS servers is high-risk — proceed with caution.

Key concepts:

Modify DNS records: Update individual records (A, CNAME, MX) with your current DNS provider to point your domain name to different services.
Change DNS servers: Change the authoritative name servers to delegate all DNS resolution from one provider to another.

Important
Before you change DNS servers, you must configure all necessary DNS records (A, CNAME, MX) with the new provider and verify they resolve correctly. Failure to do so interrupts your website and other services.

Domain name transfer

Transfer domain name management between registrars or between Alibaba Cloud accounts.

Transfer type	Description
Transfer a domain name to Alibaba Cloud	Move a domain name from another registrar to Alibaba Cloud.
Transfer a domain name from Alibaba Cloud	Move a domain name from Alibaba Cloud to another registrar.
Transfer a domain name between Alibaba Cloud accounts	Move a domain name between Alibaba Cloud accounts, such as from a personal to a corporate account.

Security and access control

Access control (RAM)

Use Resource Access Management (RAM) to grant fine-grained permissions for domain name operations. For example, authorize a RAM user to manage specific domain names while restricting access to others. Authorize a RAM user to manage domain names.

Domain name security

Domain name security lock: In the Alibaba Cloud Domain Names console, you can enable an update lock and a transfer lock to prevent unauthorized modifications or transfers from a compromised account — a critical security measure for high-value domain names.
DNSSEC: Enable DNSSEC (Domain Name System Security Extensions) to add cryptographic verification to DNS responses, preventing spoofing and cache poisoning attacks.