Key facts
- A domain registration and a hosting account are two separate services, sometimes with two different providers, and each needs its own ownership check rather than one assumed to cover both.
- The registrant of record on a domain, visible through a public WHOIS lookup, holds the strongest legal claim to that domain regardless of who built the website running on it.
- Domain transfers between registrars are subject to a lock period, commonly around 60 days, after initial registration or certain changes to the registration.
- A hosting account billed to an agency's payment method can go offline if that card is canceled or fails, taking down the website and any email addresses tied to that domain.
- Most registrars allow a registrant of record to be updated or a domain transferred to a new account without needing to rebuild or re-register the domain itself.
Domain and Hosting Are Two Separate Things
Your domain name and your hosting account are commonly bundled together in conversation, but they are two separate services, sometimes with two separate providers, and each one needs its own ownership check. The domain is the registration of the name itself, such as yourbusiness.com, held at a registrar. Hosting is the server space where your actual website files and email, if hosted there, live and run.
It is entirely possible to own your domain but not your hosting, or the reverse, especially if an agency set both up during a build and used their own accounts for convenience. Ask specifically about each one rather than assuming a single answer covers both, since a clean answer on hosting does not tell you anything about who controls the domain.
Check the registrant of record on your domain using a WHOIS lookup, which is a public tool that shows who a domain is registered to, subject to any privacy protection the registrar applies to that public record.
Why This Is Worth Checking Now, Not Later
Whoever is the registrant of record on your domain has the strongest legal claim to it, regardless of who built the website that sits on top of it. If an agency registered your domain under their own account, moving it to your own name later requires a domain transfer, and if the agency is uncooperative, that transfer can become a genuine dispute rather than a quick request.
Hosting carries a similar risk. If your hosting account is billed to the agency's card and tied to their login, an unresolved dispute or a canceled agency card can take your website and any email addresses on that domain offline with very little warning, even if your business relationship with the agency ended amicably.
Ownership also affects your email. If your business email runs through the same domain and hosting setup, losing access to either one can mean losing incoming email as well as your website, which is a bigger operational problem than most business owners expect until it happens.
How to Check and Fix Your Setup
Start with the domain. Ask your agency directly which registrar the domain is registered with and whose name and email are listed as the registrant. If it is registered under the agency's account, ask them to either transfer it to a registrar account you control, or add you as the registrant of record on the existing registration, which most registrars support without a full transfer.
Next, check hosting. Ask which hosting provider is being used, whose payment method is on file, and whether you have your own login to that hosting account's control panel, separate from any website admin login the agency gave you for day to day edits.
If either the domain or the hosting is in the agency's name, ask for it to be moved to an account under your business, using your own payment method, as a standard part of any handover, not as a special request that requires justification.
Setting It Up Correctly With a New Provider
When you start with a new agency, ask them to register the domain directly under your name and email, or to help you register it yourself and give them access to manage it rather than owning it. The same applies to hosting: set up the account under your business's name and payment method, then invite the agency in as a collaborator with the access level they need to do their work.
Keep a private record, outside the agency's systems, of your registrar login, your hosting login, and the renewal dates for both, since a lapsed domain renewal can take a live website offline with no warning if nobody outside the agency is watching for it.
A domain transfer between registrars is subject to a lock period, commonly around 60 days, after a domain is first registered or after certain changes are made to it, so plan any transfer with that in mind rather than expecting it to happen instantly.
Related questions
Use a WHOIS lookup tool, which is a public registry search, and enter your domain to see the listed registrant, though privacy protection offered by many registrars can mask personal details while still confirming which registrar account controls it. If the listed registrar account is not one you recognize or control, ask your agency directly who set it up and request access.
Yes, through a standard domain transfer process, but it requires cooperation from whoever controls the current registrar account, since they need to provide an authorization code and approve the transfer. If the agency is unresponsive, most registrars have a dispute process for a business trying to reclaim a domain registered on their behalf, though it takes longer than a cooperative transfer.
The website and any email addresses tied to that hosting account go offline, often with little or no warning if the cancellation happens because a payment method on file expired or was declined. This is the core risk of hosting being billed to an agency's card rather than your own, since you may not even know a payment failed until the site is already down.
Yes, working access is normal and often necessary for them to do the job, such as updating DNS records or deploying site changes. The distinction is between working access, which they need, and sole ownership or the only billing method on file, which should stay with your business regardless of who is doing the day to day work.
It happens, especially for a first website, but the better practice is registering it directly under the client's name and email even when the agency handles the technical setup. If an agency already registered your domain under their own account, ask for it to be moved into your name; most reasonable agencies will do this without resistance once asked.
Want a second opinion on your situation?
Get a free, no-obligation proposal. We’ll look at your site and your market and tell you honestly what we’d do — and what we wouldn’t.
Get your free proposal