How to find out who actually owns your domain name

Almost every small business owner I talk to assumes they own their domain name. Most of them are right. A surprising number are not, and they find out at the worst possible moment — when they want to move their site, when the person who set it up stops answering, or when a renewal notice goes to an email address nobody has checked since 2017.

The good news is that you can find out in about five minutes, for free, without asking anyone's permission. Here's how.

First, understand what "owning a domain" actually means

A domain name isn't property in the way a truck is property. You lease it, usually a year at a time, from a registrar — GoDaddy, Namecheap, Network Solutions, Google Domains (now Squarespace), and so on. Whoever is listed as the registrant on that lease is the owner. Whoever holds the login to the registrar account is, practically speaking, in control.

Those two things can be different people. That's where the trouble starts.

Step 1 — Look up the public record

Every domain has a public registration record. Go to lookup.icann.org — that's ICANN, the nonprofit that oversees the domain name system, so it's about as neutral a source as exists — and type in your domain.

You're looking for four things:

• Registrar — which company the domain is leased from. This tells you where the account lives.
• Registrant — the listed owner. Often hidden behind privacy protection, which is normal and fine.
• Expiry date — when the lease runs out.
• Name servers — which company is currently answering for your domain, which is usually your host.

If the registrant shows something like "Domains By Proxy" or "Redacted for Privacy," don't panic. That's a privacy service, and it's standard. It hides who from the public but doesn't change who the registrar has on file.

Step 2 — Find out whose email is on the account

This is the question that actually matters, and the public record usually won't answer it.

Go to the registrar's website — whichever one the lookup named — and use "forgot password" with your own email address. One of two things happens:

• You get a reset link. The account is tied to your email. You're in control. Log in, and check that the registrant contact is your name and your business.
• Nothing arrives. The account is under someone else's email. Usually that's your web designer, an old employee, or an agency you stopped working with.

Try every address that might have been used: your personal Gmail, an old work address, the info@ or admin@ address at your own domain. Businesses that have changed hands or changed staff often have the domain sitting under someone who left years ago.

Step 3 — Check the expiry date, and then set a reminder

The single most preventable disaster in this whole area is a domain expiring because the renewal notice went to a dead mailbox. When a domain lapses, the site goes dark and so does every email address on it. There's a grace period, but after that anyone can register it — and domains with real traffic get picked up fast.

Whatever else you do today, write the expiry date somewhere you'll actually see it, and turn on auto-renew.

What to do if it's not in your name

Most of the time this is carelessness, not malice. Someone set it up quickly years ago and never moved it. Ask plainly:

The mechanism is a transfer. You open your own account at a registrar, the current holder unlocks the domain and gives you an authorization code (sometimes called an EPP code or auth code), and you paste that into your new account. It costs roughly the price of one year's renewal — usually $10–$20 — and takes about five days, most of which is a mandatory waiting period.

If they won't cooperate

You have more leverage than you think, but the path depends on the facts:

• If your business is the listed registrant and someone else is holding the login, you can file a dispute with the registrar directly. Registrars have a process for this; you'll need to prove the business is yours.
• If your trademark or business name is in the domain and it's being held against you, ICANN's UDRP process exists for exactly that. It isn't free and it isn't fast, but it works.
• If the domain is simply in their name and always was, and there's nothing in writing, you may have to negotiate. This is the expensive lesson, and it's why the rest of this matters.

The thing nobody tells you

Your domain is the only piece of your web presence that is genuinely irreplaceable. You can rebuild a website in a few weeks. You can move hosts in an afternoon. But your domain is on your trucks, your invoices, your business cards, your email signature, and every link anyone has ever sent to a customer. Losing it is not an inconvenience — it's starting over.

It's also the cheapest thing to protect. Fifteen dollars a year and an account in your own name.

Five minutes, today

1. Look up your domain at lookup.icann.org. Note the registrar and the expiry date.
2. Try "forgot password" at that registrar with your own email.
3. If you get in: confirm the registrant is your business, turn on auto-renew, and add a second contact email that isn't yours alone.
4. If you don't get in: find out whose account it is and start the conversation now, while nothing is wrong.
5. Write the registrar, the login email, and the expiry date somewhere your business keeps records — not in one person's head.