Who Owns Your Website? Domains, Hosting and Access Explained

Your business should own and be able to access every part of its website: the domain name, the hosting account, the website admin, the design and content, and connected services such as analytics and email. Many businesses only discover they do not when a developer disappears, an agency relationship ends badly, or something breaks and nobody can log in.

The parts of a website

Domain name

Your web address, registered through a domain registrar. The domain is the most important asset to control, because it is tied to your website, email and brand. It should be registered in the business’s name, in an account the business controls, with renewal reminders going to a monitored email address.

DNS

The settings that point your domain to your website and email. Often managed at the registrar or a service such as Cloudflare. Whoever controls DNS can redirect your website and email.

Hosting

The server where your website files and database live. Hosting can be in your own account or provided by an agency. Agency-managed hosting can be fine, as long as you can get a full copy of your site and move it if you choose.

Website admin and code

Admin access to the content management system, such as WordPress or Shopify, plus the theme, plugins and any custom code. Check whether your contract gives you ownership or a licence to the design and code, and whether premium plugins and themes are licensed to you or to the agency.

Content and assets

Copy, images, videos and documents. You should have the rights to use them. Be careful with stock images licensed to an agency rather than to you.

Connected services

Google Analytics, Search Console, Google Business Profile, Tag Manager, email marketing, CRM, payment and booking tools. The business should be the owner, with agencies given user access.

Why this matters

• Lock-in: if an agency owns everything, leaving becomes difficult and expensive.
• Lost access: freelancers move on, staff leave, and logins disappear with them.
• Expired domains: if renewal notices go to someone who no longer works with you, the domain can lapse, taking your site and email down.
• Security: unknown people with admin access are a risk. See website security for small businesses.

An ownership checklist

• Domain registered to the business, in a business-controlled account, with auto-renew on.
• Two-factor authentication on the registrar, hosting and admin accounts.
• Business-owned admin accounts on the website, with named users for each person.
• Hosting either in the business’s account or with a written right to a full export.
• Analytics, Search Console, Tag Manager and Google Business Profile owned by the business.
• A secure record of logins, kept in a password manager.
• Contract terms that state ownership of design, code and content after payment.

Regaining access

If you have lost access, start with the domain, because it controls everything else. Registrars have recovery processes if you can prove ownership of the business. For hosting and admin, contact the previous provider in writing and request transfer. For Google services, owners can sometimes be recovered through account recovery or by verifying ownership again. Act early, because recovery takes longer when renewals are approaching.

Before starting a new website project

Clarify ownership in writing before work begins. Our guide on choosing a web design agency includes the questions to ask, and our website redesign guide covers planning a rebuild safely.

Build on foundations you control

Every website we build is handed over with the business owning its domain, admin access, content and connected accounts. If you need help sorting out access to your current site, we can help with that too. See our Website Design and Development service or get in touch.