Whose name is your domain actually in?

Do the check first. It takes about two minutes, it costs nothing, and everything else here depends on what it tells you.

Then the part the lookup tools cannot help with: what each possible answer actually means, why your designer may have done it this way without any bad intent at all, and how to move a domain into your own name when you decide you want it there.

The two-minute check

Two lookups, both free, no account needed.

1. Who owns the domain. Go to ICANN Lookup and enter your domain. ICANN administers the domain name system, so this is the canonical source rather than one registrar’s version of it. Read the Registrant field. That is the owner. Ignore the technical and administrative contacts for now — the registrant is the one that matters.
2. Who hosts the site. On the same record, look at the name servers. They usually name the company: something ending in the host’s own domain. A hosting checker tool will do the same job in plainer language if the name servers do not obviously say who they belong to.

Registrars including GoDaddy, Namecheap and Hostinger all run their own WHOIS lookups that return the same data. Any of them is fine. ICANN Lookup is just the one nobody has a commercial interest in.

What each answer actually means

✅ Your name, or your business’s name

This is what you want. You are the registrant, you can renew it, transfer it, and move it if you ever change who builds or hosts your site. Nothing to do — although it is worth checking the contact email is one you still read, because that is where renewal notices go.

✅ A privacy or proxy service

You may see something like “Domains By Proxy” or “Privacy Protect” instead of a name. This is usually fine and often automatic — many registrars turn it on by default to keep personal contact details out of a public database that spammers scrape.

The thing to confirm is that your account controls the privacy service. Log into your registrar and check the domain is listed. If you cannot log in, or you do not know which registrar it is, treat this the same as the next case.

⚠️ Your web designer’s name or company

Common, and worth resolving — not because something bad has happened, but because it means the person who can move, renew or release your domain is not you.

In practice, everything works fine right up until it does not: they change their pricing, they stop replying, they retire, or you want to work with somebody else. See below for what to do.

🔴 A company you have never heard of

Worth understanding before you worry. It can be entirely benign — a hosting reseller, an agency’s parent company, a white-labeled service your designer buys from. It can also mean the domain was registered by somebody several steps removed from you.

Ask your designer directly and without accusation: “I ran a WHOIS lookup and the registrant is listed as X — can you explain the arrangement?” The answer is usually straightforward and the question is entirely reasonable.

Why designers do this, and why it is usually not malice

This part matters, because the internet’s version of this topic is written as though every web designer is holding domains hostage. Most are not.

• Convenience, mostly. Setting up a client’s own registrar account, getting them to add a card, and walking them through DNS is a slow conversation with somebody who did not hire them for a lesson in domain administration. Doing it on the designer’s own account takes four minutes.
• Bulk accounts. A designer managing thirty client sites in one dashboard has an actual operational reason for it, and it genuinely does make maintenance easier.
• Resold hosting. Plenty of small studios buy hosting wholesale and resell it. The margin is a real part of a small business’s income, and it is not dishonest as long as it is disclosed.
• It was probably in the paperwork. Somewhere in an agreement nobody read carefully, and it was not hidden — it just was not flagged.

None of this makes it the right arrangement for you. It does mean the conversation should start as an administrative request rather than an accusation, and that usually gets a much faster result.

When it becomes a problem

Four situations, and they arrive without warning:

• They stop answering. Illness, burnout, a business winding down. The domain does not care why.
• The price changes and you have no realistic way to shop around.
• You want to move to somebody else, and discover the thing you thought you owned requires their cooperation.
• They go out of business. Worst case, because there may be nobody to ask — and if the card on the account stops working, the domain quietly expires.

The expiry case is the one to take seriously, because it is the only part of this that becomes permanent. Once a domain lapses it goes through a renewal grace period, then a 30-day Redemption Grace Period where restoring it costs a substantial fee, then five days of pendingDelete during which nothing can be done at all — and then it is released for anybody to register.

How to get it into your name

Straightforward when everyone is cooperative, and the mechanics are the same either way.

1. Ask. “I would like the domain registered in the business’s name. Can you either transfer it to an account I control, or update the registrant details?” Most designers will simply do it.
2. Decide which you want. Updating the registrant details leaves the domain where it is but changes who owns it. A full transfer moves it to your own registrar account. The transfer is cleaner, because afterward you hold the login.
3. Get the authorization code. Also called an auth code or EPP code — a password that authorizes the move, issued by the current registrar. The domain also has to be unlocked.
4. Start the transfer at your new registrar, using that code. You will get a confirmation email; approving it starts the process, which typically completes within about a week.
5. Expect a 60-day lock afterward. ICANN’s Transfer Policy locks a domain against further transfers for 60 days after a new registration, a registrar transfer, or a change of registrant. It is not your registrar being difficult and it cannot be waived — it just has to be waited out. Which is the argument for doing this when nothing is on fire.

If the current holder will not cooperate at all, that is a different problem with a different route: the host and the registrar both have account-recovery processes that run on documentary evidence — proof that your money paid for the account — rather than on who asks most insistently. Gather the billing records before you send another email.

What to ask before you hire anyone

Four questions. Any honest supplier answers all four without hesitating.

• Whose name will the domain be registered in?
• Whose name will the hosting account be in, and whose card pays for it?
• If I leave, what exactly do I take with me, and what does that cost?
• Can I have a copy of the site whenever I ask?

The answers matter less than whether they are given plainly. Vagueness here is the signal.

How we do it

The domain and the hosting account are registered in your name, on your billing, and we take no margin on either. If you leave, there is nothing to transfer, because nothing was ever in our name — that is the arrangement, in full.

Common questions

How do I find out who my web host is?

Look your domain up in ICANN Lookup and read the name servers, which usually name the hosting company. A hosting checker tool will report the same information in plainer language if the name servers are not obvious.

What is the Registrant field in a WHOIS lookup?

The registrant is the legal owner of the domain — the person or company whose name it is registered in. It is not necessarily whoever built the site, pays for hosting, or is listed as the technical contact.

Why does my WHOIS show a privacy company instead of my name?

Most registrars offer privacy protection, often by default, to keep personal contact details out of a public database. It is normal. What matters is that the registrar account behind it is one you can log into.

Can my web designer hold my domain hostage?

If the domain is registered in their name they control it, which is why the registrant field matters. In practice most disputes are resolved by asking plainly. Genuine refusals become a contractual matter rather than a technical one.

What is an auth code or EPP code?

A password issued by your current registrar that authorizes a domain transfer. You give it to the registrar you are moving to. The domain also has to be unlocked before the transfer will start.

How long does a domain transfer take?

Usually about a week once approved. Afterward ICANN’s Transfer Policy locks the domain against further transfers for 60 days, which also applies after a new registration or a change of registrant.