Quick answer: you are not really fighting over a website. You are fighting over five or six separate accounts, and they have an order. The domain registrant record decides almost everything, so start there. Hosting, CMS admin, DNS and the files come after. Sometimes the fastest way out is to take the domain and rebuild rather than win the argument.

Why do people search this with “reddit” in it?

Because a normal search returns agencies selling the same monthly arrangement that caused the problem. Adding “reddit” is how you ask people with no invoice attached.

One note on sourcing: this page does not paraphrase other people’s threads back at you. It gives you the order of operations plus the Australian domain rules, which is the part most guides skip, with real Australian forum threads linked where they show how it played out.

What are you actually trying to get back?

“My website” is usually six things, and people often fight over the wrong one first:

  • The domain registrant record. Who is listed as registrant, not who “set it up”.
  • The EPP code, also called the auth or transfer code. Without it the domain does not move.
  • The hosting account, which is not the same thing as the site files.
  • CMS admin, not a user account with the admin buttons hidden.
  • DNS control, which is often the real leverage point.
  • Backups and the actual files, including images, copy and anything custom.

Rank them by leverage. Whoever controls the domain and DNS can point your web address and your email anywhere, including at nothing.

Start with the domain

For a .com.au or .au name, the registrant record is the whole argument. auDA’s Registrant Contact Information Policy is direct about it: “Registrars and resellers are not permitted to use their own contact details as registrant contact information, unless they have received express written consent from the registrant.” The stated reason is your exact situation: the registrant needs the renewal notices, and needs to be able to retrieve the domain password to transfer away.

So run a WHOIS lookup and read two fields: registrant name, and registrant contact email. If both are yours, you are in a stronger position than you feel. Ask the registrar, not your designer, for the transfer code. auDA’s registrar rules require it to be released to the registrant within two calendar days of the request, and for .au names you can request it yourself through auDA’s password recovery tool, which sends it to the registrant contact email on the registry record. Transferring between registrars costs no auDA fee and takes up to three days.

If that registrant email belongs to your designer, that is the real fight. In one Whirlpool thread an Australian business found its registrar had put its own address in the registrant field, then wanted US$175 or more for the auth code. Forum members told the poster not to pay anyone to correct a registrant email, and to escalate to auDA on company letterhead. It did not end tidily: the registrar ignored them for nine days and they paid US$300.

Two other patterns from the same forum. In a transfer thread the host kept sending a domain password that did not work, then admitted it had been supplying the wrong code all along. In another the reseller had gone dark, and going straight to the registrar behind it worked. Go around the middle party, with proof of who you are.

Hosting, CMS admin and DNS

Hosting is two things: the account, and the files inside it. A zip of your files is not the account, and the account is not much use without the files. Ask for both, in writing, as separate items.

CMS admin has the same trap. An “editor” role, or a custom “client” role, looks like access and then quietly refuses to install, export or add users. Test one thing: can your login create another administrator? If not, you have a user account, not admin.

Withheld hosting access is a lock-in tactic, not an oversight. In a Whirlpool thread about cPanel access a client found their design company had never given them cPanel or FTP, so every small fix went back through the agency and got billed. One poster’s verdict: “If they do this, run! Run fast!” The ending is the encouraging part. The design company turned up in the thread and said it had no issue handing over access and files.

DNS is last on the list and first in leverage. Whoever holds it can move your website and your email in minutes, so get DNS onto an account you control early.

What to do if they say no

  1. One written request with a deadline. List each item: registrant correction or transfer, EPP code, hosting login, an admin user, DNS access, files and backups. Give a date, stay factual, keep the email.
  2. Go direct to the registrar and the host. They are the parties who can act, and the threads above agree this is what works when the middle party stalls.
  3. Raise it with auDA if the registrant details on a .au name look wrong.
  4. Price the rebuild as a real option rather than a defeat.

When a rebuild beats a fight

If they hold the files but you hold the domain, a new site can be live long before a dispute resolves. Copy and photos you supplied are usually sitting on your own devices, and the Wayback Machine often holds enough of the old pages to rebuild the structure. A small site done properly can cost less than a few weeks of argument, and you finish owning everything. If it is a WordPress build stacked with plugins you never chose, our WordPress versus custom comparison covers what is worth carrying across.

Some of this is not a technical problem. Who owns the design files, what your contract says about termination and ownership, and whether unpaid invoices can be used as leverage are legal questions whose answers depend on your paperwork. We build websites, we are not a law firm, and we will not guess on your behalf. The Australian Small Business and Family Enterprise Ombudsman offers dispute support and low-cost mediation for businesses under 100 employees or under $5 million turnover, and the state and territory small business commissioners run similar services. Get advice before you send anything you cannot take back.

How to stop it happening again

The arrangement makes this possible, not the individual. Two rules cover most of it: the domain is registered to your business with an email you control as the registrant contact, and you hold logins to hosting, DNS and the CMS from day one. Ask any supplier both questions before you pay a deposit.

For transparency: Web Blend builds hand-coded sites on Astro, hosted on Cloudflare, with no proprietary builder and no lock-in term. The client holds the domain, the site is theirs, and if they move on they take it with them, as set out on our websites service page. We are not neutral, we sell the opposite arrangement. For more of what the forums say about dealing with agencies, see our tradie marketing roundup.