How do I find out who owns my domain name?

Look it up for free at lookup.icann.org, which since 28 January 2025 runs on RDAP, the protocol that replaced the old WHOIS service for domain registration data. Type in your domain and you will see which registrar the domain sits at, when it was created, when it expires, and which name servers it points to. What you will usually not see is a person's name, because registrant contact details are redacted for privacy under GDPR and related rules, and RDAP redacts them the same way WHOIS did. That is fine, because the registrar name is the piece you need: it tells you which company's front door to knock on. If the registrar is somewhere you already have a login, you are in good shape. If it is a company you have never heard of, your designer almost certainly registered the domain inside their own account, and getting it moved is the real task ahead of you.

What if the person who built my website will not give me access?

Separate the two things they might be holding. If they hold the website files and hosting, you have leverage, because a five-page site for a local trade is the cheapest piece to replace and you can rebuild it in an afternoon. If they hold the domain, that is the one that matters, and your route is the registrar rather than the designer. Try a password reset first on any email address you control that might be on the account. If that fails, contact the registrar's support directly, explain that you are the business the domain represents, and ask what their process is for a disputed or abandoned registration. Expect to show paperwork such as invoices you paid, your business registration, or emails showing the domain was bought on your behalf. Be realistic: a registrar can verify an account holder, but it cannot rule on who legally owns a name. If the registration is genuinely in the designer's name and they will not cooperate, the remaining paths are negotiating, a legal route such as a trademark-based dispute if you have a mark, or moving to a new domain. Talk to a lawyer before betting the business on the second one.

Can I get my domain back if it already expired?

Often yes, and speed is everything. After expiry most registrars keep the domain in a grace period where you can simply renew it. Once it is actually deleted, every gTLD registry must offer a 30-day Redemption Grace Period during which the registration can be restored, and if you request restoration in that window the request has to be honored, though there is normally a restore fee well above a normal renewal. After that the domain sits in a pending-delete state for five days and is then released for anyone to register, first come first served. So the order is: check the expiry date today, renew if you still can, ask about redemption if it has been deleted, and do not wait until next month. Also do not post publicly that a good local domain is about to drop.

Is it faster to rebuild the website than to recover the old one?

Usually, yes, as long as you control the domain. The website itself - five pages of text, your job photos, a phone number and a quote form - is the least valuable thing in this mess, and chasing an unresponsive person for a hosting login can eat weeks while your site sits stale or offline. The domain is what carries your search history, your printed truck lettering, your business cards and your email address, so put your effort there. Save what is worth keeping first: copy your page text into a document, download the photos of your own work, note your page structure, and save any customer wording you liked. Then point the domain at a new site. Your reviews are not on the old site anyway, they are on your Google Business Profile, which is a separate account you can reclaim on its own.

RunCabin Blog · Fix-it guide

My web guy disappeared. How do I get control of my own website?

August 11, 2026 · 8 min read

Start with the domain, not the website. That is the whole trick, and it is the opposite of what most owners do. The website is the thing you can see, so it is the thing you chase. But the site is five pages of words and photos that can be rebuilt in an afternoon. The domain has your search history, your truck lettering, your business cards and your email address attached to it, and if it lapses or stays in somebody else's account, everything else you do is temporary.

This is common and not embarrassing. Somebody's nephew built the site in 2019, a one-man agency stopped answering email, a vendor got bought. Now you cannot change your phone number, or the site is down, or a renewal notice arrived for an account you have never seen. Here is the order to work in.

First, understand what you are actually looking for

Your "website" is really three or four separate accounts, usually at three or four separate companies:

The domain. yourbusiness.com, rented yearly from a registrar. This is the one that matters, and the only piece another person can hold in a way you cannot work around.
The hosting. The computer your pages sit on, plus the DNS settings connecting the domain to it. Replaceable.
The site itself. The pages, text and photos, on whatever platform it was built in. Also replaceable, and often should be replaced if nobody has touched it since 2019.
The extras. Your Google Business Profile, your business email, sometimes a Facebook page. Separate accounts, separate recovery processes, nothing to do with the website.

You might hold all four, or one, or none. Ten minutes of looking tells you which.

Step one: look up the domain (free, two minutes)

Go to lookup.icann.org and type in your domain. Since 28 January 2025 that service runs on RDAP, the protocol that replaced WHOIS as the public record for domain registration data.

You will see the registrar the domain lives at, the creation date, the expiry date, and the name servers it points to. You will most likely not see a person's name or email, because registrant contact details are redacted for privacy under GDPR and related rules, exactly as they were in WHOIS. An empty contact field is normal and means nothing sinister.

Four things to read off that page:

Is the registrar somewhere you have an account? If it says GoDaddy or Namecheap or Porkbun and you have a login there, you may already control your domain and not know it. Best case. Skip to step three.
Is it a registrar you have never heard of? Then your designer registered it inside their own account, possibly a reseller account shared with twenty other clients.
What is the expiry date? Write it down. Inside sixty days, this stops being a project and becomes today's emergency.
Where do the name servers point? That tells you who is hosting, which matters later when you want your content back.

Search your email for the domain name too. Registrars must send renewal reminders, generally two before expiry and one after, so if those notices land in your inbox, the account email is probably already yours.

Step two: get into the registrar account

In this order:

Try a password reset. Request one at the registrar for every email address you have ever used for the business, including the old one from your previous provider. Owners recover their own domain this way more often than you would think, because the designer used the client's email at signup.
Ask the designer for the transfer code, in writing. One plain, unemotional message beats a phone tag campaign: "Please send the transfer authorization code for yourbusiness.com and unlock the domain, or move it to my account at [registrar]. Confirm by Friday." Keep it professional. Most disappearances are not malice, just somebody who stopped doing web work and never said so.
Contact the registrar's support directly. This is the step people skip. Say that you are the business the domain represents, that the account holder is unreachable, and ask what their process is for a disputed or abandoned registration. Have evidence ready: paid invoices, the emails asking them to buy the domain for you, your business registration or license.

Set your expectations honestly. A registrar can verify who holds an account and act on that, but it cannot decide who legally owns a name. If the registration is genuinely in the other party's name and they refuse, what is left is negotiating (sometimes a small payment ends it in a day), a legal route such as a trademark-based dispute if you actually hold a mark, or moving to a new domain. The legal route is a lawyer conversation, not a weekend project.

Step three: the moment you are in, do these four things

Do all four the same day. This is how you make sure you are never in this position again.

Change the account email to one you control forever. Not the old provider's address. Not an employee's. Yours.
Turn on auto-renew and renew several years out. Put a card on it that will not expire soon, and calendar the expiry date anyway. Multi-year renewals are cheap and close off the most common way businesses lose a domain.
Get the transfer authorization code, and know your rights on it. To move the domain into your own account at your own registrar, you request that code, still often called the auth or EPP code, and use it at the registrar you are moving to. Under ICANN's current transfer rules your registrar has to provide it to you, as the listed registrant, within five days of your request. It is single use and valid for up to 14 days, so ask when you are ready to move rather than months ahead.
Write the login down somewhere permanent. A password manager, or at minimum the folder with your insurance certificate. The next version of this problem is you losing the login yourself.

One wrinkle: domains are commonly locked against transfer for a period after registration or a previous transfer. That is a wait, not a wall.

If the domain already expired

Move today. The timeline is fixed and short.

After expiry, most registrars hold the domain in a grace period where you can simply renew. Once it is truly deleted, every generic top-level domain registry must offer a 30-day Redemption Grace Period in which the registration can be restored, and a restoration request in that window has to be honored, though expect a restore fee well above a normal renewal. After that the domain sits in a pending-delete state for five days, then it is released for anyone to register, first come first served.

One practical note: expired local-business domains with real search history get picked up quickly by people who watch for them, so do not announce in public that yours is about to drop. If a parked page full of ads already sits on your address, that is what happened, and your options narrow to buying it back or choosing a new name.

Step four: save your content before you touch the site

Do this before you cancel anything. A site you can still see is a site you can still copy.

Copy every page of text into one document. Even bad copy is the record of the services and towns you have been listing.
Save every photo of your own work, at the largest size available. If the original was on a phone you no longer own, it is the hardest thing here to replace.
Print each page to PDF. A complete record of what was there, including old prices and any warranty wording.
Note any URL printed somewhere - on a van, a flyer, a Google listing. Those are the addresses worth recreating or redirecting on the new site.
Check where the form goes. If the old contact form emails the designer, it may have been swallowing quote requests for months. Submit it yourself and see.

Your reviews are not on the site. They live on your Google Business Profile, a separate account with its own path: if somebody else manages the listing, request access as the owner through Google, and if there is no response the process can transfer management to you. Start that in parallel, because for most local trades the profile brings more calls than the website.

Then decide: recover or rebuild

Once the domain is yours, this is a business decision instead of a hostage situation. Recovering the old site is worth it if it genuinely works, looks current on a phone, and you can get in to change it yourself. Otherwise rebuild, because the site was already stale: one nobody could edit for three years is showing old services and maybe an old phone number. The lockout was never the whole problem. The problem is that your site depended on one person being reachable, and that fix is structural.

How to make sure this never happens again

Five questions, asked before money changes hands, prevent almost every version of this, and they are worth asking any website company, not just an individual:

Whose name is the domain in, and at which registrar? It should be your business, and you should get the login.
Will you give me the transfer code on request? A yes is a provider you can leave. A stall is a provider that has you.
What is the account email on everything? An address you own, not theirs.
If you stop working, what do I have? Ask it plainly.
Can I make a text change myself, today, without you? This one decides whether you are ever stuck again.

Bigger vendors are not automatically safer here. Owners have complained to the Better Business Bureau about exactly this gap: one Townsquare Interactive customer wrote that they were told they "would have 100% access to the website I am having them build" and then "It turns out I dont get the 100% access." Another said they had "asked if I have you all build my site so I get the files if I part ways" before concluding the company had "contradicted yourself." Those are individual complaints, not a measure of an industry, but they show the shape of the problem: ownership gets promised at signup and defined at the exit. What different provider types actually hand back is in if you cancel your website company, do you lose your website.

Where RunCabin fits

RunCabin builds and runs the site for $39.99/mo, flat, and this article describes the thing we designed around. Your domain is registered for your business and it is yours, the transfer code is available on request, and if you cancel, the domain releases so you can take it anywhere. Cancelling is a page you click, not a phone call you have to win.

The other half is what actually prevents a lockout: you change the site by asking, in plain English, and it is done in moments. No ticket, no waiting on one person's inbox, no three-year-old phone number on your homepage because the only human who could edit it stopped replying. Your own domain, professional email and a logo are included, with no setup fee and no contract. And if you are only here to rescue a domain and rebuild elsewhere, the steps above work the same.

See your site before you pay a cent

No sales call, no card. We build a real preview with your name, your trade and your service area - and if you already have a domain, you keep it.

See your free site preview →