Do You Actually Own Your Website? Five Things To Check
Paying for a website does not make you the owner. Five accounts decide it — domain, hosting, DNS, files and Google. Here is how to check each one today.
A company came to us wanting to move their site to faster hosting. Straightforward job — until we looked up the domain and found it registered to the developer who had built the site four years earlier. He had closed his business, changed his number, and the renewal was due in five months.
They had paid for that domain every year. They had put it on their vehicles and their signage. They did not own it.
Owning a website is not one thing. It is five separate accounts, and you own each one only if the account is registered to your email address and your business name — not your developer's, not your agency's, not a staff member who has since left. Paying the invoice does not make you the account holder.
What does owning a website actually mean?
People assume ownership transfers when the final invoice is paid. It does not transfer automatically anywhere. Each of these is a separate account with a separate holder:
| What | Why it matters | Who should hold it |
|---|---|---|
| Domain name | Your address and your email. Lose it and both stop. | Your business, as registrant |
| Hosting account | Where the site lives; needed to move or back it up | Your business |
| DNS control | Points the domain at the site and the email | Your business |
| The site files and database | The site itself. Without them you rebuild. | Yours, with a copy you hold |
| Analytics and Search Console | Your traffic history, which cannot be recreated | Your business, as owner |
The domain is the one that matters most. Everything else can be rebuilt, slowly and at a cost. A domain held by someone unreachable can be effectively unrecoverable.
How do I check who owns my domain?
Look it up. Use any WHOIS service, or your registrar's own lookup, and search your domain.
You are looking at the registrant — the legal holder — not the "admin contact" or the "technical contact". A developer legitimately appearing as technical contact is normal. A developer appearing as registrant is not.
One complication: most registrars now hide registrant details behind a privacy service, so the lookup may show the privacy provider rather than a name. If so, the real test is simpler — can you log in to the registrar yourself and see the domain in your account? If you cannot, you do not control it, whatever the invoice says.
If you do not even know where it is registered
The WHOIS record still shows the registrar's name even when the owner is hidden. That tells you which company to contact, and their support can tell you what proof of ownership they need.
How do I check the rest?
- Hosting: can you log in to the hosting control panel with your own credentials, and does the account name match your business? Being given a WordPress admin login is not the same as holding the hosting account.
- DNS: find where your nameservers point, then confirm you can log in there. DNS is often at a different company from the registrar and the host, which is why it gets forgotten.
- The site itself: do you have a recent backup of the files and the database, stored somewhere you control? If the site was custom built, do you have the source code, in a repository you own?
- Google accounts: in Analytics and Search Console, open the users list and check your address is listed as owner or administrator, not as a viewer somebody else added.
What if someone else is holding it?
Usually this is not malice. Developers register domains on a client's behalf because it is quicker at the time, and then nobody revisits it for years. Start by asking plainly to be made the registrant and the account holder. Most will do it.
If they cannot be reached, or refuse:
- Go to the registrar directly. Registrars have a dispute process, and a business that can evidence its trading name and its payments is in a reasonable position.
- Gather your evidence first — invoices showing you paid for the domain, the trade licence matching the name, and any email where the registration was agreed.
- Act before the renewal date, not after. Once a domain lapses it can be bought by anyone, and recovering it then is a different and much worse problem.
- Do not start by threatening. Access you need is often granted in an afternoon by someone who has simply forgotten about it.
Is it a problem if an agency manages it for you?
No, and this is worth saying clearly because it costs us work to say it.
Having an agency manage your domain, DNS and hosting is sensible. Most business owners should not be editing DNS records — a wrong entry takes down your email in minutes, and email problems are hard to notice and easy to leave broken for months. Managed is fine.
What matters is the distinction between managed and owned. The accounts should be in your business name, with your email as the registered address, and your agency added as a user. Then they do the work and you keep the keys. If anyone tells you that is not possible, that is the answer to your question.
What should you do today?
Thirty minutes, once:
- WHOIS your domain and read the registrant.
- Try logging in to the registrar, the host and the DNS provider yourself.
- Check you are listed as owner in Analytics and Search Console.
- Download a backup of the site and keep a copy somewhere you control.
- Put the domain renewal date in a calendar, with a reminder a month ahead.
If you are choosing someone to build or take over a site, ownership belongs in the conversation before the work starts — it is one of the questions worth asking an agency before you sign.
Does paying for a website mean I own it?
Not automatically. Payment settles the invoice; it does not change who is registered on the domain, the hosting account or the Google properties. Ownership is whatever those account records say, so check them rather than assuming.
Can my developer hold my website hostage?
They can make things difficult if they hold the accounts, but you are rarely without options. Registrars and hosts have dispute processes, and a business that can evidence its name and its payments usually has a path. The cost is time, which is why checking early matters more than winning later.
What happens if my domain expires?
Your website and your email both stop. There is usually a grace period in which you can renew at a higher fee, but after that the domain can be registered by anyone. This is the single most avoidable serious failure in this list — the fix is a calendar reminder and a payment card that has not expired.
