How to register a domain you actually own

What a domain is

A domain is the address of your website: yourbusiness.com. It’s the thing on your business cards, in your email address, and in every link anyone has ever shared to you. Of all the parts of a website, it’s the only one that can’t be rebuilt if you lose it, because it’s the one part your customers actually know.

You don’t buy a domain outright. You register it for a period, usually one year at a time and up to ten years ahead, and you keep it for as long as you keep renewing. Stop renewing and, after a grace period, it goes back on the market for anyone to register.

What a domain registrar is

A domain registrar is a company accredited to register domain names on your behalf. You open an account with a registrar, search for the name you want, pay for it, and the registrar records you as its holder. Cloudflare, Namecheap, Porkbun, GoDaddy and Squarespace Domains are common registrars, and there are hundreds of others.

The registrar account is what matters. The domain itself is a record in a registry; the account is where the controls are: who can renew it, who can move it, and where it points. Whoever controls that account controls the domain.

Registrar, web host and AI builder are three different things

The registrar holds your domain name. A web host runs your website and serves it to visitors. An AI builder is a tool that produces the website’s code, and may or may not also host it. These can be three separate companies, and for ownership purposes it’s clearest when they are. A domain does not have to be registered where the site is hosted, and it does not have to be bought through the tool that built the site.

Some companies do more than one job. Cloudflare is a registrar and a host. Some AI builders sell domains inside their own product. That’s fine, as long as you know which account the domain actually lives in. The guide to how the pieces fit together shows the whole chain.

The registrar account should belong to you or your business

If a freelancer, an agency or a website tool registered the domain for you, the domain may be sitting in their account. That works until the relationship ends, their card expires, or they stop answering email. At that point your address can lapse or, worse, stay in an account you can’t get into.

The registrar account should be opened by you, in your name or your business’s name, with your email address and your payment method. Other people can be given access to help; the account itself should be yours. If the domain is currently in someone else’s account, ask them to move it to yours. That’s a domain transfer, and it’s routine.

The account email is the real key

Every registrar lets you reset your password by email. That makes the email address on the account the master key: whoever controls that mailbox can take over the domain. Use an address you control and will still control in five years, not a contractor’s, not a shared inbox that might be closed, and ideally not an address at the domain itself, because if the domain breaks, so does the email you need to fix it.

Check the recovery options too. Most registrars let you add a second email or a phone number. Add one, and make sure it’s also yours.

Turn on two-factor authentication

Two-factor authentication, usually written 2FA, means logging in needs your password plus a code from your phone or an authenticator app. Turn it on for the registrar account the day you open it. A stolen domain is very hard to get back, and this one setting removes most of the ways it gets stolen.

When you turn it on, the registrar will show you a set of recovery codes. Save them in your password manager. If you lose your phone without them, getting back into the account can take weeks.

Turn on auto-renewal

Domains expire on a fixed date, and an expired domain is the most common way small businesses lose their address. Turn auto-renew on, keep a working payment method on the account, and put the expiry date in your calendar anyway.

Registrars for the common domain endings are required to email you about a month and again about a week before the domain expires, and again after it expires if it hasn’t been renewed. Those emails go to the account address, which is one more reason it needs to be a mailbox you read. If a domain does expire, there is normally a window of about a month in which the registrar can restore it, often for a fee, before it’s deleted and becomes available to anyone.

Domain privacy

When you register a domain, the registrar collects your name, address, email and phone number. Under current rules, registrars must hide most of that from the public record where privacy law requires it, and may hide it elsewhere. In practice, for the common domain endings, your name, street address, phone and email are not shown publicly; your country usually is.

Many registrars also offer a “privacy” or “WHOIS protection” setting, sometimes free and sometimes paid, which puts a forwarding address in the public record instead of yours. Check that it’s on. And whatever is shown publicly, the details on the account itself should still be accurate and yours: they’re what the registrar uses to decide who the domain belongs to.

What nameservers are, briefly

Nameservers are the servers that answer the question “where does this domain point?”. Every domain has a small set of them, listed at the registrar. Usually they’re the registrar’s own, and the registrar’s DNS panel is where you tell the domain which website and which email service to use. Sometimes they’re another company’s, most commonly Cloudflare’s, in which case that company’s panel is where DNS is managed.

You don’t need to change nameservers to register a domain, and you shouldn’t change them casually: switching nameservers replaces every DNS record at once. For now, it’s enough to know where yours point, because that tells you where to go when you connect the domain to a website.

Buying the domain through a builder

Many AI builders and hosts will sell you a domain from inside their product, and set up the connection to your site automatically. That isn’t a bad way to buy one. It saves the DNS setup, and the domain is usually registered with a real registrar behind the scenes.

What you need to know is who controls the registrar account. Ask, or look in the builder’s domain settings:

• Is the domain in an account of mine at a registrar, which I can log in to directly? Good. The builder is just a convenient front end.
• Is it in the builder’s account, managed only through the builder? Then the builder controls it, and leaving the builder means transferring the domain out first. Find out now whether they allow that, and how.

Either way, the domain should be registered with your name as the holder and your email on the contact details. If it’s in the builder’s name, ask for that to be corrected.

What to write down

Put these in your password manager or wherever your business keeps its important records:

• The registrar’s name and the login address for the account.
• The email address on the account, and where its recovery codes are.
• The domain’s expiry date and the payment method that renews it.
• The nameservers the domain uses, so you know where DNS is managed.
• A screenshot or export of the current DNS records.
• Who else has access to the account, and why.

Checklist

Sources

The rules and product behaviour described above were checked against these pages when the guide was last updated. If something here has changed, these are the places to look.

• Expired Registration Recovery Policy · ICANN
• Domain name renewal and expiration FAQs · ICANN
• Registration Data Policy · ICANN
• Cloudflare Registrar FAQ · Cloudflare
• Record TTL · Cloudflare