Once your website and email are up and running, your domain name rarely needs attention. It renews automatically, and nobody logs in to the registrar account for years.
That's why domain ownership problems usually surface at the worst time: when you part ways with a web designer, an employee leaves, or the domain fails to renew. Suddenly email stops working, the website won't load, and nobody knows which company holds the registration.
When a business launches, it's common for an employee, web designer, marketing agency or IT provider to register the domain on its behalf. That works fine until the business needs that person's help to renew, transfer or update it. This checklist shows Houston business owners how to confirm they control their domain before it becomes a problem.
Why domain control matters for your business
Your domain tells browsers where to find your website and tells email services where to deliver your messages. If it expires or its settings change, both can stop working, even if your hosting and Microsoft 365 or Google Workspace subscriptions are fully paid.
Anyone who takes over the domain can also change its DNS settings. That could let them redirect your website visitors, interfere with your email or take services offline. Treat your registrar account with the same care as your bank and payroll accounts.
A domain registration gives you the right to use a name for as long as you keep renewing it. For a business, real control means authorized people inside the company can renew it, update its details, recover the account and approve a transfer, without relying on a former employee or supplier.
1. Find out which company holds your domain registration
You can't confirm who controls the domain until you know the registrar. For .com, .net, .org and other generic domains, enter your domain into the ICANN Lookup tool. It shows the registrar, registration and expiry dates, domain status and nameservers. (You may still hear this called a WHOIS search; ICANN now uses a newer system called RDAP.) Country-code domains such as .uk or .ca use their own registry lookup.
Don't be surprised by an unfamiliar registrar name. Many web hosts and agencies resell domains through another registrar. It's also normal for your domain, DNS, website and email to sit with different companies. You just need to know who handles each one.
2. Confirm your business can log in to the registrar account
Access to WordPress, Squarespace or your hosting account is not the same as control of the domain. Those let you edit the website, but not necessarily renew or transfer the domain.
Sign in to the registrar account and confirm that:
The domain appears in the account
You can change contact details, payment method, renewal settings and nameservers
The account's main email and recovery details belong to the business, not an employee, contractor or supplier
If your web designer or IT provider manages domains for many clients in one account, they can't share that login. Ask them to move your domain into a separate account in your company's name. They can still manage it for you afterward.
3. Check the registration details and contact information
Inside the registrar account, check the registered name holder, organization, address, phone and email. Where an organization is listed, it should be your company, not your web developer, agency or an employee.
A blank or redacted public lookup is normal. Privacy rules and privacy services hide contact details from public results, so the registrar account is the place to check. If your domain uses a proxy service, read the terms and confirm your company is the customer.
Use contact details the business will keep:
A company email address that someone checks, not a personal or supplier address
A recovery method that still works if your business email is down, such as a backup email, phone number or recovery codes
At least two trusted people who know the registrar and how account recovery works
Individual admin logins where the registrar allows them; otherwise, store the single login in a company password manager
4. Make sure your domain will renew
Check the expiry date and turn on auto-renewal with a payment method the business maintains. An employee's or supplier's card can expire or be cancelled without anyone noticing.
Auto-renewal isn't foolproof, so add a calendar reminder before the renewal date to confirm the payment went through. Don't rely on registrar reminder emails alone, especially if they go to an old address. If a domain expires, your website and email can go down, and recovery periods and fees vary. Renewing early is far easier than recovering an expired domain.
5. Know who controls your DNS
DNS tells the internet where to find your website and where to deliver your email. The nameservers in your domain registration show which provider manages those records, and it may not be your registrar.
A typical setup might put the domain with one registrar, DNS with a cloud provider, the website with a host and email with Microsoft 365. That's fine as long as your records list each provider, the approved users and how to recover each account. The UK National Cyber Security Centre also recommends monitoring important DNS records for changes.
Your IT provider can manage DNS day to day. Just keep enough information inside the business to authorize changes and recover the account if that provider becomes unavailable.
6. Lock down the registrar account
Once ownership and recovery details are right, secure the account:
Use a unique password stored in your company password manager
Turn on multi-factor authentication (MFA) using the strongest option available
Remove former employees, agencies and providers who no longer need access
Turn on alerts for DNS changes, transfers, contact updates and renewals
Enable the transfer lock (often called "Registrar Lock" or "Client Transfer Prohibited")
A transfer lock helps prevent unauthorized transfers, but anyone who takes over the login can remove it. MFA and current recovery details matter just as much.
7. What to do if your web designer or IT provider controls your domain
Plan the move before ending the relationship. Ask the supplier for the registrar name, expiry date, registered holder details, current nameservers and the process for moving the domain into your account.
Create a new registrar account in your company's name with the right recovery details and MFA turned on. The supplier can then move the domain into that account or transfer it to another registrar. Moving the registration doesn't require moving your website or email, and nameservers can usually stay the same. Have your IT provider monitor the website and email during the move in case a setting changes by accident.
If a former employee or supplier won't cooperate, gather contracts, invoices, payment records and emails showing the domain was registered for your business. Ask the registrar what evidence it needs, and get legal advice if ownership is disputed.
8. Review your domain once a year
Schedule a yearly check of the registrar, expiry date, payment method, auto-renewal, registration details, recovery options, MFA, transfer lock, nameservers, DNS provider and account users. Repeat it whenever you change IT providers, web designers or marketing agencies, and add it to your offboarding checklist when an employee with access leaves.
Keep the results with your IT records, and keep passwords and recovery codes in the company password manager, not the document.
Business Domain Ownership FAQs
How can I find out who registered my business domain?
Use the ICANN Lookup tool for most generic domains, or the registry's lookup service for a country-code domain. It will show the registrar, though the owner's contact details may be hidden.
Does a private registration mean my business doesn't own the domain?
No. Privacy services hide contact details from the public. Sign in to the registrar account to check the private registration details and service agreement.
Does my web designer own my domain if they registered it?
It depends on the registration details and your agreement. Check who is listed as the registered holder, whose account holds the domain, who pays for it and what your contract says. If it depends on the designer, ask them to move it into an account your business controls.
Should my domain and website hosting be with the same company?
They don't have to be. Many businesses use different providers for the domain, DNS, hosting and email. Just record who handles each service and how to recover every account.
What happens if my domain expires?
Your website and business email may stop working. There may be a limited window to recover it, sometimes for an extra fee, and the rules vary by registrar and domain type. Renew before the expiry date.
Not Sure Who Controls Your Domain? Griffin Technology Solutions Can Help
Griffin Technology Solutions helps Houston businesses confirm who holds their domain, move it into a company-controlled account and secure it with MFA, transfer locks and the right recovery details.
If you're unsure who controls your domain, or you're changing web designers or IT providers, contact Griffin Technology Solutions for a quick domain ownership check.