Last updated July 2026
The short version
- Audit before you announce. Confirm what you control while the relationship is still friendly. Leverage disappears the moment you give notice.
- Five things decide everything: the domain registrar login, a full hosting backup, WordPress Administrator access, Owner rights on Analytics and Search Console, and Primary Owner on your Google Business Profile.
- Budget two to three weeks. A domain transfer alone takes 5–7 days, and the domain must be at least 60 days old.
- If they go silent you still have routes — registrar dispute, host recovery, and a Google Business Profile ownership request. Analytics history is the one thing you usually cannot get back.
Switching agencies is rarely a technical problem. It is a sequencing problem. Business owners tend to do it in exactly the wrong order — they announce they are leaving, and only then discover that the domain is registered to someone else, the hosting is on a reseller account, and nobody has the WordPress admin password.
Do it in the right order and the whole thing is administrative. Here is the order.
|
24%
of businesses appearing in Google’s local pack had no website linked in their Business Profile at all — often the residue of a handover that never happened.
BrightLocal, June 2025
|
5–7 days
typical domain transfer window once initiated. The domain must also have been registered for at least 60 days.
ICANN Transfer Policy
|
15–20%
of the original build cost is what website maintenance actually runs per year — the line most quotes leave out.
GoodFirms, July 2026
|
Step 1 — Audit quietly, before you say anything
This is the step people skip, and skipping it is what turns a two-week handover into a three-month standoff. Nothing here requires you to tip your hand. You are simply logging in to accounts you should already have.
The seven-point pre-flight audit
| 1 | Domain. Look your domain up on ICANN Lookup and confirm the registrant is your company. Then log in to the registrar yourself — not through a shared account, and not through your designer. |
| 2 | Hosting. Log in and check whose name is on the billing. If you are on your agency’s reseller plan, you do not have an account — you have a tenancy. |
| 3 | WordPress. Go to /wp-admin → Users. Confirm your own account exists with the Administrator role. Editor is not enough. |
| 4 | Google Analytics. Admin → Property Access Management. You want Administrator, and you want the property to live in an account you own. |
| 5 | Search Console. Settings → Users and permissions. You want Owner. A delegated user cannot add or remove anyone. |
| 6 | Google Business Profile. People and access. You want Primary owner. A Manager cannot recover the profile if the owner vanishes. |
| 7 | Take a backup now. If you can reach the hosting control panel, download a full site backup today. It costs nothing and it removes most of the risk from everything that follows. |
The single most common surprise
The domain is registered to the agency rather than the client. It is usually not malice — someone registered it on day one because it was faster than waiting for the client to set up an account, and nobody ever moved it. It is still the thing that gives them all the leverage, so check it first.
Step 2 — Know exactly what you are asking for
“Please send me my website” is not a request anyone can action. These nine items are.
| Asset | What you actually need | Recoverable without them? |
|---|---|---|
| Domain name | Registrar login, plus the EPP/auth code to transfer it | Yes — via registrar dispute, if the registrant is you |
| DNS control | Access to edit A, CNAME, MX and TXT records | Yes, once you control the registrar |
| Hosting | Account access, or a full cPanel/site backup file | Partially — a site can be rebuilt from a crawl, badly |
| WordPress admin | An Administrator account in your name | Yes, via the host, if the hosting is yours |
| Design & source files | Figma/Adobe files, custom theme and plugin code | No — this one is contractual |
| Plugin & font licenses | A written inventory, registered to you, with renewal dates | No — you would have to re-purchase |
| Google Analytics | Administrator on a property inside your Google account | No — historical data is gone forever |
| Search Console | Owner, not delegated user | Yes — re-verify with DNS access |
| Business Profile | Primary owner | Yes — via Google’s ownership request process |
Analytics is the one true deadline
Every other asset on that list can be recovered, rebuilt or re-bought. Years of traffic history cannot. If you do only one thing this week, confirm that your Google Analytics property sits inside a Google account you personally control.
Step 3 — Send the handover request
Send this before you terminate, not after. Frame it as routine housekeeping, because for a well-run agency that is exactly what it is. Specific requests get actioned; vague ones get a vague reply three weeks later.
Copy & paste
Hi [name],
We’re consolidating our digital accounts under our own ownership.
Could you please transfer or confirm the following?
- The domain registration, including the EPP/auth code
- The hosting account, or a full site backup file
- Administrator access to WordPress for [your email]
- Owner access to our Google Analytics property and Search Console
- Primary owner on our Google Business Profile
- All design and source files produced under our agreement
- A list of all paid plugin, theme and font licenses in use, with renewal dates
Could you confirm by [date, 7–10 days out]? Happy to jump on a
call if anything is easier to walk through live.
Thanks,
[your name]
Note what this email does not say. It does not say you are leaving. You are not being dishonest — consolidating account ownership is a legitimate thing to do at any point in a relationship, and plenty of clients do it while staying put. You are simply not handing over your only leverage before you have what you need.
A realistic timeline
| When | What happens | Who’s blocking |
|---|---|---|
| Day 0 | Run the seven-point audit. Download a backup if you can reach the host. | You |
| Day 1 | Send the handover request with a 7–10 day deadline. | You |
| Days 2–10 | Assets arrive. Move each one into an account in your name as it lands. | Your current agency |
| Day 10 | Initiate the domain transfer using the EPP code. | You |
| Days 10–17 | Domain transfer completes. Do not change nameservers mid-transfer. | Registrars |
| Day 17 | Migrate hosting. Keep the old host live for at least 14 days afterwards. | You |
| Day 21 | Confirm email still flows, forms still submit, and analytics still tracks. Then give notice. | You |
Do not cancel the old hosting on migration day
Keep it running for at least two weeks after you cut over. It costs one more month of hosting and it is the difference between “we spotted a missing page” and “we lost a page and have no copy of it.”
If they go silent
It happens, usually because the agency has folded or the one person who knew your account has left. You are not stuck.
| Asset | Route back |
|---|---|
| Domain | If the registrant is genuinely you, your registrar has a dispute process. In clear bad-faith cases a UDRP complaint is available, though it is slow and costs money. |
| Hosting | If the account is in your name, the host will help you regain access with identity verification. On reseller hosting, you may have to rebuild from a crawl of the live site — do this before anything gets switched off. |
| WordPress | With hosting or database access, an Administrator account can be created directly. Any competent developer can do this in minutes. |
| Search Console | Re-verify from scratch using a DNS TXT record, once you control DNS. |
| Business Profile | Google has a formal ownership request process. It takes time and requires you to verify the business, but it works. |
| Analytics history | Usually unrecoverable. Start a new property immediately so the gap is as short as possible. |
Red flags that mean move faster
|
✓Normal, not worrying
|
✗Act now
|
Five lines that prevent all of this next time
Whether your next agency is us or anyone else, ask for these in writing. A reputable shop will sign them without argument, and the reaction itself tells you something.
| 1 | All domains are registered in the client’s name, in a client-controlled registrar account. |
| 2 | Hosting is in the client’s name, or the client may request a complete site backup at any time at no charge. |
| 3 | The client is granted Administrator access to the CMS at launch and retains it throughout. |
| 4 | On final payment, all deliverables — design files, source code and custom development — are assigned to the client. |
| 5 | All third-party licenses are purchased in the client’s name, with an inventory provided on request. |
Ownership and management are different things. You can own every account and still delegate day-to-day access — that is the normal arrangement, and it means a good relationship never has to become a bad handover.
Frequently asked questions
Can my web designer hold my website hostage?
If they control the hosting account or DNS, they have practical leverage, though acting on it exposes them to real legal risk and is rare. If the domain and hosting are in your name, they have very little.
How long does a domain transfer take?
Typically 5–7 days once initiated. The domain must have been registered for at least 60 days, and a recent change of registrant can start that clock again.
What is an EPP code?
Also called an auth code or transfer key — the password that authorizes moving a domain between registrars. Only whoever controls the registrar account can generate it.
Do I own my website design if I paid for it?
Not automatically. Under US copyright law the creator owns their work unless the contract assigns it to you. Check your agreement for an assignment or work-made-for-hire clause.
Should I tell my current agency I’m leaving before or after the handover?
After. Run the audit, request the assets as routine housekeeping, confirm everything works in accounts you control, and give notice last.
Will switching agencies hurt my SEO?
Not if the migration is done properly — same URLs, redirects mapped for anything that changes, and the old host kept live during cutover. Rankings drop when URLs change without redirects, not because the invoice has a different logo on it.
What if my site was built on a proprietary platform?
Then you can generally take your content but not the build. Export everything you can, and treat the rebuild cost as part of the true price of leaving. It is the main hidden cost of platform-based sites.
Keep reading
- 32 Questions to Ask Before Hiring a Web Designer
- Website hosting and maintenance
- Our web design service
Not sure what you actually control?
Send us your domain and we’ll tell you who owns what — registrar, hosting, analytics and Business Profile. No obligation, and if your current setup is fine we’ll say so.