WEB DESIGN

Do you own your website? Domains, hosting, and lock-outs

Quick test: if your web person vanished tonight, could you still control your site, your domain, and your email tomorrow? A scary number of owners cannot answer that. Here is who owns what, and how to make sure it is you.

Share
Key Takeaways
  • Your domain, hosting, and website files are three separate things, and ownership of each can quietly end up with a designer instead of your business.
  • Paying for a website does not make you its owner. The registrant on the domain and the names on the accounts decide who controls what.
  • Domain fights are common enough to have an industry: 6,168 disputes were filed with WIPO in 2024, roughly 68% more than in 2019.
  • Changing the registrant on a domain can trigger a 60-day transfer freeze under ICANN policy. Sort ownership calmly, not mid-crisis.
  • Platform lock-in is real: Wix Editor sites cannot be exported to another host, per Wix's own documentation.
  • The fix is boring and cheap: domain, accounts, and files in your business's name, with logins you hold. Own it like your phone number.
6,168
domain-name disputes filed with WIPO in 2024
+68%
growth in WIPO domain disputes since 2019
60
days a domain can be frozen after registrant details change
0
Wix Editor sites you can export to another host

Do you own your website? Only if three things are true: the domain is registered to your business, the hosting and builder accounts are in your name, and you can get at the site's files. Paying the invoice made the website exist. It did not automatically make any of those three things yours.

This is not a technicality. It is the difference between changing web designers the way you would change accountants, and discovering at renewal time that someone else holds your address on the internet. The whole problem is preventable with about an hour of admin, and this article is that hour.

What are the three things people confuse?

The domain, the hosting, and the website itself. They are bought separately, they live in different accounts, and each one can be owned by a different person, which is exactly how businesses get into trouble. The cleanest way to hold it in your head:

The ownership stack

Three separate things, three separate accounts. Toggle to see who should hold the keys to each.

Show:
Registrant rules: ICANN registrant FAQs.

Of the three, the domain matters most. A website can be rebuilt in a week. A domain that took your Google rankings, your review links, and your printed business cards with it cannot. Treat it like your phone number: the thing everything else attaches to.

How does ownership quietly end up with the wrong person?

Through convenience, almost never through malice. The designer says "I'll handle all that," registers the domain under their own account, puts the site on their agency hosting, builds it inside their builder subscription. Setup takes one meeting instead of three, and the owner never touches a password. At the time it feels like service. It is actually a transfer of control that nobody wrote down.

The arrangement works fine right up until something changes: the designer retires, gets busy, raises prices, or disagrees with you about an invoice. Then you discover the practical meaning of "registrant." In the ownership check we run inside every site audit, it is common to find the domain in the designer's name, the hosting on the designer's card, and the owner holding nothing but a URL.

Who actually holds the keys

What we find when we check ownership during audits. Toggle between the domain and the hosting account.

Login for:
Directional shares from RMCM's audit work, not a formal survey. The pattern, not the decimals, is the point.

What does getting locked out actually look like?

It rarely looks like theft. It looks like a renewal email you never received, because it went to the designer's inbox. A site that needs one urgent fix nobody can log in to make. An invoice that arrives with the unspoken message that the domain renews only if it is paid. Or the quietest version: the designer disappears, the hosting card expires, and the site is simply gone one Tuesday.

When the fight is formal, it has a venue. WIPO administered 6,168 domain-name disputes in 2024, near the all-time record, and filings have climbed roughly 68% since 2019 (WIPO caseload data). Most of those are cybersquatting fights between strangers, but the lesson transfers: recovering a domain through formal channels costs real time and money. Not losing it costs an email.

Domain fights keep growing

Disputes filed with WIPO under the UDRP and related policies. Toggle the view.

View:

The platform version of the lock-out deserves its own warning. Some builders are one-way doors: Wix's own documentation states that sites built in the Wix Editor cannot be exported or hosted anywhere else. You can leave, but the building stays. That is not a scandal, it is their business model, but you should know you are signing a lease, not a deed, before you spend two years building on it.

What should you own and control?

Five things, all in your business's name, with logins stored somewhere a second person in the company can find:

AssetWhere it livesWho should hold it
DomainRegistrar (GoDaddy, Namecheap, CIRA registrars for .ca)Your business as registrant, your email on the account
HostingHosting provider (Vercel, SiteGround, etc.)Your account, your billing card
Site files / codeThe host, a repo, or the builderYou, with a copy or repo access
Business emailGoogle Workspace, Microsoft 365Your admin login, tied to your domain
Google Business ProfileGoogle accountYou as primary owner; helpers as managers

The designer can still do all the work. That is the part people miss: ownership and operation are separate. Give your web person manager access, DNS permissions, a seat on the hosting account. What they should not be is the registrant, the account holder, or the only human who knows the passwords. When RMCM builds a site, handover means exactly this: domain in your name, hosting on your account, code in a repo you could give to any developer tomorrow. Not because we expect to be fired, but because a client who stays out of choice beats one who stays because they are stuck.

Not sure what you actually control?

Run the free RMCM audit. We check the ownership basics along with your visibility, and tell you what needs moving into your name.

START WITH A FREE AUDIT

What should you ask a designer before you start?

Five questions, asked before any money moves. A good designer answers all five without flinching; I covered the broader vetting in how to hire a web designer.

  • "Will the domain be registered in my business's name, in my registrar account?" The only acceptable answer is yes.
  • "Whose hosting account will the site live on?" Yours, with the designer given access, not the reverse.
  • "If we part ways, what exactly do I keep?" You want: domain, files or code, content, and every account. In writing.
  • "Can this site be moved to another host or developer?" If the honest answer is no, you are choosing a landlord, not a builder. Decide deliberately.
  • "Where will the passwords live?" A shared vault or documented handover, not one person's memory.

How do you take back control if it is already a mess?

Calmly, and while the relationship is still good. The steps, in order:

  1. Find out what is true. Run your domain through ICANN's lookup tool (for .ca domains, the CIRA registry has its own). Note the registrar, the expiry date, and whether the registrant looks like you or your designer.
  2. Ask for the domain, in writing. A cooperative designer can transfer it to your registrar account or update the registrant in an afternoon. Offer to cover the fee; it is trivial.
  3. Mind the freeze. Under ICANN's change-of-registrant policy, updating registrant details can lock the domain against registrar transfers for 60 days. Sequence the moves so the lock lands somewhere harmless.
  4. Collect the rest. Hosting login or a migration to your account, a copy of the site files or repo access, admin on the email and the Google Business Profile.
  5. If they refuse, escalate in writing, and know the formal routes exist: registrar complaints, and for clear-cut cases, WIPO's dispute process. Also know the sad math: sometimes rebuilding on a domain you own beats a year of fighting for one you do not. That decision is easier to avoid than to make.

Frequently asked questions

Do I own my website and domain?
Only if three things are true: the domain is registered with your business as the registrant, the hosting and builder accounts are in your name with logins you hold, and you have access to the site files or code. Paying for a website does not automatically make any of these true. Check the domain right now with ICANN's lookup tool; if your designer's name is on the registration, you are renting, not owning.
What happens to my website if my web designer disappears?
It depends entirely on what you control. If the domain, hosting, and files are in your accounts, you hand the keys to a new developer and carry on. If they were in the designer's accounts, you may be unable to renew the domain, update the site, or even prove it is yours. Worst case, the domain expires or the hosting bill stops being paid and the site simply goes dark. This is why ownership needs sorting before there is a problem.
How do I make sure I control my own domain?
Look it up first: ICANN's lookup tool (or the CIRA registry for .ca domains) shows the registrar and registration details. Then make sure the registrant is your business, the registrar account is under your email, and you can log in. If a designer holds it, ask them to transfer the domain or update the registrant to you. Note that changing registrant details can trigger a 60-day transfer freeze under ICANN policy, so do it calmly, not mid-crisis.
Can my web designer hold my website hostage?
If they hold the domain and the accounts, practically yes, and it usually surfaces at renewal time or when you try to leave. It is rarely framed as hostage-taking; it sounds like "the site is on our platform" or "we handle all that for you." The prevention is contractual and practical: ownership of the domain, accounts, and files in your name from day one, in writing. Any designer who resists that is telling you something.
What should I do if my domain is registered in someone else's name?
Ask for it back, politely and in writing, while the relationship is still fine. A cooperative designer can transfer the domain to your registrar account or change the registrant to your business in an afternoon. If they refuse and you have a trademark or clear rights to the name, formal routes like WIPO's UDRP process exist, but they cost time and money; over 6,000 domain disputes were filed with WIPO in 2024 alone. Recover it early, before it becomes leverage.

Own it like your phone number

Nobody would let a contractor register the business phone number in the contractor's name. The website deserves the same instinct, because it is the same kind of asset: the thing customers use to find you, attached to years of rankings, reviews, and printed material. Portable, replaceable vendors; non-negotiable ownership of the address.

The homework fits in one afternoon. Look up your domain, list who holds each of the five accounts, and move anything that is not in your name. If you are hiring for a new site, ask the five questions before the deposit. And if you want a second set of eyes on what you actually control today, the free audit includes the ownership check, no drama required.