Who Owns Your Domain? Here's How To Check In Four Minutes

Your domain is your address. Everything else (the website, the email, the listing that points at it) hangs off it. And a surprising number of small businesses don't control theirs, don't know they don't, and find out on the day it stops working.

This is a four-minute check. Do it now, for your own business, and then you never have to think about it again.

01Step one: find out where it's registered

Search for "WHOIS lookup" and put your domain into one of the tools that comes up. You'll get a record showing the registrar (the company the domain is registered with) and some dates.

Two things to read. The registrar name: GoDaddy, Namecheap, Cloudflare, Google, whoever. And the expiry date, which is the one that eventually bites.

The contact details are probably hidden behind privacy protection, which is normal and not a problem in itself. It does mean the record alone won't tell you who controls it, which is what step two is for.

02Step two: try to log in

This is the real test, and it's the one people skip because they think they know the answer.

Go to that registrar's website and try to sign in with an email address of yours. Not "I'm sure I have that written down somewhere." Actually try it, now.

Four possible outcomes:

You're in, and you can see the domain. You control it. Skip to the end and just check the expiry and the card.

You're in, but the domain isn't in the account. It's under a different account: possibly one of yours with a different email, possibly somebody else's.

You can't get in. Try a password reset. If the reset email arrives, you're fine. If it goes to an address you don't control, that's your answer.

You have no idea which registrar it is and the WHOIS is private. Then in practice you don't control it today, whoever theoretically owns it.

03Step three: check the renewal

If you did get in, two more things while you're there.

Is auto-renew on? Turn it on if not. A domain that lapses becomes available to buy, and there is an entire industry watching for exactly that. You do not get a grace period from whoever buys it.

You do not get a grace period from whoever buys it.

Whose card is on it? If it's not yours, you get no warning when that card expires. The first sign will be the site going down.

04What each bad answer actually means

It's under your old developer's account. Extremely common and usually not malicious: it was faster on day one to buy it on their own card than to walk a new client through six signups. It only becomes a problem when they move on, and by then it's been three years. The whole failure is worth understanding, because the domain is the piece that can genuinely be lost.

It's under a web company's account as a matter of policy. Less innocent. Some shops hold the domain deliberately, because a client who can't leave doesn't. Ask for it to be transferred to an account in your business's name. A straight answer tells you what kind of relationship you're in.

It's under a personal email of yours you've stopped using. Fix the email on the account before that mailbox disappears, because password resets go there.

It's registered to somebody who isn't reachable. Harder, not hopeless. Registrars have a process for disputes and for recovering a domain when you can prove the business is yours. Start it early rather than near a renewal date, because these take as long as they take.

05Getting it moved

If somebody reachable holds it, this is a friendly request and not an accusation. Most developers hand things over without any fuss. It usually just hasn't come up.

What you're asking for is a transfer to an account in your business's name, with your card and your email on it. Ask in writing so there's a record of what was asked and when. Transfers between registrars take a few days and there's a code involved; the registrar walks you through it.

Do the same for everything else while you're at it: the hosting, the Google listing, the analytics, the email. The full list is worth having written down.

06How it should work

Your domain, registered in your business's name, on an account with your email and your card, on day one. Not transferred later once the project's finished, that's a promise that depends on somebody following through. Registered that way at the start, when doing it properly costs nothing.

That's how I do it, and I'd say the same thing if you were hiring somebody else: it's the minimum, not a favour. Anyone who resists it is telling you something useful.

07The part that takes four minutes and matters most

Go and try to log in. Right now, before you close this.

Not because something is definitely wrong, but because the difference between finding out today and finding out on the morning your email stops working is enormous, and the check costs nothing.

If it goes badly and you're not sure what to do with what you found, tell me what you found and I'll tell you what I'd do about it, whether or not you end up hiring me. And if you want the whole setup done properly from the start, that's part of every package.