Not having access to manage your domain name can result in your website going offline, email accounts no longer working, or the domain expiring. Suddenly, you’ve lost your entire online presence. Sadly, we see this a lot, and it usually happens for one of three reasons.
Why you may be unable to access your domain
1. The domain was registered to an email address you can’t access
When a domain is first registered, an email address must be provided for registration confirmation, renewal notices, and so on. But sometimes, you don’t have access to that email account anymore. For example, it could be:
- a former employee’s email address
- a personal inbox no one else can get into
- a random Gmail address created years ago (and now forgotten)
If there’s no way for you to perform a password reset on the relevant email account, you won’t be able to access the mailbox, and you may not be able to log into your account to manage your domain name, either.
2. The domain was registered to a third-party email address
This happens often: an IT provider, marketer, or web contractor registers your domain with their own email address. While you’re paying the bill, you have neither legal nor practical control over accounts.
If any changes need to be made to the domain name, they must go through the owner (“Registrant”) which is the third-party. If they go bust, stop responding, or are unwilling to help, you’re out of luck.
3. Your business details changed
For .au domains, eligibility is essential. If your ABN lapses, changes, or fails to match domain rules, you may be unable to renew your domain or make any changes to it. For other domains, there are various rules in place regarding business ownership and verification, so the same scenario can still apply.
In either case, if you don’t have the right information or can’t meet the requirements of the domain registrar, they may suspend or cancel your domain name (even if you’ve already pre-paid for years in advance).
The correct way to register a domain
A domain should be registered using one of these approaches:
Option 1: Use a role-based email you control
Using a role-based email such as accounts@, admin@ or sales@ (your domain) ensures stable access to the domain when people come and go in the business, because it’s not tied to a specific person.
Option 2: Use a management-controlled email not tied to the domain
Sometimes, it is safer to use Gmail or some other personal email address which is managed by company leadership, rather than one attached to the company’s domain. This ensures continued access to the inbox required for recovery if the domain expires.
For example, if your domain is registered to [email protected] but the abc.com domain expires, your email would stop working too and you’d have no way to access the domain.
If you take this route:
- Ensure multiple trusted people can access the email account, and set up account recovery options with other email addresses that different people have access to.
- Turn on Multi-Factor Authentication (MFA) to ensure the account is only accessed by the right people.
- Store login details in a password manager, not notes or browsers.
Tip: If you don’t want to be tied to a single person’s mobile phone for MFA, you can look at setting up a password manager such as Keeper (which includes the option to store MFA codes) or a standalone centralised MFA code manager such as Daito.
What to do right now if you can’t access your domain name account
If you’re locked out of the account where your domain name is managed, try these solutions, in this order:
Option 1: Regain access to the existing registrar account
This is often the fastest fix when the email address is known, so if you know the login email address for your account, your IT team (or whoever manages your email accounts) can:
- Recreate that mailbox temporarily (if it was a business email), or
- Add a forwarder from that old mailbox to a mailbox that you have access to.
Then, perform a password reset, log in, and update the account email attached to the domain name. Updating your account login is different to updating the “Registrant” email within the domain name itself, so make sure you do it in the right place.
Option 2: Prove ownership to the registrar
If you don’t know the login email address for your account, contact the registrar to find out their ownership process. They may request things like:
- Proof you control the business name or registration (e.g. ABN or ACN)
- Identification for an authorised person
- Evidence of past invoices or payments
- DNS or website verification steps
Each registrar handles this differently, but pushing through often restores control without third parties.
If you don’t know who your registrar is, search for “[domain extension] whois lookup”, using the extension of your domain. For example if your domain is xyz.au, search for “.au whois lookup” to find a site that allows you to look up the details for “.au” domains. If you get stuck or can’t figure out who the registrar is once you’ve performed the lookup, let us know and we can help point you in the right direction.
Option 3: Transfer the domain (if you can get the domain password)
To transfer a domain to another provider (including us), you usually need the domain password, also called an:
- EPP code
- Auth key
- Auth code
- Transfer code
The domain password can be sent to the current registrant’s email address. If that email isn’t accessible, you’re back to Option 1 or 2 first. Otherwise, if you do have access to the registrant inbox, search for “[domain extension] domain password recovery”, using the relevant extension.
If the domain has expired, it may also be locked and cannot be transferred until it’s renewed or released. This is a common restriction, which can be frustrating, so sometimes there’s a bit of a step-by-step process needed to gain access, renew it, wait (up to 60 days), then unlock it, then transfer it. We can give you all the steps if you hit this point.
How to prevent this from happening again (simple checklist)
Use this as your internal process for domains:
- Keep the registrant email role-based or management-controlled
- Add a backup email address, alias, or recovery phone number as a second contact.
- Turn on MFA for registrar logins
- Store domain logins in a password manager that your business controls
- Document who “owns” the domain account internally (name, role, and email address)
- Set calendar reminders for renewals (60, 30, 14, and 7 days out) – ensuring you have time to make any changes or collect information well before expiry
- Enable auto-renew (and make sure the payment method in your account is current)
- Check your business registration (e.g. ABN or ACN) status before renewal windows (especially for .au domains)
- Never allow third parties to be the registrant (your provider can manage settings, but your business or an authorised decision maker must be the registrant).
Don’t forget, we can manage your domains!
We manage thousands of domain names for our clients, and in all cases our client remains the registrant (owner). Transferring domains to us is free (unless there’s a mandated renewal upon transfer) and your existing expiry date won’t change.
When we’re managing your domains along with other services such as your website hosting or managing your website, it gives you a single point of contact which saves you time and money.
If you have any questions or would like to transfer domains to us, get in touch any time.