Who Owns Your Website? Domain, Hosting and Logins, Explained

Here’s the one that catches people out. Your site’s been ticking along for years, the enquiries come in, nobody’s had to think about it. Then you want to move it, or your designer stops replying, and you realise you’ve no idea where the domain is registered or whose name is on it.

Who owns your website isn’t something anybody in this trade volunteers, which is why it’s worth writing down. I build sites around Sunderland and the North East and hand the keys over at the end of every job, so I’ve no reason to be cagey. Four separate things get called “my website”. Each can sit with a different person. You can have a site earning money and own none of it.

Who owns your website: the four things people think are one thing

Bought at different times, from different companies, sometimes years apart. Nothing forces them to live together. Often they don’t.

1. The domain name

The address people type. Nobody owns one outright, you rent it in blocks and keep renewing, so what counts is whose name is on the registration. This is the big one. Lose the files and you rebuild. Lose the domain and your address, your email and years of Google history go with it.

2. The hosting

The machine your files sit on. Separate purchase, usually a separate company from the registrar. Plenty of designers resell hosting under their own account, which is normal rather than sinister, but it can mean there’s no login to hand you.

A fifth thing hides in here: DNS. Those records point your domain at your hosting and at your mailboxes. Whoever controls them controls where your visitors and your email end up.

3. The site files and the admin login

Pages, images, theme, plugins. On WordPress that’s your /wp-admin login, and the gap that catches people is administrator versus editor. An editor updates text. An administrator can export the site, add and remove users, and move it elsewhere. One is ownership. The other is a keyboard.

4. The Google Business Profile

Nothing to do with the website, and everyone forgets it. That listing belongs to a Google account, and the account has an owner. Plenty are still owned by whoever set them up, with the business sitting there as a “manager” on its own listing. I’ve written before about getting a Google Business Profile properly optimised. None of it counts if the profile isn’t yours.

The ten-minute check you can run yourself

You can work out who owns your website in about ten minutes. No technical background needed. Make a brew and work down the list.

Look your own domain up

Search for a WHOIS lookup and put your domain in. Nominet run one for .co.uk. Privacy rules often hide personal details, so you may not see a name, but you’ll nearly always see the registrar. Never paid that company a penny? Then it isn’t your account.

Check who gets the renewal emails

Search your inbox for your domain name. Registrars email the registrant contact before every renewal, every year. If those have never landed with you, you aren’t the contact on record.

Log in and see what you can actually see

Go to yoursite.co.uk/wp-admin, sign in, look down the left-hand menu. Plugins, Users and Settings all showing means you’re an administrator. Only Posts, Pages and Media means you’re an editor. Ten seconds. It tells you more than a phone call will.

Check who owns the Google listing

Sign in with the Google account you use for the business, find your profile, open the people and access settings. Owner is what you want. Manager means someone else has the final say. Can’t find the profile there at all? Same answer, louder.

Most designers aren’t holding your site hostage

Worth saying plainly, because the internet will tell you otherwise. The real story is dull. Day one of a job, the client hasn’t got a registrar account, the designer needs a domain that afternoon, so they buy it on theirs and crack on. Four years pass. It isn’t a plot. It’s admin that never got done, and half the time the designer has forgotten too.

A few do hold on deliberately, and they’re usually the ones with a monthly contract you can’t easily leave. Your first move is the same either way.

Asking for it back without starting a row

Tone does most of the work. You’re not accusing anybody, you’re doing housekeeping, and framing it that way beats going in hot. Email rather than ring, so there’s a written trail. Ask for specific things, not “access”:

• The domain moved into an account in my name, or the auth code or tag change so I can move it.
• An administrator login, plus a full backup of the site and database.
• The hosting login, or who the host is and what name the account is in.
• Owner access on the Google Business Profile.

Give a deadline. A fortnight is plenty. Say you’re happy to cover any transfer fee, because that line defuses more of these than anything else in the email.

Auth codes, tag changes, and what a transfer really involves

Moving a domain sounds dramatic. It’s a form.

For a .com, .net or .org, the current registrar gives you an auth code, sometimes called an EPP code. Think of it as a password for the domain itself rather than for anyone’s account. You take it to the new registrar and paste it in. Then confirm by email. The transfer lock has to be off first. It takes days rather than minutes, and a freshly registered domain sometimes can’t be moved yet.

A .co.uk works differently, which trips up anyone reading American advice. There’s no auth code. Those sit with Nominet, every registrar has an IPS tag, and moving one means changing the tag from the old registrar’s to the new one’s. As the registrant, you can also deal with Nominet directly.

Your site stays up throughout. A transfer changes who manages the domain, not where it points, so no visitor notices a thing.

What you’ll get handed over, and what you usually won’t

Fair to expect: the domain in your name, an administrator login, hosting details or a full backup, and owner access on the Google listing. That’s your business sitting in somebody else’s cupboard.

What you often won’t get, and it usually isn’t spite. Premium theme and plugin licences are normally bought in the designer’s name, so they can’t be split off; the site keeps working, but updates for those parts stop until you buy your own. Design source files and a reseller hosting account are theirs unless your agreement says otherwise. On a builder platform you’ll get your text and images, often a spreadsheet of pages or products. The layout stays behind.

I’ll be straight. I’m not a solicitor and this isn’t legal advice. What’s yours comes down to what you agreed and paid for, and if real money is riding on it, get proper advice rather than taking a blog’s word.

How to make sure it never happens again

Register the domain yourself. Do it before you hire anybody, because it costs about the same as a sandwich for the year and takes five minutes. Use a business email you’ll still have in a decade, not an old personal one from school. Turn auto-renew on, then invite your designer in as a user. Access you granted is access you can take back.

Then ask the awkward questions before you sign. Whose name will the domain be in? Will I have an administrator login? Who’s the hosting account under? And if I walked in two years, what am I taking with me? Anyone decent answers those in a sentence each. Anyone vague has told you something. More on that in what I wrote about choosing a website designer round here.

For the record, that’s how I work. Domain in your name, administrator login on day one, no monthly contract between you and your own website. You ring me and you get me, which is fairly the point of hiring someone local who works on his own. What a build includes and costs is on my web design page.

FAQs

Can my web designer hold my domain hostage?

They can make it slow and irritating rather than impossible. Registrars generally deal with the registrant on record rather than with you. Nominet and ICANN both run dispute routes, so read the registrar’s own process before escalating. Start with a polite written request.

What if they’ve gone quiet, or gone out of business?

Common, and usually fixable. Take the registrar’s name off your WHOIS lookup and go to them directly, since they have a process for registrants who’ve lost access. Dig out your invoices. Anything showing you paid for the domain is the evidence they want. Even if the business has closed, the registrar is the right first call.

Do I own the site if I’m paying monthly?

Depends what the payment covers. Read the agreement. Some monthly plans are a payment plan on a site you own outright at the end; others are a rental, where stopping the payment stops the site. Quickest tell: ask for an administrator login and a full backup today, then see what comes back.

How do I move hosting without the site going down?

Build the copy on the new host and test it there before anything points at it. Lower your DNS TTL the day before, switch the records, then leave the old host running a week or two. The thing that breaks in a move is almost never the website, it’s the email. Sort your mailboxes first.

Should the domain be in my name or the business name?

Either works. What matters is that the name on it is one you control. For a limited company, the company name with your own business email as the contact is tidiest, since it survives you changing accountant, changing designer or selling up. Sole traders normally use their own name.

You can run those checks yourself this afternoon. If it all comes back clean, brilliant, you’ve lost ten minutes and gained a bit of certainty. If it comes back murky and you’d rather someone worked out where all four pieces live and what it takes to get them into your name, that’s what I do for businesses round Sunderland and the North East. Drop me a line and I’ll tell you plainly where you stand, no jargon and no hard sell.