In this article · 7 sections
- What the business should own
- "Access" vs "ownership"
- Handover checklist to request from your developer
- Put it in the contract
- If you've already lost access
- Frequently Asked Questions
- Is it wrong for an agency to register the domain for me?
- Should I share my passwords with the agency?
- Who owns the website design?
- How often should I check my accounts?
- Transparent ownership with Joboo Web
A common story: a business pays someone to build a website. Years later, the developer stops responding, the domain is about to expire, and the business owner discovers that the domain, hosting, Google Business Profile and even the Facebook page are registered in the developer's name. Getting them back can take months — or may not be possible at all.
This isn't usually malicious. Developers often register things in their own accounts for convenience. But your online presence is a business asset. Here's what you should own and how to make sure you do.
What the business should own
| Asset | Why it matters | Whose name it should be in |
|---|---|---|
| Domain name | Your address; losing it means losing email and website | Business or owner, with your email |
| Hosting account | Where files, database and backups live | Business — developer can have access |
| Website files and database | The website itself | Business should receive full copies |
| Google Business Profile | Maps listing and reviews | Business as primary owner |
| Search Console and Analytics | Your data history | Business as owner/admin |
| Google Ads and Meta Ads accounts | Ad history, audiences and billing | Business; agency added as user/partner |
| Facebook Page, Instagram, YouTube | Followers and content | Business; agency as admin or partner |
| Business email accounts | Communication history | Business |
| Payment gateway, SMS, WhatsApp API | Money and customer communication | Business, registered with your KYC |
"Access" vs "ownership"
Most platforms let you add users with different permission levels. The right model is: you own, the agency has access. When you change agencies, you simply remove their access. Google Business Profile, Google Ads (manager accounts), Meta Business Manager and Search Console all support this.
Handover checklist to request from your developer
- Domain registrar login, or proof the domain is in your name with your email.
- Hosting control panel login.
- FTP/SFTP and database credentials.
- Website admin panel login (owner-level).
- A full backup of files and database.
- List of third-party services used (SMTP, APIs, plugins, fonts) and their accounts.
- Any licence keys for paid themes, plugins or scripts.
- Owner access to Google Business Profile, Search Console, Analytics, Tag Manager.
- Admin access to ad accounts and social pages.
- Renewal dates for domain, hosting and SSL.
Store everything in a password manager, and change passwords after the handover.
Put it in the contract
Before starting a new project, agree in writing that:
- The domain will be registered in the business's name.
- The business will receive the full source code and database on completion and payment.
- The agency will provide all credentials on request.
- Any reusable framework the agency owns is licensed to you for your website.
A professional agency will have no problem with this. If someone refuses, take it as a warning sign. See 10 questions to ask a web design company.
If you've already lost access
- Domain: look up the registrant details using a WHOIS tool or your registrar. If the domain is in your name, the registrar can help you recover access with identity proof.
- Google Business Profile: request ownership through Google's process; the current owner gets time to respond.
- Meta pages: Meta has a page access recovery process through Business Support.
- Website files: if you can't get them, a new website may be faster than a dispute.
Act before renewal dates — an expired domain can be bought by someone else. Read domain expiry protection.
Frequently Asked Questions
Is it wrong for an agency to register the domain for me?
Not if it's registered in your name with your contact email. The problem is when the agency is the registered owner.
Should I share my passwords with the agency?
Prefer adding them as users. Where a shared login is unavoidable, change the password when the work ends.
Who owns the website design?
It depends on your agreement. Ask for full ownership of the custom design and content in writing.
How often should I check my accounts?
Once a year, review who has access to each account and remove anyone who no longer needs it.
Transparent ownership with Joboo Web
With Joboo Web, domains and accounts are in the client's name and full logins are handed over. See website design or contact us.