Website stewardship guide 01
Could you renew your domain or give a new provider access without calling the person who built your site? This guide helps you find the accounts behind your website, confirm the business controls them, and put the recovery details somewhere your team can reach.
← All website stewardship guidanceFind the domain account
Map connected services
Confirm business access
Protect recovery
Record exit steps
Why this matters
Your website address, website files, and business email may be managed in different accounts. The registrar manages the domain registration. DNS is the set of records that directs visitors and email to the right services. Hosting is where the website runs. One company can handle all three, but access to the page editor does not necessarily include access to the others.
That distinction matters when a card expires, an employee leaves, or you change website providers. Finding the right account during a renewal emergency is much harder than checking it while everything works. Start with a short account list: the services you use, who controls each one, and how an authorized person gets access.
Responsible practices
Find the registrar, check the registrant details, and confirm that the business can sign in. Review the expiration date, payment method, renewal notices, and recovery contact. Keep a second reminder outside the registrar account. Automatic renewal still needs a working payment method and someone who reads the notices. Turn on registrar lock so the domain cannot be transferred without your approval.
List the domain, DNS, hosting, website editor, email, forms, booking, and analytics services. Ask your provider to fill in the technical connections. For each service, record the login address, business owner, billing contact, renewal date, and the location of recovery instructions. Store a reference to your password manager rather than passwords or backup codes in this list.
Invite staff and providers through named accounts and suitable roles wherever possible. The business keeps the main account; a provider receives the permissions needed to do the work. When someone leaves, remove their access and check shared credentials, recovery contacts, and connected applications too.
Use multifactor authentication: an additional sign-in check alongside a password. Keep recovery methods available to authorized business personnel if the usual phone or employee is unavailable. Avoid depending entirely on an email address that would stop working if the same domain or provider account failed. Test the documented recovery path carefully without disabling working access.
Ask which files, content, licenses, and accounts belong to the business and which are rented or licensed from a provider. A hosted website may have export limits. Moving the website often only requires a DNS change; transferring the domain registration is a separate decision with its own requirements. Put the exit steps in writing while the relationship is straightforward.
Worked example
Illustrative example: a small service business has one website, business email, and an appointment tool.
You have enough to start when another authorized person can identify the right account and contact without asking the original developer. That person does not need every technical password.
Account list
Find your registrar and check when the domain renews.
Confirm that an authorized person at the business can access each critical account independently.
Use the example to complete your account list with your provider, then store it in a business-controlled location.
Choose an alternate person who can handle a renewal or recovery if you are unavailable.
Explain which DNS records support the website and business email, and preserve a copy before changing them.
Set up named roles, multifactor authentication, and a tested recovery path for critical accounts.
Document supported exports, license restrictions, and the exit steps for services the business might replace.
Avoid these failures
Good website care lowers risk, but no provider can guarantee uninterrupted service.
Questions business owners ask
The business or appropriate legal owner should retain access to the registration, renewal, and recovery methods. A provider can help administer it through suitable access. Confirm the registrant details and account control; a website invoice alone does not establish either.
DNS directs website and email traffic to the right services. Hosting supplies the environment where the website runs. They can be supplied by one company or several, so document the accounts separately.
Often you can keep the existing registrar and change only the required DNS records. Have the provider identify what is actually moving and review transfer requirements before starting a separate registration transfer.
Gather the agreement, invoices, registration details, and any existing business access. Contact the provider or service through verified channels and ask for its ownership or recovery process. Avoid creating conflicting accounts or changing DNS before you understand the existing setup.
Primary guidance
Plan the next step