The Website Accounts Every Business Owner Should Control

A business website may look like one thing, but several separate accounts usually keep it working.

There may be one account for the domain, another for the website, another for email and several more for Google services. When these accounts are created quickly, ownership can become unclear.

The problem often appears later. A supplier becomes unavailable, an employee leaves or a payment card expires. The business then discovers that the only login belongs to somebody else.

You do not need to personally manage every technical setting. You should know which accounts exist and make sure the business has appropriate ownership and recovery access.

1. Domain registrar

The domain is the address people use to find the website and send email, such as yourbusiness.com.

It is registered through a domain registrar and renewed periodically.

The business should control:

• The registrar login
• The registrant and contact information
• The renewal method
• The recovery email address
• Two-factor authentication
• Access to DNS settings, either directly or through a trusted manager

If the domain expires or the account becomes inaccessible, both the website and business email may be affected.

Ask:

• Which company is the registrar?
• Whose name and email are on the account?
• When does the domain renew?
• Is automatic renewal enabled?
• Is the payment method current?

The web designer can be given appropriate access without being the only person who controls the domain.

2. DNS management

DNS connects the domain to services such as the website and email.

The DNS may be managed by the registrar, hosting company, website platform or a separate provider.

You do not need to memorise the records. You should know where they are managed and who can change them.

Incorrect DNS changes can interrupt the website or email, so access should be limited to people who need it. Keep a record of the provider and take a screenshot or export of important settings before a major change.

3. Website platform or hosting

This is the account that stores or publishes the website.

Depending on the setup, it may be a website builder, content management system, hosting account or a combination of services.

The business should have:

• An owner or administrator login
• A business-controlled recovery email
• Access to billing and renewal information
• A way to download or export content where the platform allows it
• A clear record of who has administrative access

Do not share one password between several people. Create separate user accounts when the platform supports them.

4. Business email administrator

An address such as hello@yourbusiness.com is usually managed through an email provider.

Someone needs administrative access to create mailboxes, reset passwords, change billing and manage security.

The owner should know:

• Which provider hosts the email
• Which account is the administrator
• Which recovery method is used
• How many paid users exist
• When the subscription renews
• Who can add, remove or redirect mailboxes

The administrator account should be protected carefully. It can control access to other people’s business email.

5. Google Business Profile

For a local business, the Business Profile affects how information appears in Google Search and Maps.

The business should be listed as an owner, not only a manager through an outside agency.

Check:

• At least one current owner uses a business-controlled Google Account
• Former staff and suppliers no longer have unnecessary access
• The recovery information is current
• The business name, phone, hours and website are accurate

Never create a second profile simply because access to the original has been lost. First use Google’s official ownership and recovery process.

6. Google Search Console

Search Console helps the verified owner understand how Google accesses the website.

It can show indexing information, search performance and technical issues reported by Google.

The business should have owner access. A designer or SEO specialist can be added separately with the level of access they need.

Review the users and permissions list after changing suppliers. Removing a user may not remove every old verification method, so ask the website manager to check unused verification tokens as well.

7. Analytics and tag management

If the website uses analytics, advertising pixels or a tag manager, those accounts should also belong to the business.

Otherwise, years of useful historical data may remain in an agency-owned account that cannot be transferred easily.

Check:

• Who owns the analytics property
• Who has administrator access
• Whether the correct website is being measured
• Whether tracking is still needed
• Whether the privacy notice and consent setup match the tools in use

Collect only data that has a clear purpose.

8. Social media and directory listings

These may not run the website, but they often send visitors to it.

Keep a record of:

• Facebook and Instagram business access
• LinkedIn Page administrators
• Booking and delivery platforms
• Industry directories
• Apple Business Connect or other map listings, if used
• Review platforms relevant to the business

Remove people who no longer work with the business and keep recovery information current.

A simple access structure

A practical arrangement is:

1. The business owner keeps primary ownership.
2. A second trusted business-controlled account provides recovery access where appropriate.
3. Suppliers receive their own named user access.
4. Access is limited to what each person needs.
5. Two-factor authentication is enabled.
6. Passwords and recovery codes are stored in a password manager.
7. Access is reviewed whenever a supplier or employee leaves.

Avoid using a personal email address that nobody else in the business can recover. Also avoid creating all services under the designer’s account for convenience.

Create a simple account register

Do not put passwords in the register.

Record only:

Service	Provider	Business owner	Other access	Renewal	Recovery checked
Domain
DNS
Website
Email
Google Business Profile
Search Console
Analytics

Review this list twice a year.

Before changing web suppliers

Before an existing relationship ends, confirm:

• The business can sign in to every important account
• Billing belongs to the correct person or company
• Website content and files have been handed over as agreed
• Domain and DNS access works
• Email administration remains available
• Supplier accounts can be removed without removing business ownership
• There is a recent backup or export where possible

A professional supplier should make ownership clear, not use access as leverage.

Unsure who controls your domain?

Byklart can help connect your existing domain to your website and provide a short written summary of the changes made.

Ask about Domain & DNS Connection →