I can't access my website
Lost the login, no developer to ask, no idea where to start. Here is how to get back in, in the right order.
01 / What probably happened
You are not locked out forever
Almost every website has three separate accounts behind it: the domain registrar, the hosting provider, and the editor or CMS. When people say 'I cannot access my website', they usually mean they have lost the login to one of these and they do not know which one matters. The good news is that all three have official recovery routes, even when you have lost the email, the password, and the phone.
The single most useful thing you can do right now is figure out who owns the domain. A whois lookup on your domain name takes ten seconds and tells us where to start. From there it is paperwork, not magic.
Avoid anyone who offers to 'hack' the account back for you. That is a scam and it can get you locked out permanently. The legitimate routes are slower but they work.
02 / Things to do right now
Six steps to get back in
Work through these in order, even if some sound boring. The boring steps are the ones that actually unlock things.
List every account that touches the site
There are usually three: the domain registrar (where you bought the domain), the host (where the files live) and the CMS or builder (where you log in to edit). Write down what you remember about each.
Hunt the original purchase email
Search every inbox you have ever used for 'invoice', 'renewal', 'GoDaddy', '123-reg', 'Namecheap', 'Wix' or your domain name. The recovery trail almost always starts in an old email.
Use registrar account recovery
If you can prove the email and a payment method, registrars will reset access without the password. Some require an ID upload. It is slower than you would like but it works.
Recover lost two-factor codes
Most providers accept backup codes, recovery emails or notarised ID forms. If your authenticator was on a lost phone, this is the route. Plan for one to five working days.
Get the registrar to move the domain
If the old developer registered the domain in their own name, the registrar can transfer ownership to you with proof of business identity. This is slow but the registrar wants to help.
Document everything you find
Once you are back in, store credentials in a password manager you actually own. Add a recovery email that is not the old developer's. Future-you will thank you.
03 / How we handle it
Our access recovery process
Triage
We map the chain: who owns the domain, who hosts the files, who has the editor login. We mark what you control already and what we need to recover.
Stabilise
While recovery is in motion, we make sure visitors are not seeing anything broken or embarrassing. If the site is still up, we leave it alone and focus on access.
Recover
We work the official recovery channels at each provider, including ID-based account recovery, registrar transfers and 2FA reset processes. We chase support so you do not have to.
Hand over
Once everything is back in your name, we move it to clean accounts you control, store credentials properly, and put the site on a plan where access is never a mystery again.
FAQ
Common questions
I have completely lost the login email. Is the site gone?
Almost never. Most registrars and hosts have ID-based recovery for business owners. It can take a few days and usually requires proof of business identity, but the path exists. The site itself is still on the server while you recover access.
My old developer registered the domain in their name. What now?
You can ask the registrar to transfer ownership using proof of business identity (Companies House extract, invoices in your name). It is a paper-trail process rather than a technical one, and we can walk you through the registrar's exact form.
How long does account recovery usually take?
Anywhere from 30 minutes (forgotten password with email access) to two weeks (full ID-based recovery on a major registrar). Domain transfers add another five to seven days. We will give you a realistic timeline at the first call.
The 2FA was on a phone I no longer have. Can I still get in?
Yes. Every reputable provider has a 2FA reset process for exactly this reason. It usually involves proving identity through a different channel and a short waiting period. Avoid third parties who promise to bypass 2FA, they are not legitimate.
Will I have to pay any old bills to get access back?
Sometimes. If hosting was suspended for non-payment, it is usually quicker to settle the outstanding amount than to start over. If the old developer is sitting on credentials and demanding payment, we can help you go around them via the registrar directly.
Can you help even if I am not technical at all?
Yes, that is most of who we help. You do not need to know what DNS is. You just need to remember roughly when and where you bought things, and we do the rest.
Want to never be locked out again?
On our managed plan, you own everything in your own name and we hold a documented backup of every credential. Hand-over is one click whenever you want it.