The question that catches most owners off guard
When I sit down with a new client, one of the first things I ask is simple: if you had to log in right now to the account that controls your domain name, could you do it?
Most owners cannot. The domain was registered years ago by a web designer, a nephew, a marketing agency, or an employee who has since moved on. The website works and the email works, so nobody thinks about it. But your domain name is the one part of your online presence you cannot rebuild from scratch. Lose the website files and you can make a new site. Lose the domain and you lose your web address, your email, and every business card, invoice, and Google listing that points to it.
Domain, DNS, and hosting are three different things
These three get mixed up constantly, so here is the plain version.
Your domain is the name itself, like yourbusiness.com, and it is rented year by year from a company called a registrar. GoDaddy, Namecheap, and Squarespace Domains are common ones.
DNS is the address book that tells the internet where your website and email actually live. It usually gets managed through the registrar too.
Hosting is the computer that stores and serves your website files. It is often a completely different company.
The registrar account is the one that matters most, because whoever controls it controls everything downstream. They can point your domain anywhere, transfer it away, or simply let it die.
The three ways I see businesses lose domains
The first is the expired credit card. Auto-renew fails quietly because the card on file expired, the warning emails go to an address nobody checks, and the domain lapses. There is usually a grace period of a few weeks, but after that the domain can go to auction. I have seen owners quoted hundreds or even thousands of dollars to buy back a name that used to cost fifteen dollars a year.
The second is the ex-developer lockout. The person who built the site registered the domain under their own personal account. Years later they retire, disappear, or fall out with the owner, and now the business has to beg or litigate for its own name.
The third is the departed employee. The domain sits in a proper business account, but the login and the renewal notices go to the personal email of someone who quit two years ago.
How to check who controls yours today
This takes ten minutes.
- Go to lookup.icann.org and type in your domain. The result shows which registrar holds it and the expiration date. Write both down.
- Ask yourself who receives the renewal emails. If you do not know, that is your answer: someone else controls it.
- Try to log in to the registrar account yourself. If you cannot, find out today who can, while everyone involved is still reachable and on good terms.
If the lookup shows a registrar you have never heard of and a contact you do not recognize, do not panic, but do not wait either. Recovering access is far easier while the current holder is cooperative.
Take control this week
Here is the order I follow when we clean this up for clients.
- Get the domain into a registrar account owned by the business, registered to an email address on your own domain or a shared business inbox, not anyone's personal email.
- Turn on auto-renew and add a backup payment method so one expired card cannot kill the domain.
- Renew for multiple years. A typical .com runs roughly 10 to 20 dollars a year, so five years of safety costs less than one lunch meeting.
- Turn on two-factor authentication and the registrar's transfer lock so the domain cannot be moved without your approval.
- Store the login in a password manager that at least two people in the business can reach.
When HashWhales builds a site, the domain always sits in an account the client owns. We ask for access, never ownership, and I think you should demand the same from anyone you hire. If you are locked out right now, start with the ICANN lookup, contact the registrar's support with proof of your business identity, and get it resolved before renewal season, not during it.