Home lab

Who owns your business domain? How to check and take back control

← All guides

Who it is for

This is for a small business owner or office manager who is not completely sure who controls the business’s domain name, the yourbusiness.com part of your website and email address. It fits especially well if a past web designer, a relative, or a former employee set things up, or if you have never seen a renewal notice yourself. You do not need any technical skills. Plan on about an hour, plus some waiting if someone else currently holds the account.

Why this matters

Your domain name is rented, not bought. It is held in an account at a company called a registrar, and it has to be renewed, usually every year. Whoever controls that registrar account controls where your website points and where your email goes.

When that account belongs to someone who has moved on, problems show up at the worst time:

  • The card on file expires, the domain lapses, and your website and email stop working at the same moment.
  • You cannot change hosts or fix an email problem, because nobody can log in to update DNS.
  • A former vendor can hold the domain in their own name, which makes it slow and awkward to get back.

What you need

  • A list of anyone who might have set up the domain (past web designers, IT help, staff, family).
  • Access to the business email inboxes and old receipts, so you can search for registrar messages.
  • A business credit card for renewals.
  • A phone or authenticator app for two-step login.

Steps

1. Look up the public record

  1. Open ICANN Lookup and type your domain, for example yourbusiness.com.
  2. Write down three things: the registrar name, the expiration date, and the name servers.
  3. Do not worry if the owner’s name and email are hidden. Most registrars hide those for privacy now. The registrar name and expiry date are what you need first.

If the expiration date is in the next 30 days, jump to step 5 and get it renewed before anything else.

2. Find the registrar account

  1. Search every business inbox, and any personal inbox that might have been used, for the registrar’s name plus words like “renewal,” “invoice,” or “domain.”
  2. Check card statements for charges from that registrar.
  3. Ask each person on your list whether they have an account there. If one of them does, ask whether the domain is in an account in your business’s name or in theirs.

3. Log in and check the details

Once you are in the account:

  1. Confirm the domain is listed and the expiry date matches what you saw in step 1.
  2. Open the domain’s contact details. The registrant (the legal holder) should be your business, with your business name, not a vendor’s.
  3. Check the account’s login email. Use an address you will always control, and ideally one that is not on the same domain. If the domain ever lapses, a password reset sent to you@yourbusiness.com may never arrive.

4. If someone else holds it, ask for it the easy way

Most of the time a past vendor is happy to hand it back. Ask clearly and in writing.

  1. If they have it in their own account at the same registrar, ask them to move the domain into an account you own. Many registrars call this an account change or a “push.”
  2. If you would rather use a different registrar, ask them to unlock the domain and send you the authorization code (sometimes called an EPP or transfer code). You then start a transfer from your new registrar’s site (ICANN Transfer Policy).
  3. Expect some waiting. Registrars may block a transfer for a period after a new registration, a recent transfer, or certain contact changes. Your registrar’s help pages will tell you its rules.

If the person cannot be reached or refuses, contact the registrar’s support and ask about its process for proving you are the rightful holder. Have business records ready, such as formation papers, past invoices for the domain, and proof that the website and email are yours.

5. Lock it down

Do these the same day you get control:

  1. Turn on auto-renew and put a current business card on file. If the registrar offers it, renew for several years at once.
  2. Turn on two-step login for the registrar account.
  3. Turn on the transfer lock (often called registrar lock or domain lock), so the domain cannot be moved away without you unlocking it first.
  4. Add a second admin you trust, if the registrar supports it, so the business is not stuck if one person is unavailable.

6. Note where DNS lives

The registrar and the DNS host are not always the same company. The name servers you wrote down in step 1 tell you who answers for your domain’s records (website, email, and so on).

  1. If the name servers point to a different company, find that account too, and repeat steps 3 and 5 there.
  2. Export or screenshot your current DNS records and save them somewhere safe. If anything ever changes by mistake, you have a copy.

7. Write a one-page domain card

Keep it with your other important business records:

  • Domain name, registrar, and expiry date
  • Where DNS is hosted
  • Which logins exist and who holds them (do not write passwords on the card; keep those in a password manager)
  • Who to call if the website or email stops working

Add a calendar reminder 60 days before the expiry date, even with auto-renew on, to check that the card on file still works.

Caution

  • Watch out for “domain renewal” letters and emails that do not come from your actual registrar. Some look official and try to get you to transfer or pay somewhere else. Only renew inside the registrar account you confirmed in steps 2 and 3.
  • Do not start a registrar transfer in the middle of a website move or an email change. Finish one change, confirm everything works, then do the next.
  • Before changing name servers, save a copy of every DNS record. Moving name servers without copying the records is a common way to break email.
  • An expired domain is not always gone right away. Registrars usually offer a grace period, but the rules and recovery fees vary by registrar, so do not count on it (ICANN renewal and expiration FAQs).
  • It is fine for a web person to have access, but the registrar account should belong to the business, not to them.

Not sure who controls your domain, or want someone to untangle it and lock it down?

Get a free quote

The weekly note

A short email on tech and the home lab, from the same engineer. Confirm from your inbox before the first issue. Unsubscribe whenever you want.