Who Actually Owns Your Web Address? A Calm Domain Safety Check for Busy UK Firms

Most small businesses treat their domain name like the sign above the door: always there, rarely examined. Then a renewal card expires, the website goes dark, email starts bouncing and the Google Business Profile begins to look suspicious. In 2026, the web address is not a nice-to-have. It is the asset your site, inbox and local visibility all sit on. A short, calm check once a year is far cheaper than an emergency transfer.

Start with the renewal, not the website

Open your registrar account and do the boring bit first. Confirm the expiry date, check that auto-renew is switched on, and make sure the card on file has not expired. If the billing email goes to a departed employee or an old shared inbox, fix that today. Reminder emails are useful, but they are not a system.

For .co.uk domains, renewals run through Nominet and your registrar, and there are grace periods. That does not mean you should test them. Put the renewal date in a shared calendar 30 days before it falls due, with a named person responsible. A domain that renews quietly is doing its job.

Check the name on the registration

The registrant is the legal owner of the domain. It should be your business, not your web developer, not the hosting company and not a former marketing freelancer. For .co.uk domains, the registrant contact details should reflect the business or its owner, with an email address that will still exist next year.

If an agency registered the domain on your behalf, ask for written confirmation that it is held for your business and can be transferred. If the registrant details are stale, update them. Keep the registrar login in a business password manager rather than one person's personal account. Ownership is not just a name on a screen; it is the ability to prove and recover control.

Lock the account, not just the door

Registrar lock helps prevent unauthorised transfers. Check that it is switched on. Ask what the process is for obtaining a transfer or authorisation code, and only request one when you are actually planning a move. Enable two-factor authentication on the registrar account, and use a role-based email address such as [email protected] for recovery. Personal inboxes are a single point of failure.

If a member of staff leaves, remove their registrar access the same day. Shared credentials are not a succession plan. A password in a drawer is not a security policy either.

Find out who actually controls DNS

DNS is what points your domain to your website and your email. Ask your provider a simple question: where are the nameservers hosted, and who can edit the records? If an agency manages DNS on your behalf, ask for a plain list of the records and the process for getting access.

Keep a snapshot of the important records, especially those used for email. If one supplier holds the domain, the hosting, the DNS and the email with no clear export route, that is concentration risk. You do not need to be technical to ask who holds the keys.

Plan for the provider that goes quiet

Most suppliers are fine. Some disappear, get acquired or simply stop responding. If that happens, you need a transfer route. Where sensible, keep the registrar separate from the web host. Make sure you know how to get a transfer code, and keep backups of the website and important email. If a .co.uk provider becomes unresponsive, the registrar and Nominet are the next stops. Act before expiry, not after.

A five-minute annual domain audit

• Confirm the expiry date and that auto-renew is on.
• Check the payment card and billing email.
• Confirm the registrant is the correct legal business.
• Check registrar lock and two-factor authentication.
• Confirm who holds the login and who has recovery access.
• Note where DNS is hosted and who can edit it.
• Save a copy of the transfer process and key DNS records.
• Send the renewal reminder to a role inbox, not a personal one.

None of this is dramatic. That is the point. The domain is the one digital asset everything else depends on, and a calm annual check keeps it under your control rather than someone else's.