Your website has three separate pieces: a domain name, a hosting account, and the site itself. You can own all three, some of them, or none of them, and most owners have never checked which.
This becomes urgent at exactly one moment: when you want to change something and discover you need someone else's cooperation to do it. Usually someone you are no longer on good terms with. Check now, while it is a fifteen-minute task instead of a legal problem.
The domain, the piece that matters most
The domain is the one thing you genuinely cannot replace. Rebuild a site, move a host, but lose the domain and you lose your email, your search rankings, your printed materials and everything anyone has ever bookmarked.
Here is how to check. Search for a public WHOIS lookup and enter your domain. You will see the registrar (GoDaddy, Namecheap, Google Domains and so on) and, unless privacy protection is on, the registrant details.
Privacy protection hides the name, which is normal and fine. So the real test is different: can you log into the registrar account yourself, right now, with credentials you control?
If the answer is no, you do not control your domain. Being listed as a technical or administrative contact is not the same as being the registrant, and having your developer "manage it for you" means they can transfer it, let it lapse, or point it somewhere else.
The fix: get the domain into a registrar account in your business name, with your email address, and your billing card on the renewal. If someone else holds it, ask for a transfer now, politely, while the relationship is good.
The hosting account
Same test. Can you log into the hosting control panel with your own credentials, and is the billing in your name?
Two arrangements to watch for. First, your site sitting inside a developer's or agency's reseller account, where you have no direct login at all. Second, an account in your name that you have never accessed and cannot find the password for, which in practice is the same problem.
Reseller hosting is not automatically bad. Plenty of good agencies use it. But you should know that is the arrangement, and you should know what happens to your site if that agency closes, or if their account is suspended over an unrelated client.
The fix: if you do not have a hosting login, ask for one today. If it is a reseller setup, ask what the exit process looks like and get the answer in writing before you need it.
The site itself, and its parts
The WordPress installation is yours if you have an administrator account you can log into. Check that you do, and check that it is genuinely an administrator rather than an editor.
Then the parts that are easy to miss.
- Licences. Premium themes and plugins are often bought on the developer's account. When they leave, updates stop, which quietly turns your security plugin into a security problem.
- Design files. Logos and source artwork. Ask for the originals, not just the versions on the site.
- Custom code. If a developer wrote a custom theme or plugin, get it in writing that the work is yours to keep and modify.
- Backups. If the only copies live in your provider's account, you do not have a backup, you have an arrangement.
- Third-party accounts. Analytics, Search Console, email marketing, payment gateway. These are frequently set up under someone else's login and are painful to reclaim later.
Your fifteen-minute audit
Do this today. Genuinely today.
- Log into your domain registrar. If you cannot, that is finding number one.
- Log into your hosting account. Same test.
- Log into WordPress as an administrator.
- Check the domain expiry date and confirm auto-renewal is on, billed to a card that has not expired. Domains lapse over dead credit cards more often than anything else.
- In WordPress, go to Users and read the administrator list. Remove anyone who no longer works with you.
- Check who receives the registrar's renewal notices. If it is a former employee's address, fix it now.
The fix: put the three logins in a password manager under your own account, and put the domain renewal date in your calendar with a month's warning.
Care should never mean control
There is a difference between someone doing the work on your site and someone holding your site hostage. A provider needs access to maintain a site. They should never need ownership.
Up Speed works that way deliberately. You keep your domain, your hosting account and your site. We work on it, we do not hold it. There is no contract and you can cancel anytime, and if you leave you leave with everything, because nothing was ever ours.
The ongoing work is the part you outsource: core, theme and plugin updates tested before they go live, scheduled off-site backups with one-click restore so the copies exist independently of your host, malware scanning, 24/7 uptime monitoring, and a plain-English monthly report so you can see exactly what was done. If something breaks, we fix it rather than emailing you about it.
If today's fifteen-minute check turned up things nobody has been looking after, the free site audit is a no-credit-card way to see the rest, and the Starter plan covers the ongoing routine without taking anything away from you.