You've Lost Access to Your Own Website
Higher-risk issue — be cautious and consider professional help sooner.
The site is live, it has your name on it, and you can't get into it — because the person who built it has gone, or nobody wrote the logins down.
Common signs of this issue
- The website is online but nobody at your company can log in to change anything.
- The person or agency who built it has stopped replying, closed down, or you have parted ways.
- You don't know who your hosting company is, or which email address the account is under.
- The domain renewal notices go to an address you don't control — or you have no idea where they go.
- You can log in to edit pages, but not to the hosting, so nothing can be fixed when it breaks.
- Someone is asking for money to release your own site, domain, or files.
- You have been told the site is on "their" account and can't be moved.
Safe checks you can do yourself
None of these require sharing passwords with anyone.
- Find out who your domain is registered with using any public WHOIS lookup on your domain name. The registrar will be named even when the owner's details are hidden. That tells you who to talk to about the single most important asset you have.
- Work out who is hosting the site. A WHOIS or DNS lookup shows the nameservers, and those usually name the host or a service like Cloudflare in front of it. Old invoices and card statements are the other reliable source — hosting shows up as a small recurring charge.
- Search your email for the original signups. Look for the domain name, the words "welcome", "invoice", "renewal", or the host's name, across every company inbox including any address belonging to a former employee. Registration confirmations are usually still sitting there.
- Try the account recovery route before asking anyone for a favour. Registrars and hosts have password resets; if the account email still reaches someone in the business, you may already have control and not know it.
- Establish which of the four pieces you have, because they are separate things people often confuse: the domain, the hosting, the website login, and the business email. It is entirely possible to hold two and be missing two.
- Ask, in writing and politely, for a handover. A short, businesslike email asking for the domain transfer code, hosting login, and site admin account works far more often than expected — and if it doesn't, having asked in writing matters for the next step.
- Gather proof of ownership now: the invoices you paid, the company name, the card used, and any contract. Registrars and hosts have formal ownership-dispute processes, and they run on documents.
- Take a copy of what you can reach. Even if all you have is a public website, save the text and images you would hate to lose. It costs nothing and takes the worst outcome off the table.
What this usually means
In the great majority of cases this is not sabotage — it is untidiness. Someone set the site up years ago on their own account because it was quicker, the business changed hands or changed agency, and nobody ever moved the paperwork. The site keeps working because hosting renews automatically, which is precisely why nobody notices there is a problem until something needs changing or a renewal fails.
The piece that really matters is the domain. Hosting can be replaced in an afternoon and a website can be rebuilt from a copy, but a domain that lapses or gets moved out of reach takes your email, your search rankings, and every link anyone has ever shared with it. If you can only regain control of one thing this month, regain control of the domain.
Where a genuine dispute exists, it is usually about money rather than the site itself — an unpaid invoice, or a designer who considers the work unpaid for. That is worth knowing because the practical solution is often a commercial conversation rather than a technical one, and because registrars will not adjudicate a contract dispute for you; they will only respond to their own formal ownership process.
What not to do
- Don't let the domain renewal lapse while you sort this out — a lapsed domain can be snapped up by someone else, and getting it back is expensive or impossible.
- Don't threaten or escalate before you have asked plainly for a handover; a cooperative former developer is much faster than any formal process.
- Don't pay a stranger who cold-contacts you offering to "recover" your site or domain — that is a common scam aimed at exactly this situation.
- Don't try to force your way into accounts you're locked out of. Beyond the legal issue, failed attempts can lock accounts further and damage a legitimate ownership claim.
- Don't rebuild a replacement site on a brand-new domain to sidestep the problem unless you have truly exhausted the alternatives — you lose your rankings and every existing link.
- Don't repeat the mistake once you're back in: put the domain, hosting, and site accounts in the business's name, on a business email address that outlives any one person.
When to get help
If the domain is the piece you cannot reach, or a renewal is close, that is the point to get help quickly — recovery through a registrar's ownership process is a procedural job that someone who has done it before can move much faster, and the deadline is real. Help is also worth it when you can reach the site but not the hosting, since a professional can take a complete copy and move it to hosting you control, which converts a hostage situation into an ordinary migration. Whatever you do, get it done before the next renewal date rather than after it.
Not sure what to do next?
Answer a few short questions and we'll point you to the safest next step — DIY, a freelancer, or a direct review. No passwords required.
Is this a business website? If this issue may be costing you leads, sales, or trust, you may want a direct review instead of trial and error.
Frequently asked questions
How do I find out who controls my domain?
Run a public WHOIS lookup on your domain name. It names the registrar even when the owner's contact details are private, and the registrar is who you deal with to prove ownership or start a transfer.
My web designer won't give me access. What can I do?
Ask plainly and in writing first. If that fails, gather proof that the business paid for and owns the domain and hosting, then use the registrar's and host's formal ownership-dispute processes. If the dispute is really about an unpaid invoice, settling that is usually faster than any process.
Can I move my website without the old developer's help?
Often yes. If you can reach the hosting account, the site and database can be copied and moved to hosting you control. If you can only reach the public site, a professional can still rebuild from a crawl of it, though you lose anything not publicly visible.
Who owns a website — me or the person who built it?
It depends on what you agreed, but as a rule the business that paid for it owns the content and the domain registered on its behalf. Ownership of accounts opened in someone else's name is messier, which is why paid invoices and written agreements matter here.
What happens if my domain expires while I am locked out?
The site and any email on that domain stop working, and after a grace period the name can be bought by someone else. Renewing is far cheaper and simpler than recovering a lapsed domain, so renewal comes before every other step.
How do I stop this from happening again?
Register the domain and hosting in the business name using an email address the business controls, keep the logins somewhere more than one person can reach, and give contractors their own accounts rather than the master login.