Who Really Owns Your Domain Name?
Most owners can name their web designer, their host, and their website builder, but not the company that actually holds their domain name. That gap stays invisible until a renewal quietly fails or an agency relationship sours, and the address every customer knows suddenly belongs to a process instead of a person. Every domain has an owner, a renewal date, and, from November 1, a higher wholesale price. This guide shows how to check all three in about five minutes with a free ICANN lookup, then set up renewals so they never become an emergency.
Verisign, the company that operates the .com registry, reported a 75 percent final renewal rate for .com and .net at the end of 2025. Read that number the other way: roughly one in four expiring registrations is not renewed. Some are abandoned on purpose. Many are not. The card on file expired, the warning emails went to an inbox nobody checks, or the one person with the registrar login stopped answering.
That should get your attention, because your domain is the only part of your website you cannot rebuild. Lose your pages and you can restore them from backups. Lose your domain and you lose the address itself, which means every link ever pointed at you, every page Google has indexed, and every email address that ends in your name. The five checks below take about five minutes each, starting with the one most small businesses have never run: finding out who actually controls the thing.
Step 1: Look up who really controls it
You do not need an account or a paid tool. ICANN, the organization that coordinates domain names globally, runs a free lookup at lookup.icann.org.
Open the lookup page and type your domain, without the www.
Press Lookup and give it a few seconds.
Read three fields in the result: Registrar Expiration (the renewal deadline), Registrant (who it is registered to), and Domain Status.
Here is our own domain in the tool:
)
Three things worth decoding in a result like this:
A privacy service as the registrant is normal. "Domains By Proxy" or similar in the Organization field means WHOIS privacy is switched on, not that someone else took your domain. The question that matters is which registrar account the domain lives in.
Those clientTransferProhibited status lines are good news. They are standard locks that stop anyone from moving or editing the domain without logging in first.
The expiration date is the most important line on the page. Put it in your calendar now, 60 days early.
How to check it worked: you should be able to log in to the registrar account that holds the domain, yourself, today. If your agency or developer "handles the domain" and you have no login, the domain is theirs in every practical sense. Fixing that while everyone is on good terms is the whole point of this step: ask them to transfer it into an account you own, or to make you the account holder with the registrant contact set to your email.
Step 2: Make the renewal impossible to miss
Expired domains rarely die dramatically. They die of quiet administrative causes. Four settings prevent almost all of them:
Turn on auto-renew at your registrar.
Add a backup payment method. The most common failure is an expired card plus ignored warning emails.
Set the registrant contact to an email that does not end in the domain itself. If yourbakery.com lapses, mail to owner@yourbakery.com stops working at exactly the moment the final notices are sent there.
Renew for multiple years. Fewer renewal events means fewer chances for one to fail.
There is also a price reason to act on point 4 this month. Verisign is raising the wholesale fee it charges registrars for every .com registration, renewal, and transfer on November 1, 2026. The increase is allowed by its registry agreement, which permits up to 7 percent in each of the final four years of every six-year contract period:
| Effective date | Wholesale fee per year | What changed |
|---|---|---|
| Sep 1, 2023 | $9.59 | Up from $8.97 |
| Sep 1, 2024 | $10.26 | 7% increase |
| Nov 1, 2026 | $10.97 | 7% increase, announced April 2026 |
| Possible by 2030 | $13.42 | If Verisign takes the full 7% in each remaining eligible year |
Registrars add their own margin on top of the wholesale fee, and most pass increases through. Years you add before November 1 are processed at the current fee, so if you know you will still want this domain in 2029, renewing now for three or more years is the rare case where paying early is simply cheaper.
Step 3: Know the timeline if it ever lapses
People lose domains they wanted because they assume expiry works like a library book: a small fine, a friendly grace period, no lasting harm. The real process has a cliff at the end, and the cost climbs at every stage. ICANN's Expired Registration Recovery Policy even requires registrars to disrupt your DNS before deleting the name. An expired domain's website going dark is a deliberate last warning, not a glitch.
The practical reading: during the registrar grace window you can usually renew at the normal price. During the 30-day redemption period you pay a restore fee on top of the renewal. Once pending delete begins, nobody, including your registrar, can bring the domain back. And once it is released, any domain with traffic history tends to be caught within seconds by automated drop-catching services, after which buying it back costs whatever the new holder decides.
Step 4: Keep the power to move it
The "held hostage" stories you hear are almost never about theft. They are about a domain sitting in someone else's registrar account, or a registrar being slow to let it leave. Three rules from ICANN's Transfer Policy are worth knowing before you need them:
Your registrar must give you the transfer authorization code within 5 calendar days of your request. Auth code, EPP code, and transfer code all mean the same thing.
A registrar may not withhold that code just because you are in a billing dispute with them.
60-day locks are real. A domain cannot move to a new registrar within 60 days of its first registration or of a previous transfer, and changing the registrant name or email can trigger another 60-day lock. If you plan to move a domain, transfer first and update contact details after.
Do
Register the domain in an account you own, even when an agency builds the site
Add the agency or developer as a technical contact or delegate user
Use a personal or secondary email as the registrant contact
Keep registrar login details in the same place as your other business credentials
Transfer first, then update contact details
Don't
Let a web person register your domain inside their own account
Use an email at the domain itself as the registrant contact
Change registrant name or email right before a planned transfer
Assume a billing dispute lets the registrar keep your auth code: it does not
Wait for the expiry email to act. It may be going somewhere nobody reads
Buying a new domain? Read the year-two price
A short word on choosing, because this is where renewal traps get planted. First-year promotional prices are marketing. The number that matters is the renewal price, usually printed smaller, so check it before you register. A plain .com with a fair renewal beats a clever novelty ending whose renewal price you never looked up.
And wherever you build the site itself, keep the domain registered in your own account. StoryPress, like any honest website platform, connects to a domain you hold at your own registrar: the $5 a month covers the site, and the address stays yours even if you leave. Any builder, agency, or developer who insists the domain must live in their account is creating exactly the situation Step 1 exists to catch.
“A website can be rebuilt in a weekend. A lapsed domain in someone else's hands cannot.”
The five-minute checklist
Run the lookup, then confirm each line:
The registrar shown is one where you can log in today.
Auto-renew is on, with a backup payment method saved.
The registrant email does not end in the domain itself.
The expiration date is in your calendar, 60 days ahead.
You have renewed through at least 2027, before the November 1 fee increase.
You know where to generate your auth code without asking anyone's permission.
Each check costs minutes. The failure they prevent costs a restore fee and a dark website at minimum, and at worst the address your business is known by.
)
Accessibility Basics Beyond Alt Text
Most owners file accessibility under legal worries and never open the folder again. That is a mistake on two counts: the fixes are small, and they help every visitor, not just the few using screen readers. This guide walks through five checks you can run in an afternoon with free tools: text contrast, keyboard navigation, link text, form labels, and one automated audit. We measured real contrast ratios for the greys designers love, counted the 42 tab stops on our own homepage, and ran Google's audit on ourselves. It flagged us three times. We kept the screenshot.