Who owns my website, and how to get access when you're locked out

Who owns my domain? Look it up.

Type your web address. We ask the registry and DNS who it is registered with, when it expires and who answers for it, then show the steps for getting it back at that registrar. Free, and no email needed.

Reviewed July 2026; the lookup and the registrar steps were added in October 2026. This is general guidance, not legal advice.

What exactly are you locked out of?

"My website" is really three separate things, often held in three separate accounts. Knowing which one you've lost access to tells you exactly where to go to get it back.

The layer	Who usually holds it	How you get it back
Your domain (your web address)	A registrar (GoDaddy, Namecheap, Cloudflare), sometimes under the designer's account.	Recover the registrar login, or transfer your domain out with an authorization (EPP) code.
Your hosting (the server)	A hosting company, or a reseller account your designer runs.	Identify the provider, then use account recovery or their support to regain access.
Your website files or CMS	On the hosting, or behind a builder or CMS login.	Download them from your hosting. If you're locked out, your live pages are still public and can be captured.

How to get back in, step by step.

Being "locked out" usually means being locked out of one or more of three separate things. Untangle them in this order and the picture gets clear fast.

If the reason you can't get in is that the person who built your site has stopped replying, read how to take back control when your web designer has disappeared alongside this. The recovery steps overlap, but that guide also covers the part this one doesn't: what to do about the human who isn't answering.

Separate the three things you might be locked out of. Your domain (your web address, held at a registrar), your hosting (the server where your files live), and your website files or CMS (your pages themselves). They're often held in different accounts, sometimes by different people. Knowing which one you're missing tells you where to knock.
Check who your domain is registered to. Look your domain up on a free WHOIS tool (ICANN Lookup at lookup.icann.org, or whois.com). It shows the registrar and, unless privacy protection is on, the registrant. This single fact settles most of the ownership question: the registrant is who the registrar treats as your domain's owner.
Recover your domain: it's the master key. If it's in your name or business email, reset the registrar password and you're in. If it's under the designer's account, ask the registrar's support about transferring it to you with an authorization (EPP) code or their dispute process. Control your domain and no one can hold your site hostage, because you can always repoint it.
Recover your hosting and your files. Identify the hosting provider (your web person or old invoices will name it; a WHOIS or DNS lookup can hint at it) and use account recovery or their support. If you genuinely can't get in, remember that everything on your live site is still public: your content can be captured from your pages themselves, so a locked CMS doesn't mean lost content.
Put everything into accounts in your own name. Once you're back in, move your domain, hosting, and logins into accounts you control, with your own email and card. This is what turns "I think I own it" into "no one can lock me out again". It's also the clean starting point for moving to a new developer or a service that maintains it for you.

Getting your domain back, registrar by registrar.

The lookup above names your registrar and opens its steps. Each set below was written from that registrar's own help pages, which we link so you can read their exact wording.

At any registrar

Find the registrar. The lookup above does this, or use ICANN Lookup. The registry sometimes shows the registrar's company name rather than the shop you bought from.
Try the password reset with every email address you might have used, including old work addresses. The reset goes to the email already on the account.
If your former developer holds the account, ask them to move your domain into an account in your name at the same registrar, or to give you its authorization code (also called the EPP or transfer code) so you can move it to a registrar of your choice. At every registrar we checked, the person holding the account has to start the move.
If your domain is in your name but you cannot reach the account, contact the registrar's support and say so. Of the registrars below, only GoDaddy publishes a request form for this; elsewhere, ask support what proof they need.
Expect a pause after changing your details as owner. Most of the registrars we checked can block a move to another registrar for 60 days after a change to your name or email as the domain's owner.

GoDaddy

Checked on 15 October 2026 against GoDaddy's help pages.

Find the account. GoDaddy's username recovery asks for the account's email address, and a domain in the account if there is one, then sends a code to that email.
If you cannot reach that email, or your domain is in your name but in someone else's account, GoDaddy has an account recovery request with an option for each. It asks for a colour copy of a government photo ID.
If your former developer holds it, ask them to move your domain to your GoDaddy account. They start it with your account's email address, and you accept within 10 days. Website and email products do not move with it.
To move it away from GoDaddy, the account holder gets the authorization code from the domain portfolio.

What to ask your developer for: a move of your domain into your own GoDaddy account, or its authorization code.

Hostinger

Checked on 15 October 2026 against Hostinger's help pages.

Reset the password. Hostinger's reset sends a link to the account's email. If the account was opened with a Google, Facebook or GitHub sign-in, sign in that way instead.
If you cannot reach that email, Hostinger's account recovery needs an email you can reach, a domain in the account, and a payment receipt for the account. They say they reply within two business days.
If your former developer holds it, ask them to move your domain to your Hostinger account. No code is needed, both emails confirm the move, and it works for .in addresses.
To move it away from Hostinger, the account holder gets the EPP code from the domain's overview, once it is more than 60 days old.

What to ask your developer for: a move into your Hostinger account, and the receipt if you paid them for the domain.

BigRock

Checked on 15 October 2026 against BigRock's help pages.

For a .in address, the registry may name the company behind BigRock instead of BigRock itself: Endurance International Group India Private Limited. Other sellers can register domains through the same companies, so if you never had a BigRock account, ask whoever built your site where they bought your domain.

Reset the password. BigRock's reset sends a link to the account's registered email.
If you cannot reach that email, BigRock's help pages do not describe a way back in, so contact BigRock's support directly.
If your former developer holds it, ask them to move your domain to your BigRock account. They need your Customer ID and login email, and their account needs two-step sign-in turned on. You can find your Customer ID once you are signed in.
To move it away from BigRock, the account holder finds the transfer code on the domain's order page.

What to ask your developer for: a move of your domain to your BigRock Customer ID, or its transfer code.

Namecheap

Checked on 15 October 2026 against Namecheap's help pages.

Reset the password. Namecheap's reset takes a username, an email or any domain in the account, and the email it sends also shows the username.
If the account's email no longer works, Namecheap says to contact their support by live chat or ticket, and may ask for more details to verify you.
If your former developer holds it, ask them to push your domain to your Namecheap account. You approve it by email within 7 days, and the move is final.
To move it away from Namecheap, the authorization code goes to your domain's registrant email, which can differ from the account's email.

What to ask your developer for: a push of your domain to your Namecheap username.

Cloudflare

Checked on 15 October 2026 against Cloudflare's documentation.

Lost your two-step sign-in? Cloudflare's account recovery needs the account's email and a device you have signed in from before, then takes 3 to 5 days. Cloudflare documents no recovery for a lost account email.
If your former developer holds it, ask them to move the registration to your Cloudflare account. Add your domain to your account first; you then have 5 days to accept, and it cannot leave for 30 days afterwards.
To move it away from Cloudflare, the account holder unlocks it and copies the authorization code.

What to ask your developer for: a move of the registration into your own Cloudflare account.

Got the keys back? Paste your site's address and we will build you a fresh site from it.

Get your free preview

Where InkySites fits, if you want it handled.

If untangling registrars and hosting isn't how you want to spend your week, InkySites adopts the whole thing. We rebuild your existing site and run it for you, and because handback is built into the deal, you never trade one lock-out for another.

See it before you commit

Paste your current URL. We email you a fresh redesign of your existing site within 48 hours: free, no card, no call. You only go live if you like it.

You keep the keys

It's a flat $29 a month for hosting and unlimited reasonable changes. Your domain and code are yours and are handed back any time you ask, as a named part of the deal. The whole point of InkySites is that you're never locked in: any developer could take over tomorrow.

The honest trade

We're new, with one published case study so far, and there's no phone line or account manager: you reach us by email, and once your site is with us you can ask for changes on WhatsApp by connecting your phone. That's the deliberate trade for the flat price and the speed. It's worth weighing if a hands-on human relationship matters most to you.

Questions you might ask.

Do I own my website, or does my web designer?

In most cases you own the important parts: your domain name (if it was registered in your name or your business), your content, and your brand. What a designer often holds is access (the logins to your hosting, your CMS, or your domain account) and sometimes the custom code or theme they built, depending on your contract. So the honest answer is usually "you own it, but they can be holding the keys." Ownership is settled by whose name is on your domain registration and what your agreement says; access is settled at the registrar and hosting company.

How do I get access to my website if I can't log in?

Work backwards from your domain. Look your domain up on a free WHOIS tool to find the registrar, then recover the registrar account through its password reset or support team. If it's in your name this is quick, and if it's under the designer's account the registrar can walk you through a transfer using an authorization code. Once you hold your domain you can point it wherever you like. Your hosting and CMS are recovered the same way: identify the provider, then use account recovery or support. Your domain is the master key, which is why it comes first.

Can I move my website to a new developer?

Yes. Once your domain is in an account you control, moving to a new developer or host is routine: you get a copy of your site's files, the new host puts them up, and you update your domain's DNS to point at them. As long as your email (MX) records are carried over, your email is unaffected; only your website's records change. The one thing to line up first is ownership of your domain; with that in hand, no one can hold your site hostage, because you can always repoint it yourself.

Want it handled? See the redesign first.

Paste your URL and we'll email you a fresh redesign of your existing site in 48 hours. Free, no card. If you like it, it's $29 a month, and your domain and code stay yours.