Who Should Own Your Domain, Hosting and Website Accounts?

A business should normally own its domain, hosting account, WordPress administrator access, analytics, Search Console and Google Business Profile. A developer can receive the access needed to work without becoming the permanent owner of the company’s digital property.

The domain should be registered to the business

The domain is the business’s online address. Losing control can affect the website, email and brand.

The business should know:

• Which registrar holds the domain
• Which email receives renewal and security notices
• When the domain renews
• Who can change DNS settings
• Whether two-factor authentication is enabled

A developer may need delegated access, but the registrant and recovery information should normally belong to the business.

Hosting should usually be in a client-owned account

Client-owned hosting makes the relationship clearer:

• The business pays the provider directly
• The company controls billing and renewal
• The website can be moved without negotiating account ownership
• Technical access can be added or removed

Managed hosting through the website company can still make sense when the client does not want to manage the account or the site requires an environment the developer controls. In that case, the monthly fee, backups, updates, support, cancellation and migration process should be written clearly.

WordPress administrator access

The business should receive an administrator account for the completed website unless the signed agreement states a specific security or management restriction.

Do not share one generic administrator login among several people. Each person should have an individual account with the minimum role needed.

Google Analytics

The analytics property should be created under a business-controlled Google account or organization. The website company can be added with appropriate permissions.

Ownership matters because historical data becomes valuable over time. Starting a new property every time the business changes vendors creates unnecessary gaps.

Google Search Console

Search Console contains indexing, performance and technical information about the domain. The business should have verified owner access and can add developers or search consultants as users.

Google Business Profile

The business should remain the primary owner of its Google Business Profile. Agencies and staff can be added as managers. No outside company should hold the only owner account.

Bing and other search accounts

The same principle applies to Bing Webmaster Tools and other important listings: keep business ownership and grant working access.

Payment and subscription products

If the website uses WooCommerce, Stripe, PayPal or another payment provider, the merchant account and payout details should belong to the business. The developer may configure the connection but should not control the revenue account.

Email delivery

Transactional email systems, SMTP providers and DNS records should be documented. The business should know which service sends contact-form notifications and who receives them.

Premium themes, plugins and fonts

Ask whether paid licences are:

• Owned by the client
• Provided under an agency licence
• Included only while a care plan remains active
• Renewed separately

A website should not unexpectedly lose critical functionality because a licensing arrangement was never explained.

What access does a developer need?

Depending on the project, the developer may need temporary or ongoing access to:

• Hosting
• DNS
• WordPress
• Analytics
• Search Console
• Google Business Profile
• Email delivery
• Payment systems

Access can be granted without transferring ownership. Remove unnecessary access after the engagement ends.

Create an ownership record

Every business should keep a secure inventory containing:

• Service name
• Account owner
• Login email
• Recovery method
• Renewal date
• Billing owner
• Who currently has access

Store passwords in a password manager rather than an ordinary spreadsheet or email.

Questions to ask before signing

1. Who registers and owns the domain?
2. Who owns the hosting account?
3. Will the business receive WordPress administrator access?
4. Who owns analytics and Search Console?
5. Which paid licences are required?
6. What happens if the hosting or care plan is cancelled?
7. How is the website transferred to another provider?
8. Are backups available outside the hosting account?

The practical rule

The website company should have enough access to do the job. The business should retain enough ownership to protect its future.