// DNS

Who Owns Your Domain? (And What Happens If You Cannot Log In)

A small business domain is often the single most valuable piece of digital property a company has. Here is why ownership gets murky, and how to check that yours is actually in your name.

Every few months, somewhere in Knoxville, the same phone call happens.

A business owner needs to make a change to their website or set up a new email tool, and they cannot log in to the place that controls their domain. The original designer is long gone. The email on the account is a former employee. The credit card on file expired three years ago. Nobody knows the password. And the renewal is due in six weeks.

This is not a rare story. It is one of the most common messes we clean up. And the root cause is almost always the same: the business never actually owned its own domain to begin with.

A quick definition

Your domain name is yourbusiness.com. It is registered through a company called a domain registrar. GoDaddy, Namecheap, Google Domains (now Squarespace), Cloudflare, and about a hundred smaller ones. The registrar is who you pay the yearly fee to keep the name.

Inside that registrar’s account, there is a record that says who the legal owner of the domain is, where mail should go, which DNS servers control the records, and who has permission to make changes.

The person who can log in to that account controls the domain. Completely. Regardless of whose name is on the paperwork.

That is the part that surprises people. Legal ownership and practical control are not the same thing. If someone else is in the account, they have the keys, even if you are the business.

How this goes wrong

A few patterns, in order of how often we see them:

The web designer registered it for you. This is the classic. You hired someone to build a site ten years ago. They registered the domain on their own account, “to make things easier.” They are no longer in business. Their account is locked. The domain renews automatically on a card that may or may not still work. You have no access, no records, and no leverage.

An employee set it up. Same story, different person. The office manager in 2018 signed up with her personal email. She left in 2021. The account is still under her name. You are one password reset away from her old Yahoo address from being completely locked out.

The account exists but nobody knows which one. The business has three possible registrars, two possible logins, and no receipts. Everybody assumes somebody else has the password.

The renewal card is dead. Most registrars will try to charge a card on file, warn by email a few times, and then release the domain. If the card is expired and the email on the account is unread, the domain can expire without anyone noticing until the website goes dark.

What a domain expiring actually costs

A domain you have used for ten years is not just a web address. It is every piece of stationery, every email address on a business card, every backlink on the internet, every Google ranking, and every customer who remembers how to find you.

If you lose it, you do not get it back cheaply. There is a brief grace period where you can renew late, usually at a penalty. After that it goes to auction. Domain investors watch expirations on known businesses, buy the name, and then sell it back to you for four figures, five figures, or more depending on how recognizable the name is.

The fix is free if you catch it early, and catastrophically expensive if you do not.

How to check ownership right now

Five minutes of homework is worth doing.

Go to a WHOIS lookup tool. ICANN has one at lookup.icann.org. Type in your domain.
Look at the registrar name. That is the company you have an account with.
Check the expiration date. Write it down.
Log in to that registrar. If you cannot, start a password recovery now, while you have time, not two weeks before renewal.
Once in, confirm the contact email is one you actually control, the billing card is current, and auto-renew is on.

If the registrar name is one you do not recognize, that is a signal. Somebody else set it up, and you may need to do a formal transfer to get the domain onto an account you control.

What a clean setup looks like

A small business domain should live in an account where:

The email on the account is a business email you will still have access to in five years, not a personal Gmail tied to one employee.
The billing card belongs to the business, not an individual.
At least two people at the business know how to log in.
Auto-renew is turned on, and the expiration is set a year or more out.
A domain lock is enabled, so the domain cannot be transferred to another registrar without your explicit approval.
The nameservers point to whoever is actually managing your DNS, which may or may not be the registrar.

None of these are technical settings that require a developer. They are account hygiene. And yet most small business domains fail at least two of them.

What we do

When we take on managed hosting or DNS management for a client, the first thing we do is verify that the business actually owns and controls its own domain. If it does not, we help get it transferred to a registrar account in the business’s name, with clean records, proper contacts, and a lock on it.

This is not a glamorous piece of work. It is also the piece of work that has saved several clients from discovering, at the worst possible moment, that they did not actually own the thing their entire business ran on.

If you are not sure who controls your domain, the contact form is the fastest way to find out. We will run a lookup, tell you what we see, and be straight about whether it is fine as is or worth tidying up.

A domain is the cheapest, most valuable thing a small business owns. It is worth the ten minutes it takes to make sure it is actually yours.