Locked out of your own website: a DIY-builder cautionary tale

This is a generalized, fully anonymized account of a real situation. No identifying details about the business or the people involved are included — the pattern is what matters, because it is astonishingly common.

The setup

A small business did what small businesses are told to do: it got online, fast and cheap, on a popular DIY website builder. Someone — a founder, an early employee, a friend-of-a- friend who was “good with computers” — signed up, picked a template, wired up the domain, connected the email, and got a real, working site live in a weekend. For a while, this was a success story. The site did its job. Nobody thought about it again.

That last sentence is where the trouble starts.

The complication

Time passed. People moved on. And when the business finally needed to change something important — update billing, move the domain, fix a broken integration, or just log in — nobody could.

The account had been created under a personal email that no longer existed. The domain, it turned out, had been registered through the builder, so the platform effectively held it. Billing was on a card belonging to someone who’d long since left. And the content, the thing the business actually cared about, lived inside a proprietary system with no clean way to export it.

None of this was malice. It was just the quiet default of how DIY platforms work: they optimise for getting you in quickly, not for getting you out cleanly. Convenience on day one becomes lock-in on day one thousand. The business didn’t own its website so much as rent it — and it had lost the keys to the rental.

The resolution

Untangling this is less about clever code and more about patient, methodical detective work. In broad strokes, that meant:

• Establishing who actually owned what. The domain, the hosting account, the email, the billing — each was a separate thread, and each had to be traced to a real, provable owner before anything could move.
• Recovering and verifying access. Working through the platform’s account-recovery and ownership-verification processes with real documentation, rather than guessing at passwords — the slow, legitimate route that actually holds up.
• Getting the domain into the client’s own name. Separating the domain from the builder so the business controlled its own address, independent of any one platform.
• Getting the content out. Extracting what could be extracted and rebuilding what couldn’t, so the business was no longer hostage to a proprietary export button that didn’t exist.

Where they landed: back in control. Accounts in the business’s own name, on its own email. The domain owned outright. The content portable. Crucially, the business was left in a position where it could stay on the platform or leave — because for the first time, that was actually its decision to make.

The generalized lesson

You don’t need to be technical to avoid this. You need to ask a few uncomfortable questions before you’re stuck, not after. If you run a business with a website, sit down and answer these honestly:

• Whose name is on it? The domain, the hosting, the builder account — are they registered to the business, or to a person (maybe one who’s no longer around)?
• Which email controls the accounts? If that inbox disappeared tomorrow, could you still get in? If the answer is “I’m not sure,” treat that as a no.
• Who’s paying, and on whose card? Billing tied to an individual is a lockout waiting to happen the day that individual leaves.
• Could you leave if you wanted to? Can you export your content and move your domain without the platform’s permission? If leaving is impossible, you don’t own your site — you’re renting it, and the landlord sets the terms.
• Where is it all written down? One document listing every account, login and renewal date, kept somewhere the business controls, is worth more than it sounds.

The businesses that get locked out aren’t careless. They’re just busy, and they trusted that “easy to start” also meant “easy to keep.” It usually doesn’t. The good news is that almost every lockout is recoverable — it’s just far cheaper, calmer and faster to check the locks now than to pick them later.

---

Stuck in a version of this — locked out, lost access, or trapped on a platform you can’t leave? That’s exactly the kind of thing I untangle. Tell me what’s going on.