Transferring a Domain You Cannot Access

Yours, and you cannot get in

The domain works, the site is up, and email is arriving.

What has been lost is the account that controls it: the password is unknown, the recovery address belongs to somebody who left, or the account was set up by a supplier nobody has spoken to since 2018.

Nothing is broken yet, which is why this sits unresolved for years.

Then a renewal fails, or a site needs moving, or the certificate needs changing, and the missing access becomes urgent at the worst moment.

How access gets lost

• A supplier registered it on their own account.
• An employee set it up and has left.
• The recovery address no longer exists.
• The password was never recorded anywhere.
• Two-step verification is tied to an old phone.
• The registrar was acquired and the account migrated.

The third is the most common and the most circular, since the recovery process emails the address you cannot reach.

The registrant record is what matters

The concept that determines everything else, and it is worth understanding before contacting anybody.

Every domain has a registrant, which is the party the domain legally belongs to. That is separate from who administers the account and separate from who pays for it.

Registrar records also distinguish administrative, technical, and billing contacts, which are roles rather than ownership.

If the registrant is your business, you have a strong position regardless of who holds the login, and the registrar has a process for exactly this.

If the registrant is a supplier or an individual, the problem is ownership rather than access, and it is a different and harder conversation.

Find out which situation you are in before doing anything else.

Finding out what the record says

Public lookup services will show some of it, though considerably less than they once did, since contact details are now commonly withheld for privacy reasons.

What is usually still visible is the registrar, the creation and expiry dates, and the status flags on the domain.

Knowing the registrar is the practical outcome, since that tells you who to contact.

For the registrant identity itself, the registrar will confirm it to somebody who can demonstrate a connection, which is part of the recovery process rather than a preliminary to it.

Canadian domains have their own administration and their own verification requirements, so the process differs slightly from a generic one.

Recovery, in order

The sequence that works, and it is more ordinary than people expect.

Try the registrar's standard account recovery first, since it occasionally succeeds through a route nobody had considered, such as a secondary address still on file.

When that fails, contact support directly, explain that you are the registrant and have lost account access, and ask what evidence they require.

Provide it in one submission rather than piecemeal, since each exchange costs days.

Expect it to take a week or two, and expect to be asked for things that feel excessive, which is the point of the process.

Do this well before a renewal date rather than during a lapse, because a domain in redemption is a considerably worse position to negotiate from.

What tends to be accepted as evidence

Registrars vary, and the general shape is consistent.

Business registration documents matching the registrant name. An invoice showing payment for the domain. Identification for a named individual. Correspondence from the original registration.

Control of the domain itself is sometimes accepted: being asked to place a specific file on the website, or a specific record in the DNS, both of which demonstrate practical control.

That last route is worth asking about specifically, since it is frequently faster than a documentary process and many businesses do not know it exists.

Gather what you have before opening the conversation, since a complete first submission is what turns two weeks into three days.

A worked example

A business needed to move hosts and discovered nobody could access the registrar account, which had been created by a web designer in 2016.

The designer was traceable and cooperative and simply did not have the details either.

A public lookup showed the registrar and the expiry date, three months away.

Support asked for business registration documents and identification for a director, both of which matched the registrant record, and asked them to place a text file at a specific address on the site to prove control.

The whole process took eleven days and cost nothing.

They then moved the domain to an account in the business name, set the contact address to a shared mailbox on a different domain, and recorded the details properly.

The important detail was that the registrant had been correct all along, which is what made it straightforward.

The code and the lock

Two mechanics worth knowing before you attempt to move a domain.

Transferring between registrars requires an authorization code from the current one, obtained once you have access, along with the domain being unlocked.

There is also commonly a sixty-day period after registration or after certain changes during which a transfer is not permitted, which catches people who regain access and immediately try to move.

So the sequence is regain access, unlock, obtain the code, then transfer, and the last step may have to wait.

Once the transfer completes, re-enable the lock, since it is a protection rather than an inconvenience.

The counter-case

Sometimes recovery is not the right effort.

Where the registrant is genuinely somebody else and they are uncooperative or untraceable, the realistic options are commercial negotiation or moving to a different domain, and pursuing a claim is disproportionate for most small businesses.

There is also a version where a business spends months on a domain it barely uses, when redirecting a new one and updating its material would have cost a fraction of the effort.

Weigh it by what the domain carries: your trading name, years of links, and printed material make recovery worth real effort. A secondary domain nobody visits does not.

Where the answer is to move on, do it deliberately rather than after a year of trying.

What to do

1. Look up the domain to find the registrar and expiry.
2. Establish who the registrant is, before anything else.
3. Try standard account recovery.
4. Ask support what evidence they need.
5. Submit everything at once, not piecemeal.
6. Ask about proving control via a file or DNS record.
7. Move it into the business name once you are in.

Step two decides whether this is an access problem with a process or an ownership problem with a negotiation, and they need completely different approaches.

Domains held by somebody else are covered in a domain registered by your nephew.

Frequently asked questions

West Coast Media Solutions Inc. provides web design, web development, hosting, digital marketing, and business consulting to organisations across Canada, drawing on more than twenty-five years in the field.