{"id":30202,"date":"2026-03-11T11:26:00","date_gmt":"2026-03-11T10:26:00","guid":{"rendered":"https:\/\/www.web-systems.pl\/changing-website-provider-what-access-to-take-back\/"},"modified":"2026-10-13T14:55:58","modified_gmt":"2026-10-13T13:55:58","slug":"changing-website-provider-what-access-to-take-back","status":"publish","type":"post","link":"https:\/\/www.web-systems.pl\/en\/changing-website-provider-what-access-to-take-back\/","title":{"rendered":"Changing your website maintenance company: which access to take back"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>Changing the company that maintains your website<\/strong> is safe if you take control of the domain, hosting, email, CMS panel and third-party service accounts before you terminate the contract. Business owners are usually afraid of three things: losing the domain, the mailboxes or access to the panel.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">None of them has to happen. You just need to take over access in the right order. Below is a checklist, from the most important matters down to the details. And one caveat: this is not about judging the previous contractor. It is about your company holding everything that belongs to it.<\/p>\n\n\n\n<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of contents<\/p>\n<span class=\"ez-toc-title-toggle\"><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 ' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.web-systems.pl\/en\/changing-website-provider-what-access-to-take-back\/#Who_owns_the_domain_and_how_do_you_check_it\" >Who owns the domain and how do you check it?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.web-systems.pl\/en\/changing-website-provider-what-access-to-take-back\/#Hosting_and_panel_access_what_you_need_to_have_in_hand\" >Hosting and panel access: what you need to have in hand<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.web-systems.pl\/en\/changing-website-provider-what-access-to-take-back\/#Company_email_and_DNS_records_-_how_not_to_lose_emails_when_changing_contractors\" >Company email and DNS records - how not to lose emails when changing contractors<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.web-systems.pl\/en\/changing-website-provider-what-access-to-take-back\/#Taking_over_a_website_from_an_agency_an_access_checklist\" >Taking over a website from an agency: an access checklist<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.web-systems.pl\/en\/changing-website-provider-what-access-to-take-back\/#Backup_and_documentation_before_a_website_handover\" >Backup and documentation before a website handover<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.web-systems.pl\/en\/changing-website-provider-what-access-to-take-back\/#In_what_order_should_you_change_the_company_that_maintains_your_website\" >In what order should you change the company that maintains your website?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.web-systems.pl\/en\/changing-website-provider-what-access-to-take-back\/#Frequently_asked_questions\" >Frequently asked questions<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.web-systems.pl\/en\/changing-website-provider-what-access-to-take-back\/#Can_the_agency_keep_my_domain\" >Can the agency keep my domain?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.web-systems.pl\/en\/changing-website-provider-what-access-to-take-back\/#Does_moving_a_website_to_a_new_company_mean_downtime\" >Does moving a website to a new company mean downtime?<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.web-systems.pl\/en\/changing-website-provider-what-access-to-take-back\/#What_should_I_do_if_I_have_no_access_credentials_at_all\" >What should I do if I have no access credentials at all?<\/a><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Who_owns_the_domain_and_how_do_you_check_it\"><\/span>Who owns the domain and how do you check it?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The domain owner is the domain name holder (the <em>registrant<\/em>) listed with the registrar, not the company that handles it technically. That registrant should be your company. Not the agency and not one of its employees (and yet it happens, for example when a freelancer registered the domain &#8220;in a hurry&#8221;). Ask for access to the registrar account, or at least for confirmation of the registrant details.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For global domains such as .com, the <a href=\"https:\/\/www.icann.org\/resources\/pages\/name-holder-faqs-2017-10-10-en\" rel=\"nofollow noopener\" target=\"_blank\">ICANN rules for domain name holders<\/a> guarantee the right to transfer a domain to another registrar. But watch out: after a change of the registrant&#8217;s name, organization or email address, the transfer can be locked for 60 days. .pl domains fall under the NASK registry, and the transfer is carried out by the registrant and the registrar. Why start with the domain? Because both the website and the email depend on it.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Hosting_and_panel_access_what_you_need_to_have_in_hand\"><\/span>Hosting and panel access: what you need to have in hand<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">You need your own account with the hosting provider or a complete set of administrative credentials. FTP alone is not enough. The list should include:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>the hosting panel login,<\/li>\n<li>FTP or SFTP and SSH credentials (remote access to the server),<\/li>\n<li>database access,<\/li>\n<li>management of the DNS zone, meaning the settings that point the domain to the server,<\/li>\n<li>information on who renews the SSL certificate,<\/li>\n<li>the billing account.<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Take a look at the server invoices too. Who are they issued to? In practice, they are what most often shows who really owns the service. If the hosting sits on the agency&#8217;s account, a provider that offers <a href=\"https:\/\/www.web-systems.pl\/en\/web-hosting-and-email-hosting\/\">website and email hosting<\/a> in one place will come in handy for the move.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Company_email_and_DNS_records_-_how_not_to_lose_emails_when_changing_contractors\"><\/span>Company email and DNS records - how not to lose emails when changing contractors<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Email works thanks to the domain&#8217;s DNS records, so whoever holds the DNS decides whether emails arrive at all. Simple. First, find out where the mailboxes physically are: on the agency&#8217;s hosting or with an external provider. And who has the administrator account there. Before you touch anything, write down the current records: MX (points to the server that receives email), SPF (the list of servers allowed to send on behalf of the domain) and DKIM (a digital signature on messages). Plan the email move separately. Otherwise it is easy to switch off both the website and the mailboxes on the same day, and nobody wants to explain that to the team.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Taking_over_a_website_from_an_agency_an_access_checklist\"><\/span>Taking over a website from an agency: an access checklist<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Taking over a website from an agency comes down to collecting the logins to the accounts that belong to your company and changing the passwords after the handover. Go step by step:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>the CMS administrator account: WordPress, WooCommerce, PrestaShop or Shopify,<\/li>\n<li>plugin and theme licenses, ideally assigned to a company address,<\/li>\n<li>Google Analytics, Google Search Console and Tag Manager,<\/li>\n<li>advertising accounts,<\/li>\n<li>payment gateways,<\/li>\n<li>integrations and API keys, meaning the credentials the website uses to connect to other systems,<\/li>\n<li>the code repository.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">Wherever possible, get permissions <strong>at the owner level<\/strong>. A user account that the agency kindly added is not enough. After the handover, remove or restrict the former contractor&#8217;s accounts and change the passwords. All of them.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Backup_and_documentation_before_a_website_handover\"><\/span>Backup and documentation before a website handover<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Before you change anything, make a full copy of the files and the database and keep it outside the current hosting. Then even a failed migration does not end in lost content or orders. Also ask the contractor for documentation: a list of plugins, a description of custom modifications and integrations, and the update schedule. Copyright to the code and graphics varies, and everything depends on the contract. So go through it with a lawyer, without guessing. The new team will get up to speed faster if it starts with a <a href=\"https:\/\/www.web-systems.pl\/en\/website-audits\/\">review of the existing website<\/a> that shows its technical condition and the risks.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"In_what_order_should_you_change_the_company_that_maintains_your_website\"><\/span>In what order should you change the company that maintains your website?<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The safest way: access and backups first, then choosing the new contractor, and at the very end terminating the contract and changing the passwords. In practice it looks like this:<\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>an inventory of all access,<\/li>\n<li>a backup of the files and the database,<\/li>\n<li>verifying the domain registrant,<\/li>\n<li><a href=\"https:\/\/www.web-systems.pl\/en\/how-to-vet-software-contractor-before-signing\/\">choosing the new company<\/a>,<\/li>\n<li>handing over the website and its configuration,<\/li>\n<li>cutting off the old accounts.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">When choosing, the guide on <a href=\"https:\/\/www.web-systems.pl\/en\/how-to-choose-a-company-to-build-your-website\/\">how to choose a website contractor<\/a> will help, as will the article on what vetting a contractor before signing a contract looks like. Do you prefer ongoing care to one-off jobs? Consider outsourced IT support. Oh, and one more thing. A calm, matter-of-fact conversation with the current contractor usually speeds up the handover a lot. A row usually does not.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Changing the company that maintains your website goes smoothly when the domain, hosting, email and service accounts are registered to your company. In my opinion, the best habit you can take away from this: no matter who happens to be <a href=\"https:\/\/www.web-systems.pl\/en\/it-outsourcing\/\">looking after your website<\/a>, keep an up-to-date list of access details and of the places where they are stored. Then the next change of contractor is a formality.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Frequently_asked_questions\"><\/span>Frequently asked questions<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n<div id=\"rank-math-faq\" class=\"rank-math-block\">\n<div class=\"rank-math-list \">\n<div id=\"faq-question-1790308510217-0\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \"><span class=\"ez-toc-section\" id=\"Can_the_agency_keep_my_domain\"><\/span>Can the agency keep my domain?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<div class=\"rank-math-answer \">\n\n<p>It all depends on who is listed as the registrant. If it is your company, the domain belongs to it, even when the agency handles it technically. Check the details with the registrar, and discuss any disputed points of the contract with a lawyer.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-question-1790308510217-1\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \"><span class=\"ez-toc-section\" id=\"Does_moving_a_website_to_a_new_company_mean_downtime\"><\/span>Does moving a website to a new company mean downtime?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<div class=\"rank-math-answer \">\n\n<p>It doesn&#8217;t have to. Stick to the order: backup first, then DNS changes, and email separately. Then the downtime can be kept to a minimum. It is best to make the changes when traffic is at its lowest.<\/p>\n\n<\/div>\n<\/div>\n<div id=\"faq-question-1790308510217-2\" class=\"rank-math-list-item\">\n<h3 class=\"rank-math-question \"><span class=\"ez-toc-section\" id=\"What_should_I_do_if_I_have_no_access_credentials_at_all\"><\/span>What should I do if I have no access credentials at all?<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<div class=\"rank-math-answer \">\n\n<p>Start with the domain and the registrar account, then the hosting that the invoices are for. With your company documents you can recover these accounts directly from the providers. The rest, meaning Google Analytics, plugin licenses and similar services, you can recover later through their access recovery procedures.<\/p>\n\n<\/div>\n<\/div>\n<\/div>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Changing the company that maintains your website is safe if you take control of the domain, hosting, email, CMS panel and third-party service accounts before you terminate the contract. Business owners are usually afraid of three things: losing the domain, the mailboxes or access to the panel. None of them has to happen. You just [&hellip;]<\/p>\n","protected":false},"author":9,"featured_media":30171,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[820,828],"tags":[2221,2117,2226,1957,1081,901],"class_list":["post-30202","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-business","category-cybersecurity","tag-agency","tag-business-website","tag-domain","tag-hosting-en","tag-how-to","tag-security"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.web-systems.pl\/en\/wp-json\/wp\/v2\/posts\/30202","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.web-systems.pl\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.web-systems.pl\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.web-systems.pl\/en\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/www.web-systems.pl\/en\/wp-json\/wp\/v2\/comments?post=30202"}],"version-history":[{"count":5,"href":"https:\/\/www.web-systems.pl\/en\/wp-json\/wp\/v2\/posts\/30202\/revisions"}],"predecessor-version":[{"id":30656,"href":"https:\/\/www.web-systems.pl\/en\/wp-json\/wp\/v2\/posts\/30202\/revisions\/30656"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.web-systems.pl\/en\/wp-json\/wp\/v2\/media\/30171"}],"wp:attachment":[{"href":"https:\/\/www.web-systems.pl\/en\/wp-json\/wp\/v2\/media?parent=30202"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.web-systems.pl\/en\/wp-json\/wp\/v2\/categories?post=30202"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.web-systems.pl\/en\/wp-json\/wp\/v2\/tags?post=30202"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}