We have watched this happen more than once. A business pays an SEO and marketing firm for years to keep its website at the top of search results. The firm built the site, registered the domain, and set up the email. It all just worked, so nobody thought about domain ownership. Then the relationship ended, the renewal notice went to the firm’s address, the card on file had expired, and one Monday morning the website was gone and nobody in the office could send an email.
The business did own its name in every way that mattered to them. They paid for it. It was on the trucks and the business cards. But the account that actually controlled it belonged to the marketing firm, and that is the part the registrar cares about.
That story is common enough that I want to walk through what domain ownership really means, the six checks that tell you whether your business has it, and what to do if it turns out someone else is holding the keys.
Domain ownership: the problem nobody notices until renewal day
Your domain is the yourbusiness.com part of your website and your email addresses. Once everything is set up, it needs almost no attention. Renewal often happens automatically. Nobody logs into the account for years.
That quiet is the problem. Domain ownership issues stay invisible until something forces the question: an employee leaves, a vendor relationship ends, a card expires, or you go to sell the business and the buyer’s attorney asks who controls the domain.
Here is why it matters so much. The domain is what tells the internet where your website lives and where email sent to your people should go. If it expires, or someone changes its settings, your website and email can stop working even though you are still paying for the hosting and still paying for Microsoft 365. Customers simply cannot reach them through your name anymore. Someone who takes over the domain can also point your visitors and your incoming email somewhere else.
Four different companies are probably involved
This is the part that confuses almost everyone, and it is where most domain ownership mix-ups begin. Most owners think “the website company” handles all of it. Usually it is four separate jobs, and they are often at four separate companies.
The registrar is the company where the domain is registered. Think of it like the county clerk holding the deed. ICANN, the organization that oversees domain names, explains the relationship between you and the registrar on its page for domain registrants.
The DNS host keeps the directory that says “the website is over here, the email goes over there.” Sometimes it is the registrar. Sometimes it is not.
The web host is where the website files actually live. The email provider is Microsoft 365 or Google Workspace for most small businesses.
Having these at different companies is completely normal and nothing to fix. What matters for domain ownership is that the business knows which company does each job and can get into every one of those accounts without calling somebody’s cousin.
6 checks that tell you if you have real domain ownership
1. Find out where the domain is registered
The first domain ownership question is simple: where does it live? You cannot check who controls the domain until you know which registrar holds it. Go to the ICANN lookup tool, type in your domain, and look for the registrar name, the expiration date, and the nameservers.
Do not be surprised if you have never heard of the registrar. A lot of web designers and hosting companies resell domains, so the company you pay is not always the company that holds the registration. ICANN explains how registrars and resellers work together. You may hear people call this a WHOIS search. Same idea, newer system behind it.
2. Make sure someone at the business can log in
This is the real test of domain ownership, and most businesses fail it. Can someone at your company, today, log into the account at that registrar and see the domain listed?
Being able to edit the website does not count. Your WordPress login, your website builder, and your hosting account let you change the site. They usually do not let you renew or transfer the domain.
Here is the catch nobody tells you about. Web designers and IT providers often keep many clients’ domains inside one account of their own. They cannot hand you that password, because it would open every other client’s domain too. That is not them being difficult. The fix is to ask them to move your domain into a separate account created for your business. They can still help manage it afterward.
3. Check whose name is on the registration
Inside the registrar account, look at the registrant, which is the official holder. It should be your business, not the designer, a former employee, or a marketing agency that closed three years ago.
Do not panic if the public lookup shows almost nothing. These days most personal details are hidden from public results, and ICANN’s current registration data policy allows that. A blank public record is normal. The details inside the account are what count for domain ownership.
4. Point the warning emails at an address that will outlive any one person
Every renewal reminder and security alert goes to the contact email on the account. If that is a personal Gmail, or the inbox of someone who left, those warnings go nowhere. Stale contact details are the most common domain ownership gap we find.
Use an address the business controls and actually reads, something like domains@ or admin@ at your own company. Then think one step further. If the domain ever lapses, email at that domain stops too, so the warning about the problem may not arrive. A second recovery address or phone number outside the domain is cheap insurance.
At least two trusted people should know which registrar you use and how to get back into the account. If the registrar allows separate logins, give each person their own. If it only allows one, keep it in a company password manager, not in an email or a spreadsheet.
5. Make sure it will actually renew
Turn on auto-renew and put a business card on file, not an employee’s personal card. Personal cards get cancelled and replaced when people leave, and nobody inside the company finds out. An expired card is how a lot of businesses learn they have a domain ownership problem.
Auto-renew is not a guarantee, which is the honest part. Cards expire and payments get declined. Put a reminder on someone’s calendar a few weeks before the expiration date to confirm the payment went through. ICANN does require registrars to send renewal reminders for .com, .net and .org domains, according to its renewal and expiration FAQ. Reminders sent to a marketing firm you stopped paying do not help you.
If a domain does expire, there is often a short grace period to get it back, sometimes at an extra cost. The rules vary. Renewing early is always easier than recovering late.
6. Lock it and protect the login
Most registrars offer a transfer lock, sometimes called Registrar Lock. It stops the domain from being moved to another registrar without extra steps. ICANN explains how locked domains work. Turn it on.
Be aware of its limit. Anyone who gets into the registrar account can usually turn the lock off. So the account itself needs a unique password and multi-factor sign-in, which is the code from your phone after the password. Also remove any former employees or old vendors who still have logins, and turn on alerts for changes if the registrar offers them. A lock without a protected login is only half of domain ownership.
While you are in there, glance at the DNS settings too, or ask your IT provider to. Those records are what make your email trustworthy to other mail servers. We walk through the important ones in our post on stopping email spoofing, and they live in the same account you just secured.
When the web designer has your domain ownership
If a designer, agency, or old IT provider controls the account, sort out domain ownership before you end the relationship, not after. People are much more helpful while they still have your business.
Ask them for five things: the registrar name, the expiration date, who is listed as the registrant, the current nameservers, and how they will move the domain into an account your company owns. Then create that account in the business’s name, with your own contact details and multi-factor sign-in, and have them move it in.
Moving the domain does not mean moving the website or the email. Those can stay exactly where they are. A wrong setting during the move can still cause an outage, though, so have whoever manages your IT watch the website and email that day.
Now the unflattering part, because you should hear it before you need it. If a former vendor or employee will not cooperate, getting the domain back is slow. Gather contracts, invoices, payment records, and any emails showing the domain was registered for your business. Contact the registrar and ask what proof they need. If it turns into a real dispute over who owns what, that is a conversation for an attorney, not your IT provider.
This is one of the vendor relationships worth writing down. If you want help keeping track of who holds which account, it is part of our vendor management work with clients.
Put a domain ownership check on the calendar once a year
Once everything is right, the job is keeping it right. Once a year, confirm the registrar, the expiration date, the card on file, auto-renew, the registrant details, the contact and recovery information, multi-factor sign-in, the transfer lock, the nameservers, and who has a login.
Do the same domain ownership check any time you change IT providers, web designers, or marketing agencies. And add it to your offboarding list for anyone who had access to the account, the same way you would turn off their email. Our post on clean employee exits covers the rest of that list.
Keep the results with your other IT records. The passwords and recovery codes go in the password manager, never in the document itself. The UK’s National Cyber Security Centre has a thorough guide to managing domain names if you want the long version.
Frequently asked questions
How do I check domain ownership for my business? Look up the domain with the ICANN lookup tool to find the registrar. Then confirm someone at your business can log into that registrar account and that the business is listed as the registrant.
The public lookup hides the owner’s name. Does that mean we do not own it? No. Personal details are hidden from public results by default now. Log into the registrar account and check the details there.
Who has domain ownership if my web designer registered it? It depends on whose name is on the registration, whose account it sits in, and what your agreement says. If it depends on the designer, ask them to move it into an account your business owns.
Should my domain and website be with the same company? They do not have to be. Plenty of businesses keep the domain, the website, and the email at different companies. Just know which company does which job and how to get into each account.
What happens to domain ownership if my domain expires? Your website and business email can stop working. There may be a short window to recover it, sometimes for an extra fee, but the rules vary. Renew before the date.
If you are not sure who controls your domain right now, that is worth an afternoon to find out. Our IT checkup looks at domain ownership along with the other quiet things that tend to break on a Monday morning, and we are glad to walk through it with you.
Featured image: Pexels
