domain registrar

A domain registrar is the company you actually pay to hold your domain name, the yourbusiness.com or yourbusiness.ca itself. It is a small, boring, unglamorous bill, usually somewhere between ten and twenty dollars a year, and it is one of the few things in a website setup that genuinely matters if it lapses.

The registrar is not your host and it is not necessarily who manages your DNS. Those can all be separate companies, connected only by the nameserver setting inside the registrar’s own dashboard. A registrar’s real job is simple: confirm that the domain is registered to you, keep that registration current, and let you control where its nameservers point.

Because the registrar sits at the very top of the chain, whoever controls that account can, in theory, redirect or transfer the domain itself, not just the website sitting on it. That makes it one of the more sensitive logins in a business’s whole online setup.

Why it matters to you

If the registrar account is not in your name, or the login is only known to a developer or an agency you no longer work with, you do not truly own your domain, regardless of what any contract says. The company holding the registrar account is the one who decides, practically speaking, whether the domain keeps working, keeps renewing, and stays pointed where you want.

It also matters because registrar accounts are a common target for account takeover. A weak password or no two-factor authentication on a registrar account is a real risk, since a stolen login there can hand an attacker your whole domain, not just a website.

How I set it up

I register new domains, or move existing ones, into a registrar account created in the client’s own name and email, with accounts in the business’s name as the standing rule. I never keep a client’s domain sitting in an agency-wide or personal registrar account, because that is exactly the setup that causes trouble later when a relationship ends.

Where a domain already exists somewhere else, I get the access I need through a password manager, listed clearly alongside every other credential involved, rather than asking for the actual password over email or chat.

What it looks like in practice

Most years, the registrar is invisible. A renewal charge appears, either automatically or with a reminder, and that is the entire interaction. The dashboard itself only gets opened when a domain renewal date is approaching, a nameserver needs to change, or ownership needs verifying for a transfer. Everything else, the DNS records, the website, the mail routing, lives one layer down, managed elsewhere and left alone.