I get this question at least once a month: “Do I own my website?” The answer is almost always yes, but most business owners don’t realize WordPress website ownership has four distinct layers. Lose control of any one of them and you’re locked out of your own business asset.
The Four Layers of Website Ownership
1. Domain Registration
Your domain name (yoursite.com) is registered through a registrar like Namecheap, Google Domains, or GoDaddy. You are the registrant. This is the single most important ownership layer because whoever controls the domain controls where the site points.
A 2023 ICANN report found that 19% of small businesses don’t have direct access to their domain registrar account. That means nearly one in five businesses can’t transfer, renew, or redirect their own web address without calling someone else.
Action step: Log into your registrar right now. Confirm your name and email are listed as the registrant, not your developer’s or your old agency’s.
2. Web Hosting
Hosting is the server where your files, database, and media live. You pay a hosting provider monthly or annually for that server space. If your developer set up hosting under their account, you’re renting space inside someone else’s lease.
I’ve helped business owners migrate away from developers who held hosting access hostage during contract disputes. It’s avoidable. Your hosting account should be in your name, with your billing information, from day one.
3. WordPress Admin Access
Your WordPress dashboard is where you manage content, plugins, themes, and users. The admin account with the “Administrator” role has full control. If you only have an Editor or Author role on your own site, that’s a red flag.
Make sure you have at least one Administrator account with an email address you control. Keep those credentials documented somewhere safe. I cover the broader security picture in my website security guide, including why two-factor authentication matters here.
4. GPL and Your Code
WordPress is released under the GNU General Public License (GPL v2). That means any theme or plugin built for WordPress inherits the same license. You can modify, redistribute, and reuse GPL code freely. No developer can claim proprietary ownership over a WordPress theme they built for you if it runs on GPL-licensed WordPress core.
Custom functionality like API integrations or standalone scripts may fall outside GPL, so clarify that in any contract.
Why This Matters for Maintenance
Ownership without ongoing maintenance creates a different kind of risk. You own the site, but outdated plugins, expired SSL certificates, and unpatched core files turn that asset into a liability. Ownership and upkeep go hand in hand.
Frequently Asked Questions
What if my developer won’t hand over login credentials?
You have legal standing as the domain registrant and hosting account holder. Contact your registrar and hosting provider directly with proof of identity and billing records. They’ll grant access to the verified account owner.
Do I own my content if I built it on WordPress.com instead of self-hosted WordPress?
Yes, you own your content on WordPress.com. But you don’t control the hosting environment, server configuration, or full plugin access. Self-hosted WordPress gives you ownership of every layer. I compare the options in my guide on where to blog.
Should I keep all four layers with the same provider?
Not necessarily. Separating your domain registrar from your hosting provider adds a safety layer. If your host goes down or you switch providers, your domain stays under your control. Bundling everything saves a few minutes of setup but creates a single point of failure.
Not sure where you stand with your WordPress site ownership? I’ll audit your domain, hosting, and admin access in a quick review. Get in touch and I’ll tell you exactly what you control and what needs fixing.