The domain login only your developer knows is a hostage
A domain sitting in one account is not a convenience, it is a risk you have not priced yet. When that person becomes unreachable, your business address stops being yours.
Every website needs a home somewhere, and that home is a domain name registered with a registrar. Somebody set up that account, chose a password and possibly a payment card. If that somebody was a developer working alone, the account may exist entirely outside your organisation.
This is not a hypothetical problem. Developers move on. Freelancers change their email addresses. Small studios close down. When any of that happens and the domain login lives only in one inbox, you no longer control the address customers use to find you.
Why this counts as a hostage situation
A hostage situation does not require bad intent. Most developers are not trying to hold your business to ransom. They simply set up the fastest path to a working website, and ownership questions never came up. The result is the same regardless of intent: renewal notices go to an account you cannot open, and a domain transfer needs a login you do not have.
Consider what actually sits behind that one login. The domain name itself, the records that route your email, and often the certificates that keep your site secure all depend on access to that single account. Losing it does not just take down a page. It can take down your email, your booking system and any tool that trusts your domain.
A domain login held by one person is not a technical detail. It is a decision about who controls your business address.
You should be able to answer a simple question at any time: who can log into the account that owns your domain, and can you reach it without asking anyone. If the honest answer involves waiting on a reply from a developer you have not spoken to in a year, you already have your answer.
What to check before it becomes urgent
Start with the registrar account itself. It should be registered under an email address your organisation controls, not a personal inbox belonging to a contractor. The billing card should be yours as well, so a lapsed subscription does not become a lapsed domain.
Next, ask whoever built your site to document where the domain sits, who has access and how renewal is paid. This should take a single page, not a project.
At Yunaristech, we design, build and launch marketing sites, web applications and software products at a fixed price, and handover always includes this kind of ownership detail. A fixed price only holds its value if you actually own what you paid for. A website you cannot access is not an asset, it is a liability waiting for its renewal date.
If you are not certain who holds your domain login today, that is worth resolving this week, not after a renewal notice bounces back undelivered.