If You Can’t Log In to Your Own Domain, You Don’t Own Your Website

Your website may be the most expensive thing your business owns that you cannot log in to.

Here is how it tends to come out. A business owner decides to change agencies, or just wants a new phone number on the site. They email the person who built it. The reply takes a week. Then comes the question nobody planned for: who actually holds the domain name?

Often the answer is the agency, because registering it was part of the setup and nobody thought twice. Usually that is convenience rather than bad intent. It still means a company you are trying to leave controls the address your customers type.

Five things make up “your website”

People say “the website” as if it were one object. It is five or six, held in different accounts, and each one can be yours or someone else’s.

The pattern is the same in every row. The right arrangement is that you own the account and the agency is a named user inside it. The risky arrangement is the reverse.

Why it usually goes wrong quietly

Almost nobody sets out to lock a client in. It happens because the fast way to launch a site is to use the agency’s own hosting, the agency’s own email for the domain registration, and the agency’s own analytics property. Every one of those shortcuts works perfectly until the day you want to leave, or the day the agency closes, or the day your contact there stops answering.

Some platforms add a second layer. A site built inside a hosted drag-and-drop builder may not export in a form another developer can use. You can keep the words and images, but the design itself has to be rebuilt. That is a legitimate trade-off for some businesses. It should be a choice you made knowingly, not a discovery.

Questions to ask before you sign

1. Will the domain be registered in my name, to my email address?
2. Whose account will the hosting sit in, and can I be an administrator on it?
3. If I leave, what do I receive, in what format, and how quickly?
4. Will analytics and Search Console be set up under my Google account?
5. Are any parts of the site built on a platform or licence that I would have to keep paying for to keep the site running?

Ask us the same questions

Any agency, Wavefront Studio included, should answer these in writing before you commit. A clear answer is easy to give. A vague one is information too.

When the agency hosting it is fine

None of this means an agency should never host your site. Many do it well, and for a small business it can be the sensible choice: security updates, backups and uptime handled by people who do it every day. The condition is that the arrangement is written down. You should be able to see what you are paying for, know what happens if you leave, and receive a copy of the site and its content on request.

Hosting you do not control is fine. Hosting you cannot get out of is the problem.

What to do this week

1. Look up your domain at lookup.icann.org. It shows the registrar and the registration details. Check whose name and email are on it.
2. Find out where the site is hosted and whether you can log in. If you cannot, ask for access in writing.
3. Open Google Analytics and Search Console. Check that your own account has owner access rather than viewer access.
4. Write down every login the business depends on: domain, hosting, analytics, ads, email. Note who holds each one.
5. Put the list somewhere another person in your business can find it.

None of that costs anything, and it takes an afternoon at most. It is also the work that matters on a bad day, when somebody has left or something has gone down and nobody knows where anything lives.

What not to expect

Getting control back is not always quick. A domain transfer needs an authorisation code from the current registrar, and registrars can apply waiting periods after certain changes. If the agency is slow to respond, expect it to take weeks rather than days.

Owning the pieces also does not mean you can maintain them yourself. You still need someone who knows how to update the site safely. The aim is to make sure that whoever that is, you can change them without asking permission.

Start with the domain lookup. It takes two minutes, and you will know straight away whether the rest of this article applies to you.