THE SHORT ANSWER

Editorial governance preference, not legal advice or an ICANN prohibition: retain accountable business control and delegate technical work with a documented exit.

Primary-source researchSources & scope →
A business owner holds the primary domain vault key while an agency collaborator receives a smaller delegated key; renewal calendar and recovery folder visible.

Our editorial view: a business should control the account and recovery process for its main domain, even when an agency handles the website. Delegate the work with appropriate permissions and a written handover, rather than relying on one contractor’s personal login.

Why this matters more than a first-year discount

The domain connects customers to the website and often to business email. Losing administrative access can turn an ordinary supplier change into a difficult recovery project. Saving on registration is useful, but it does not compensate for unclear authority, missed renewal or a recovery address nobody controls.

ICANN describes the registrant as the person or entity holding rights to a registered domain. That supports distinguishing registrant identity from the person who designs the website. It does not prohibit an agency from registering a domain; our recommendation is a governance preference, not a legal ruling about a disputed contract.

An agency can still manage the technical work

A competent agency may be best placed to configure DNS, connect services and coordinate changes. Business control does not mean an inexperienced owner must edit every record. The useful arrangement gives the business an accountable administrator and gives the agency the access required for its job.

Use delegated roles where available and keep permissions proportional to the work. If the registrar has no suitable delegation, agree a documented access arrangement and exit process before committing. Avoid treating a shared password in an email thread as a durable administrative plan.

The handover we would require

ItemBusiness acceptance check
Identity and contractThe intended registrant and registrar are documented; the business can access the applicable contract.
RenewalA responsible person can see expiry, charges and the payment method, with reminders that reach the business.
Access and recoveryAuthorized contacts can recover access; MFA and recovery materials are stored securely.
Technical inventoryNameservers and important DNS dependencies are recorded.
ExitSupplier changes have a defined handover and access-revocation process.
Domain account control checklist

Plan for personnel and supplier changes

Choose a recovery channel that remains usable during a failure of the domain’s own email, where the provider supports it. Document who can act if the main administrator leaves or becomes unavailable. Test the recovery instructions safely and revoke access when responsibilities change.

The historical SSAC SAC044 advisory recommends authorized contacts and documented recovery. It is a useful principle, not evidence that a specific registrar supplies every control today. Inspect the current account features before buying.

Do not confuse transfer locks with complete protection

ICANN’s EPP codes distinguish restrictions on registrar transfer from restrictions on updates. A transfer lock is useful but does not by itself establish that nobody can alter website or email routing. Confirm the protections the actual registrar offers and secure the DNS account separately when another company manages it.

If the agency already holds the account

Start with the contract and a cooperative handover request. Agree the intended registrant, account administrator and service dependencies. Do not abruptly cancel hosting or change nameservers while recovering the account: email and other services may depend on the current arrangement. If there is a dispute, obtain advice appropriate to the contract and jurisdiction.

Compare registrar cost, renewal and control together. Our preference is an arrangement a future employee can understand and recover, not a particular registrar selected by affiliate commission.

BEFORE YOU CHOOSE

Costs alongside this guide

Use these observations only when choosing a registrar. Paying for a domain does not by itself establish who controls the account.

Domain registration

USD · US / global observations

Namecheap

Namecheap · .com Registration · current promotion

Initial term & commitment
Initial term amount
US$11.4812 months term
Renewal
US$18.68total for 12 months including the annual ICANN fee; current standard reference, subject to change

Check local tax at checkout

Price observed 2026-10-16

Plan details & sources
Good fit for

A standard .com with registrar and DNS control.

Consider the trade-off

Standard non-premium .com; privacy included; promotion eligibility applies.

Choose another option if: A premium domain is required.

Global USD reference · Check local tax at checkout

Check local tax at checkout

Prices checked 2026-10-16Official price source ↗

Observed 2026-10-16

Official price evidence ↗

Dynadot

Dynadot · .com · standard registration

Initial term & commitment
Initial term amount
US$10.8812 months term
standard one-year domain registration
Renewal
US$10.88standard one-year .com renewal reference

Check local tax at checkout

Price observed 2026-10-16

Plan details & sources
Good fit for

A standard .com buyer needing domain/DNS ownership and listed tools.

Consider the trade-off

Standard .com; privacy, DNSSEC and forwarding; one-page site and limited one-email offering are not full hosting or a team mailbox.

Choose another option if: A premium name, different extension or full hosting/email needs a different quote.

Public USD reference; billing country unconfirmed · Check local tax at checkout

Published standard one-year registration amount

Check local tax at checkout

Prices checked 2026-10-16Official price source ↗
  • Privacy: Included. Free privacy is available for standard .com registrations
  • DNSSEC: Conditions or paid extras apply. Requires third-party name servers; Dynadot DNS services are not DNSSEC-enabled
  • Email hosting: Conditions or paid extras apply. One free address with 1 GB storage and a limit of 25 sent emails per day
  • Website hosting: Conditions or paid extras apply. Free one-page website with required Dynadot footer; Pro features cost extra
Feature evidence

Observed 2026-10-16

Official price evidence ↗
Compare plans

Recorded prices can change. Check eligibility, taxes and the current full bill with the provider. Different currencies and services are shown separately.

Sources and verification

Editorial review 2026-10-07. Source check dates are recorded separately. Notes describe what each source supports and its limits.

View sources
  • ICANN domain registration processChecked Registrant rights and the contractual role of a registrar.
    Limits: Governance recommendations are our inference; rules differ across domain extensions.
  • ICANN registrant benefits and responsibilitiesChecked Registrant access to contract and renewal/transfer information; accurate account details.
    Limits: Confirm the actual contract and ccTLD requirements; no legal ownership ruling.
  • ICANN SSAC SAC044Checked Authorized contacts, credential protection, recovery and revocation when personnel change.
    Limits: Historical advisory report from 2010, not current mandatory policy or panel instructions.
  • ICANN EPP status codesChecked Transfer and update prohibitions are distinct statuses.
    Limits: A transfer lock alone does not guarantee protection of every DNS change.