Who Owns Your Website? Domain, Hosting & Code Rights Explained
Table of Contents
TL;DR:
Most business owners assume that paying for a website means they own everything tied to it, and that assumption is often wrong. Ownership of your website actually breaks into three separate pieces, the domain name, the hosting account, and the code and design itself, each governed differently.
If your agency or freelancer never handed you the login credentials or a signed ownership agreement, you may not legally or practically control the site you paid for.
Why This Question Comes Up More Often Than You'd Think
At FreshMove Media we get a version of this call a few times a year. A restaurant owner wants to switch web design agencies after a bad experience, and it turns out only the previous developer has admin access to the site. A contractor wants to update his Google Ads landing pages, but his domain was registered years ago under an old marketing company’s account, and nobody at that company answers the phone anymore. A nonprofit’s executive director inherits a website built by a board member who has since moved out of state, and no one can find the hosting login.
None of these situations are rare. They happen because “who owns the website?” sounds like a simple question with a simple answer, when it’s actually three separate questions wearing one trench coat: who controls the domain, who controls the hosting, and who holds the rights to the code and design. Get clarity on all three, and you’re protected. Skip that step, and you’re one bad phone call away from losing access to the thing your business runs on.
Your Domain Name: You're Leasing It, Not Owning It Outright
Start with the domain, because it’s the piece people misunderstand most. When you register a domain like yourbusiness.com, you’re not buying property the way you’d buy a building. You’re securing the exclusive right to use that name for a set period of time, subject to the rules of the registry and the Internet Corporation for Assigned Names and Numbers (ICANN), the nonprofit that oversees the domain system globally. The WHOIS registrant record is what actually determines who controls a domain, and only the listed registrant (or the administrative contact, in narrower cases) has the legal standing to transfer, renew, or make changes to it.
Here’s where it gets risky for small businesses. If the web design agency you hired registered the domain on your behalf, under their own account, you don’t legally control it, even if you’ve paid the domain renewal fee directly every year since. We often see this with real estate offices and healthcare practices that switched owners/providers years ago and forgot to transfer the domain out of the old provider’s portfolio. If that relationship ends badly, getting the domain back can take weeks of disputes, and in rare cases, it doesn’t come back at all.
The fix is simple in concept: the domain registrant should always be you or your business, registered under an account you control, with your business email as the contact. If you’re not sure who that is right now, look up your domain in a WHOIS lookup tool and check the registrant name. It takes two minutes and it’s worth doing today.
Your Website Code: Copyright Follows the Contract, Not the Invoice
The second piece is the code and design itself, the actual files, templates, and custom development that make up your site. This is where a lot of business owners assume that paying an invoice settles the question. It doesn’t.
Under U.S. copyright law, the person who creates a work owns the copyright to it automatically, the moment it’s created, unless one of two things happens: the work qualifies as a “work made for hire” under a specific legal definition, or the creator formally assigns the copyright to you in writing. Simply paying a freelancer or agency for their time does not automatically transfer ownership of what they built. If your contract is silent on this, or if you never signed a written agreement at all, the developer or agency that built your site may technically still hold the rights to the code, even though you paid for every hour of the work.
For a law firm or healthcare practice, this usually isn’t an issue day to day, since most agencies intend for clients to own their finished sites. But it becomes a real issue the moment you want to leave that agency and take your website somewhere else. If your contract never addressed ownership, or if it explicitly states the agency retains rights to reusable code and templates (common with cheaper website-in-a-box providers), you may be restricted from moving your own site.
At FreshMove Media, every custom website we build for a client comes with full ownership of the finished product from day one. That’s not universal in this industry, so it’s worth confirming in writing with whoever built your site.
Not sure whether your current site was built to last or built to lock you in?
Our guide on custom development versus template builds breaks down exactly what separates a site you actually own from one you’re only renting.
The Often Forgotten Access Point: Your Hosting Account
The third piece is hosting, and it’s the one that causes the most day-to-day headaches because it’s the login that actually gets your site online. Hosting is the server space where your website’s files live and run. Whoever controls that account controls whether your site stays online, how fast it loads, and who can make emergency changes when something breaks.
We’ve walked into more than one situation where a business’s hosting account was registered under a former employee’s personal email address, or under an agency account that also hosts a dozen other clients’ sites. If that employee leaves on bad terms, or that agency relationship ends, regaining access could mean days of downtime while you prove ownership to a hosting provider’s support team. For a restaurant relying on online ordering, or a retailer during a holiday sales push, that kind of outage has a real cost.
The fix here mirrors the domain fix: hosting should be billed to and controlled by an account your business owns directly, or with an agency/partner you trust, with admin-level login credentials securely stored somewhere your team can access.
It’s also worth checking who actually gets notified when something goes wrong. Most hosting providers send renewal notices, security alerts, and outage warnings to whatever email address is on file, which is often found in an employee’s inbox years after the project is wrapped. A retail shop in Carytown found this out the hard way when its hosting plan lapsed without warning because the renewal notice went to a Gmail address nobody at the business had ever seen. The site was down for the better part of a weekend during a busy sales period, and reaching the right person to fix it took longer than the outage itself.
Updating the contact and billing email on your hosting account takes a few minutes and closes that gap for good.
What to Check in Your Current Setup This Week
If you’ve read this far and you’re not entirely sure how your own website is set up, you’re not alone, and it’s worth spending twenty minutes this week finding out. Run a WHOIS lookup on your domain and confirm the registrant name matches your business. Log into your hosting account, and confirm you have admin access. Pull up your contract with whoever built your site and look for language about copyright, ownership, or work for hire. If any of those three checks comes back unclear, that’s the moment to ask questions, not after you’ve already tried to switch providers and hit a wall.
This isn’t about assuming bad faith from every agency or developer you’ve worked with. Most of these situations happen through oversight, not bad intentions.
If you want a second set of eyes on your domain, hosting, and ownership setup, or you’re dealing with a provider that’s making it hard to get answers, reach out to the team at FreshMove Media for a free exploratory meeting. We’ll help you figure out exactly where things stand and what to do next.
How do I find out who owns my domain right now?
Run a WHOIS lookup using a free tool like ICANN's lookup service or your registrar's own search feature, and check the field labeled registrant or registered name holder. If that name isn't you or your business, reach out to whoever is listed and request the transfer authorization code needed to move it under your own account. Do this now, while the relationship with that party is still workable, rather than after it's turned contentious.
My old agency built my website. Can I really not move it somewhere else?
It depends entirely on what your contract said, if you had one. If it explicitly transferred ownership to you or stated the work was for hire, you're almost certainly fine to move it. If there was no written agreement, or the agreement was silent on ownership, you may need to negotiate a transfer or, in some cases, request a formal copyright assignment before you move forward. This is exactly why FreshMove Media includes clear ownership terms in every website contract we write.
Is it normal for an agency to keep the hosting account under their own name?
It's common, but it isn't always in your best interest. Some agencies host client sites under their own master account for convenience, which is fine as long as you have documented admin access and a clear, written process for what happens if you leave. If you don't have either of those things, ask for them. A trustworthy provider will set this up without hesitation.