That is why the safest first step before switching website providers is not to move anything. It is to find out who controls what. This guide walks you through a read-only check you can do before you sign with anyone new. Nothing in it asks you to change a setting.
Read-only means read-only. Please don't edit, delete or "tidy up" any settings while you do this review. DNS records decide where your email is delivered, and Google warns that email "might not work correctly" if MX records are old or incorrect. (Sources: Microsoft: DNS records; Google: MX records) Leave any changes for a planned switch, made with the people who will support it.
Three things that are easy to mix up
1. The domain registration. This is your right to use your web address (for example, yourclinic.com). It is held through a company called a registrar. ICANN describes the registrant, also called the "Registered Name Holder", as "the person or entity that holds the rights to a domain name." (Source: ICANN general FAQ)
2. DNS (the internet's address book). DNS records point your domain at things. For example, A records map a domain name to an internet address, and an MX record "is required to deliver email to a mail server." (Source: Cloudflare: record types) These records are served by nameservers, which Cloudflare's documentation describes as DNS servers that answer queries for the domains they are responsible for. (Source: Cloudflare: nameservers) Microsoft notes that your registrar and your DNS hosting provider "are often the same company, but they can be different." (Source: Microsoft: find your registrar)
3. Email. If you use Google Workspace or Microsoft 365, your mailboxes live with that service, but mail only reaches them because of the MX records in your DNS. Microsoft describes the MX record as the one that "specifies where email for the domain should go." (Source: Microsoft: DNS records)
A website provider might control one, two or all three of these. The point of this review is to find out which.
Why the name on the registration matters
ICANN's own FAQ covers a situation many owners don't expect. If you hired a developer to help manage your domain, "they may have registered the domain name using their own contact details", even if you paid. You may then "need to provide proof of your payment" to show the registrar that you are the rightful holder. (Source: ICANN general FAQ)
ICANN has also written that letting a third party be listed as registrant "is generally not considered a good practice", and that an organization that outsources domain management "should ideally still be listed as the registrant of the domain." (Source: ICANN good-practice blog)
Two related details:
- Privacy and proxy services. With a privacy service, you remain the registrant of record and alternative contact details are published. With a proxy service, "the proxy service becomes the registered name holder of record." (Source: ICANN privacy/proxy) It is worth knowing which one you have.
- Renewal reminders. ICANN policy requires registrars to send renewal reminders about one month and one week before a domain expires, and ICANN advises keeping your contact information up to date so you receive them. (Source: ICANN renewal FAQ) If the contact email belongs to a former provider or staff member, those reminders may not reach you.
The read-only checklist
Use this table to record what you find. "Who should own it" reflects the guidance cited. Your situation may call for a different arrangement, which is fine as long as it is a deliberate choice that is written down.
| What to check | Where to find it | Who should own it | Red flags |
|---|---|---|---|
| Who your registrar is | ICANN's free Lookup tool (lookup.icann.org) lists the registrar for a domain (Sources: Microsoft: find your registrar; ICANN RDAP announcement) | Your business holds the account with the registrar | No one at your business knows which company it is |
| Who is listed as registrant | Your registrar account, or ask whoever manages it | Your business, with its legal name in the Registrant Organization field (Source: ICANN good-practice blog) | A developer, agency or former employee is listed instead (Sources: ICANN general FAQ; ICANN good-practice blog) |
| Who can sign in to the registrar account | Ask the person who set the domain up | Your business. Some registrars let the owner give other people their own access instead of sharing a login. For example, Namecheap calls this "Share Access"; it's named only as an example, not a recommendation (Source: Namecheap: share access) | Only your web provider can sign in |
| Renewal date, contact email and payment method | Your registrar account | A business email address you will keep after the switch (Source: ICANN renewal FAQ). If the domain auto-renews, ICANN notes the payment information must be kept current (Source: ICANN registrant responsibilities) | Renewal notices go to a provider's or ex-staff member's inbox, or renewal is paid on a card you don't control |
| Domain status codes (locks) | A domain lookup, or your registrar's website (Source: ICANN status codes) | Set by your registrar. A transfer lock (clientTransferProhibited) is a normal protection against unauthorized transfers (Source: ICANN status codes) | Statuses you didn't expect, or that no one can explain; ICANN suggests contacting your registrar first (Source: ICANN status codes) |
| Where DNS is hosted | The "Nameservers" entry in a lookup shows which provider hosts your DNS records (Source: Microsoft: find your registrar) | Whoever will look after DNS after the switch, agreed in writing | Nameservers belong to the provider you are leaving, and only they can see or edit the records |
| Where email is hosted | Your email admin console, or ask your provider | Your business | No one knows whether email is with your web host, Google, Microsoft or someone else |
| Email admin access (Google Workspace) | Google Admin console | At least two super administrators at your business. Google recommends two so one can reset the other's password (Source: Google: admin roles) | The only super admin is the outgoing provider |
| Email admin access (Microsoft 365) | Microsoft 365 admin center | A Global Administrator at your business. Microsoft advises keeping global admins to a minimum, with another admin able to reset a locked-out one (Source: Microsoft: admin roles) | The only Global Administrator is the outgoing provider |
| A record of your current DNS records | Ask your current provider for a copy | Documented and kept by your business | No one can say what records exist, including email-related records such as SPF and DKIM (Source: Microsoft: DNS records) |
What to ask your current provider
Keep it friendly and in writing. At this stage you are asking for information, not making changes.
- Which registrar is our domain with, and whose name and email are on the registration?
- Who holds the login for the registrar account? Can a named person at our business be given access?
- When does the domain renew, and where do renewal notices go?
- Where is our DNS hosted, and can you send us a copy of our current DNS records?
- Where is our email hosted, and who are the admin users on that account?
- Do any other services use our domain (forms, booking tools, newsletters) and rely on records you manage?
- When we move, what will you need from us, and what will you hand back?
Timing: why some changes take weeks, not days
A few rules are worth knowing before you choose a switch date. They come from ICANN's Transfer Policy, which governs transfers between ICANN-accredited registrars (Sources: ICANN Transfer Policy; ICANN transfer FAQ) and applies to generic domains, a group that ICANN says includes .com, .net and .org. (Source: ICANN gTLD definition)
- Moving to a new registrar needs an authorization code. ICANN says "An Auth-Code is required for a domain holder to transfer a domain name from one registrar to another." (Source: ICANN transfer FAQ) Registrars either let you generate it yourself or must provide it within five calendar days of your request. (Sources: ICANN Transfer Policy; ICANN transfer guide)
- Changing the registrant can trigger a 60-day lock. Under the current policy, a registrar "must impose a 60-day inter-registrar transfer lock following a Change of Registrant." A change to the registrant's name, organization or email address can count. A registrar may let you opt out before the change is requested, but it doesn't have to offer this. (Sources: ICANN Transfer Policy; ICANN transfer guide)
- New or recently moved domains. A registrar may refuse a transfer within 60 days of a domain's creation or of a previous transfer. (Source: ICANN Transfer Policy)
- These rules are under review. An ICANN working group has recommended shortening the post-creation and post-transfer periods to 30 days and removing the lock after a registrant change. Those recommendations went to the ICANN Board for consideration in 2025. (Source: ICANN comment report, 2025) As of October 2026 they were not yet in force: ICANN's transfer page still lists the policy updated in February 2024 as its latest version, and the policy project page shows the Board's adoption as still to be decided. (Sources: ICANN transfers page; GNSO policy project page) Before you plan around any of these timings, check ICANN's current policy page or ask your registrar which rules apply. (Source: ICANN transfers page)
Country-code domains are different: ICANN says their registration policies are managed locally, so check with your country's registry or your registrar. (Source: ICANN ccTLD page)
If you believe a registrar has wrongly refused a transfer, or hasn't provided the code, ICANN accepts complaints. (Sources: ICANN transfer FAQ; ICANN transfer guide)
Example handoff note (illustrative only)
This is a made-up example to show the format. The business, names and details are fictional.
Domain, DNS and email record: Maple Street Physical Therapy (example)
Prepared: [date] - Prepared by: [name, role]
- Domain: maplestreetpt.example
- Registrar: [registrar name], confirmed by lookup
- Registrant listed: Maple Street Physical Therapy LLC (confirmed in registrar account)
- Registrar account access: practice manager (owner); outgoing provider's access to be reviewed at switch
- Renewal date / notice email: [date] / the practice's admin@ address
- Status codes seen: clientTransferProhibited (registrar confirmed this is their standard lock)
- DNS hosted at: [provider], per nameserver lookup
- Copy of current DNS records: received from outgoing provider on [date], saved in the practice's shared drive
- Email service: [Google Workspace / Microsoft 365]; admins: practice manager and practice owner
- Other services using the domain: online booking, contact form
- Open questions: who will host DNS after the switch; agreed date for any changes
- Changes made during this review: none
What this checklist doesn't do
It won't move your domain or email, and it can't promise that a switch will go smoothly. What it gives you is a clear, written picture of who holds each key, so you and your next provider can plan the move with the right people involved.
AI-assisted research and drafting. Publisher: Gabriel Fenton. This credit does not imply Gabriel personally reviewed the exact article.
Sources
- ICANN, Transfer Policy
- ICANN, Domain Name Transfers
- ICANN, FAQs for Registrants: Transferring Your Domain Name
- ICANN, 5 Things Every Domain Name Registrant Should Know About ICANN's Transfer Policy
- ICANN, Registrants' Benefits and Responsibilities
- ICANN, General Questions (Question 4)
- ICANN blog, Good Practices for the Registration and Administration of Domain Name Portfolios (Part II)
- ICANN, About Privacy/Proxy Registration Service
- ICANN, EPP Status Codes
- ICANN, Launching RDAP; Sunsetting WHOIS
- Microsoft, Find your domain registrar and DNS hosting provider
- Microsoft, Connect your domain by adding DNS records
- Microsoft, About administrator roles in the Microsoft 365 admin center
- Google, Set up MX records for Google Workspace
- Google, Prebuilt administrator roles
- Cloudflare, Nameservers
- Cloudflare, DNS record types
- Namecheap, How do I share access to my domain with other users?
- ICANN, FAQs for Registrants: Domain Name Renewals and Expiration
- ICANN, Public Comment Summary Report: Transfer Policy Review Working Group Final Report for ICANN Board Consideration (2 July 2025)
- ICANN, About ccTLD Compliance
- ICANN Acronyms and Terms, Generic Top-Level Domain
- ICANN GNSO, PDP Transfer Policy Review