Key facts
- The domain name is the most important asset: whoever controls it controls the website and email.
- For .uk domains, the registrant named with Nominet is the legal owner of the domain.
- A WHOIS or RDAP lookup shows which registrar a domain is with.
- Hosting accounts belong to whoever holds the account, which may be the developer, not you.
- Website files and the database can often be copied with control panel, FTP or SFTP access.
- dijitul has taken over abandoned websites since 2006 and includes migration in Complete Hosting.
Work out what you need to recover
A website is really three things, and a developer may have controlled all of them:
- The domain name, held at a registrar. This decides where the website and email point.
- The hosting, where the website files and database live.
- The website itself: the files, the database and admin logins.
Recover them in that order. With the domain under your control, you can always point it at a new copy of the site.
Step 1: secure the domain name
- Look the domain up at lookup.icann.org to find the registrar and expiry date.
- For .uk domains, the registrant is the legal owner. If the domain is in your business name, you can prove ownership to the registrar.
- Contact the registrar, explain the situation and ask how to verify ownership. Expect to show ID or company documents.
- If the domain is close to expiry, act fast. An expired domain can be lost.
- Once you have access, update the contact email to one you control and move the domain to your own account.
See our guides on checking who owns your domain and transferring a .co.uk domain.
Step 2: get into the hosting
Find out who hosts the site. Our guide on checking who hosts a website shows how. Then contact the host. If the account is in the developer's name, the host may not be able to give you access without their consent, but many will help if you can show you own the business and the domain.
If the hosting bill has stopped being paid, the site may be suspended soon. Ask the host how long you have and whether they can provide a backup.
Step 3: take a copy of the website
- Download all files using the control panel file manager, FTP or SFTP.
- Export the database with phpMyAdmin or the panel's backup tool.
- Note the PHP version and any special extensions.
- If you cannot get server access but you can log in to the CMS, a backup plugin can export the site.
- As a last resort, a copy can sometimes be rebuilt from public pages, but this loses the admin side.
Logins and accounts to reclaim
Developers often set up more than the website. Once the domain and hosting are safe, work through this list and change the owner or password on each one:
- CMS admin accounts, such as WordPress or Joomla. Remove any admin users you do not recognise.
- Email accounts and the mail server password.
- Google Analytics, Google Search Console and Google Business Profile.
- Payment gateways such as Stripe, PayPal or Worldpay, if you run a shop.
- Cloudflare or any other DNS service.
- SSL certificate accounts, if a paid certificate was used.
- Any plugin or theme licences, so updates keep working.
Step 4: move to hosting you control
Put the hosting in your own name, with logins you hold. Keep a record of every password in a password manager, and add a second person as a backup contact.
dijitul takes on abandoned websites regularly. Complete Hosting costs £1 a day + VAT and includes moving the site, a Plesk login in your name, Cloudflare DNS, daily backups, free SSL and a domain registration or renewal each year. Older sites are welcome and we fix what breaks during the move. Call 01623 650333 or order online.
Frequently asked questions
Who legally owns my domain name if my developer registered it?
The registrant named on the domain record is the owner. If the developer registered it in your business name, it is yours and you can prove it to the registrar. If they used their own name, you may need their cooperation or a dispute process. Always register domains in your own business name.
Can my web host give me access if the account is in my developer's name?
Sometimes. Hosts have to protect account holders, so many need consent from the named person. Some will help if you can prove you own the business and the domain, especially if the developer cannot be reached. Ask for a backup copy of your site as a first step.
What if I cannot get any access to my old website?
Secure the domain first, because that controls where the website points. A host may still provide a backup on request. If not, a developer can often rebuild the site from public pages and old copies. Once the domain is yours, you can point it at a new or rebuilt site.
Can dijitul take over a website from a developer who has gone missing?
Yes. dijitul has rescued and taken over abandoned websites since 2006. The team helps you recover the domain and site files, moves everything to managed Plesk hosting in your name, and gets older sites working. Complete Hosting is £1 a day + VAT, with migration included.
How do I stop this happening again?
Register domains in your own business name with an email you control. Hold the hosting account yourself, or use a host that gives you your own login. Keep every password in a password manager, ask for regular backups, and get a written handover from any developer you hire.
Related
Set it up and forget about it
Managed hosting, Plesk, Cloudflare DNS, daily backups and your domain for £1 a day + VAT. We move your site for you.