yodai Academy Domain and email

Academy › Publishing › Domain and email

Three keys, not one: who buys, who points the domain, and who manages email

You'll know how to split access to your domain across three separate accounts (registrar, DNS, and email) so you're never dependent on one person who could lock you out.

By Yodai · Published on September 6, 2026 · Updated on October 12, 2026

5 min read

Think about who can get into your domain and your email today without asking you first. Here's the uncomfortable question: if that person doesn't answer their phone tomorrow, does your business keep running?

The usual setup is that everything lives in one place: the domain, where it points, the email your customers use to reach you. One dashboard, one username, one password, handed to you by whoever set it up. It works great while that relationship is good. The day it breaks, because you switch agencies, a partner leaves angry, or the designer closes shop, you find out you never had three keys: you had one lock, and someone else held the key.

Three jobs that look like one

Behind "your domain" there are actually three separate jobs, almost always split across different services even if they were handed to you as if they were one.

Who owns it is the registrar: the company where you paid for the domain and where its ownership is recorded. That's where you pay the renewal, and that's what ultimately decides whether it's still yours. Who points it is DNS management: the record that decides whether your domain leads to your site or somewhere else, and whether your email reaches an inbox or gets lost along the way. Many businesses run this part through Cloudflare, even when the domain was bought somewhere else entirely; that's two dashboards with two passwords, not one. Who runs the email is the panel where mailboxes get created, passwords get changed, and someone decides who gets an account with your business's name on it: Google Workspace, Microsoft 365, or your hosting provider's own tool.

These are three tasks that don't need to live in the same account or depend on the same person. Just because one person handles all of them today doesn't mean that has to continue, and separating them doesn't break anything that's already working: the domain still points the same way, the emails still arrive the same way. The only thing that changes is who can touch each piece.

Picture a common case: you bought the domain three years ago through some registrar, but ever since, the DNS side has been run by whoever built your website, through Cloudflare, because it was faster that way. That's been two separate accounts from day one, even if nobody told you. The registrar is the one that really calls the shots (if that domain expires because nobody renews the payment, it doesn't matter how well the DNS is set up) and it's usually the one people check on least, precisely because it's the one they touch least.

One account for everything or three separate accounts
A single shared account
  • One username and one password to remember
  • Quick to hand over on day one of the business
  • Whoever created it decides whether you stay in or not
  • If someone breaks into that person's email, they get into yours too
Three separate accounts
  • Each service has its own owner and its own password
  • You can grant working access without handing over ownership
  • A problem in one account doesn't drag down the other two
  • Takes ten extra minutes to set up at the start

Which one to pick: If the business is already making money or depends on the website, separate the three accounts: what it costs you in time today, you'll save the day someone walks out angry. A single shared account is only acceptable as a short-term test you plan to retire within weeks.

How to separate them if they're combined today

Three moves, one per key
  1. 1The registrar in your name
    Log into the account where the domain was purchased, and check the owner on record, the payment method, and the renewal date. If it's listed under the agency or the designer, ask them to transfer ownership to your name or your business; you don't need to change domains or touch the website, just change who owns it on paper and make sure the card paying for the renewal is yours, not one that belongs to someone who might stop paying it.
  2. 2DNS under your own admin email
    Create your own account with the DNS provider, or ask to be added as an admin, not a collaborator. Every service names its roles differently; what you're looking for is the one that can grant and revoke access for others. With a lesser role, you can only use the permissions you've been given.
  3. 3Email under your name, not a generic one
    The account that runs your email (the one that creates and deletes mailboxes, the one that resets passwords) needs to carry your name and your password. An "admin@yourdomain.com" run by the agency is still their account, even if the name carries your business's domain.
What to ask whoever set it up for you
I need the domain registered under my name and my payment method. For the DNS and the email, set me up as an administrator with my own login email; you can keep working access to make changes when I ask you to, but I'll hold the main account for all three.
The recovery email can't live on the same domain
If the recovery email for your registrar or DNS password is an @yourdomain.com account, and you ever lose access to that inbox, you're stuck in a loop: you need the email to get into whatever controls the email. It happens more often than you'd think when someone else managed the email and stops paying for the mailbox, or deletes it without warning. The recovery email for these three accounts should always go to a personal email, outside the business's domain.
What you walk away with
  • You know there are three separate jobs behind the domain: buying, pointing, and managing the email
  • You've checked who the actual owner on record is at the registrar, and whether it matches you
  • You have your own administrator account for the DNS and the email panel, separate from whoever helps you day to day
  • The recovery email for those accounts no longer depends on the domain itself
  • The next key: the safe nobody can walk off with

In Yodai you connect the domain you already have to your site, and it stays registered where it is, in your name. See how your own domain for your website works.

NextThe safe no one walks off with when they leave