Own Your Domain, Hosting and Email — Before Someone Else Does

Your domain is the address of your business on the internet. Your email runs on it. Your website lives behind it. Lose control of it and you lose all three at once.

Yet a surprising number of small businesses have never checked whose name their domain is actually registered in. Very often, it is not theirs.

The horror pattern (it is depressingly common)

It usually starts innocently. A business owner hires a freelancer or an agency to "handle everything". The provider registers the domain — in their own account, sometimes in their own name. They set up hosting on their reseller plan. Email too. The site launches. Everyone is happy.

Then one of these happens:

• The provider disappears. They close shop, stop answering emails, or simply lose interest. The domain expires because the renewal notice went to their inbox, not yours. Your website and email go dark on the same day.
• You have a dispute. You want to leave, or you contest an invoice. Suddenly the domain becomes leverage. "We'll transfer it once the outstanding balance is settled." Technically your brand, practically their asset.
• The provider gets acquired or restructures. Your domain is now a line item in someone else's spreadsheet. Nobody answers your transfer request because nobody knows who you are.

None of this requires bad faith. Most of the time it is simple negligence. But the outcome is the same: your business address on the internet is controlled by someone who is not you.

The cost of prevention is close to zero. The cost of recovery can be weeks of downtime, legal letters, and in the worst case, buying your own name back on the aftermarket.

Three things that must be in YOUR name

Think of these as the crown jewels. Everything else — the website code, the design, the hosting plan — can be rebuilt or moved. These three cannot be easily replaced:

Asset	What it is	Who must control it
Domain	Your name on the internet (yourbusiness.com)	You: registered under your own registrar account, with your legal entity as registrant
DNS	The settings that point your domain to your website and email	You, or at minimum an account you can access and change
Email	Your @yourbusiness.com mailboxes	You: your own Google Workspace / Microsoft 365 / provider account, paid on your card

A good developer or agency should have delegated access to these — never ownership. There is a big difference between "my agency can edit my DNS" and "my agency owns my DNS".

Hosting is slightly different. It is fine for your developer to run the hosting, because a website can be redeployed elsewhere in days. A domain cannot. If you only fix one thing after reading this, fix the domain.

Check who owns your domain — today, in two minutes

You do not need to be technical. Here is the walkthrough:

1. Go to a whois lookup site — for example lookup.icann.org (run by ICANN, the organisation that oversees domains). For a .pt domain, use whois.dns.pt, the official Portuguese registry lookup.
2. Type your domain and search.
3. Look at three fields:
   • Registrant / Titular — this should be your name or your company's legal name. If it shows your web agency, a freelancer, or a name you do not recognise, that is the problem.
   • Registrar — the company where the domain is registered (e.g. Cloudflare, Namecheap, Amen, PTisp). Do you have login credentials for an account there? If not, you do not control your domain.
   • Expiry date — put it in your calendar. Better: turn on auto-renew once you control the account.

Note that many registrars hide personal registrant details for privacy (GDPR redaction). That is normal. The test that matters is simpler: can you, right now, log in to the registrar account that holds the domain? If the answer is no, treat it as urgent.

If the domain is in someone else's name

Do this while the relationship is still good — it gets much harder after a falling-out:

1. Create your own registrar account at a reputable registrar. For .pt domains, any DNS.pt-accredited registrar works; you can also manage directly with DNS.pt.
2. Ask the current holder for a transfer. For most extensions (.com, .net, .org) this means an "auth code" (EPP code) and unlocking the domain; the transfer completes in about 5 days. For .pt, ownership changes and registrar changes go through DNS.pt procedures — check dns.pt for the current process, as rules change.
3. Update the registrant to your legal name or company. This is the ownership record, separate from which account holds it.
4. Put the renewal on your own card with auto-renew on.

A professional provider will do this without friction. Resistance or vague delays are themselves the answer to whether you should stay.

The handover checklist when leaving a provider

When you change developer, agency or hosting company, collect all of this before the old relationship ends:

• Registrar account credentials, or the domain transferred into your account
• DNS access (often at the registrar; sometimes Cloudflare or similar) and a copy of all current DNS records
• Email admin access (Google Workspace / Microsoft 365 admin console) with billing moved to you
• Full copy of the website: code, database, and uploaded files
• Access to any connected services: analytics, search console, payment provider, booking system
• List of all recurring bills related to the site — who pays what, where
• Removal of the old provider's accounts once handover is verified

At Feitura this is our default, not a favour. Every project we deliver — sites, stores, custom applications — is set up so the domain, DNS and email are in the client's name from day one. Our care plans include monitoring renewals so nothing lapses. It costs us nothing to do it right; it costs you everything when it is done wrong.

Protect the crown jewels: passwords and 2FA

Owning the accounts is step one. Not losing them is step two:

• Unique, long passwords for the registrar and email admin accounts. A password manager makes this painless.
• Two-factor authentication (2FA) on both — an authenticator app, not SMS if you can avoid it. A hijacked registrar account means a hijacked business.
• Registrar email must not depend on the domain itself. If your registrar account's recovery email is [email protected] and the domain breaks, you are locked out of the tool that fixes it. Use a separate address (e.g. a personal Gmail) for the registrar account.
• Two people with access. If everything lives only in one founder's head and phone, one lost device becomes a company incident. Document where the accounts are and who can reach them.
• Calendar the expiry dates for the domain and any certificates, even with auto-renew on. Cards expire; auto-renew silently fails.

The five-minute ownership audit

1. Whois your domain. Is the registrant you?
2. Can you log in to the registrar right now?
3. Is auto-renew on, on your own card?
4. Do you have admin access to your email, with billing in your name?
5. Is 2FA on for both accounts?

Five yeses and you are fine. Any no is a task for this week, not this quarter.

If you're planning a new website and want it built so that everything is yours from day one — domain, DNS, email, code — tell us about your project and get an estimate.