Ask a business owner who owns their domain and the answer is almost always “we do”. Ask who can log in to the account it is registered in, and the answer gets slower.

Those are not the same question. The first is about who paid for it. The second is about who can change it, move it, or let it lapse — and only the second one matters when something goes wrong.

Whoever can reset the password owns the business online.

Why this matters more than it sounds

A domain is not just the address of a website. Your email runs on it. Every invoice, every customer enquiry, every password reset for every other service you use arrives through it.

If the domain lapses, the website goes and the email goes with it, on the same afternoon. If somebody else controls it and you part on bad terms, they can point it anywhere they like. And if they simply stop answering, you cannot renew what you cannot log in to.

None of that is dramatic in the telling. It is very dramatic on the Tuesday it happens, because by then there is no quick fix.

Where it usually turns out to be

In our experience it is rarely a villain. It is almost always one of three ordinary situations that nobody revisited.

The five-minute check

You do not need anyone technical for this. You need five minutes and, ideally, whoever set the domain up in the first place.

Look it up. Search for a public domain lookup and enter your domain. For many endings the owner details are now hidden for privacy, so the result may simply say they are redacted. That is normal and tells you very little — but it will usually name the registrar, which is the next step.

Find the account. The registrar is the company the domain is registered with. The question is not whether you have heard of them, but whether you personally can log in to the account the domain sits in, today, without asking anyone.

Check the email address on that account. This is the real owner. Whoever receives the password reset can take control of everything else. If it is a personal address, a former colleague’s, or an agency’s, that is your answer.

Check the renewal. When does it expire, is automatic renewal switched on, and is the card on file still valid. A surprising number of domains are lost not to anybody’s bad intent but to an expired card and a reminder email that went to an inbox nobody reads.

If all four answers point to you, to an address you control, with renewal switched on, you are done. Most people are not done — and that is fine, because fixing it is also straightforward.

What to change if it is not you

Move the domain into an account that belongs to the business, not to a person. Register it in the company’s name. Use a role address you will always control for the account email — not the one of whoever happens to be doing it this week.

If you are in the UAE and wondering where to move it to: we keep our own domains and hosting with Tasjeel (affiliate link), an accredited .ae registrar that has been doing this since 2009.

Then switch on automatic renewal, put a card on it that will still be valid next year, and turn on two-factor login. Most registrars also offer a transfer lock, which stops the domain being moved without an extra confirmation; it is worth having on.

If it currently sits with an agency, ask for it to be transferred. A reasonable agency will do it without argument. If one refuses or stalls, that tells you something useful about the rest of the relationship.

This takes an afternoon, and you do not need us for any of it.

That is not modesty. It genuinely is a job for whoever runs the business, and an agency that makes it sound complicated is usually one that would rather keep holding it.

For what it is worth: every domain we register for a client is registered to the client, with us added as a user rather than the other way round. It is one of the first things on our websites page, for exactly the reason above. And if you would like somebody to look over the rest while you are at it — hosting, backups, who else can log in — that is part of maintenance.