Own the keys.

A website rests on three technical pillars: the domain, the hosting and the SSL certificate. The owner does not need to know how to configure servers, but they absolutely need to know who owns the address, where the files are stored and when each service has to be renewed. Otherwise one day the site will simply stop loading, and getting access back may turn out to be hard.

Below is a plain explanation of each pillar and a list of things worth checking today.

How the domain, hosting and SSL differ

The domain is the site's address, the hosting is where its files and database are stored, and the SSL certificate protects the connection between the visitor and the server. These are three separate services, often bought from different companies and renewed on different dates.

Think of an office: the domain is the sign and the street address, the hosting is the premises itself, and the certificate is the lock on the door. You can move to other premises and keep the address, or you can lose the address even though the premises are paid for. That is why each element has to be controlled separately.

The domain: who really owns it

A domain belongs to whoever is listed as the domain administrator in the registrar's database. Not the person who paid for it, and not the person who built the site. If the domain is registered to an employee or a contractor, legally they are the ones who control it.

How to register a domain properly

Register the domain to your company or to yourself as the business owner, and give your own contact email, not the developer's personal mailbox. The domain registrar must be accredited in the relevant domain zone; for national zones, including the Cyrillic .RF zone, the zone coordinator publishes a list of accredited companies. Keep the password to the registrar account yourself, even if an agency runs the site.

Renewing the domain

A domain is usually renewed once a year, and you can pay for several years at once. Turn on auto-renewal and make sure there is money in the account and that the mailbox receiving the reminders actually works. Once the term expires, the site stops loading, and the previous administrator has a limited window, about a month, to renew the address. After that the domain is released and anyone can register it, including a competitor.

If the domain is not registered to you

This is common with older sites. The fix is to transfer the administrator rights: registrars have a change-of-owner procedure, and it requires the consent of the current administrator. Do it while you are still on good terms with them.

Hosting: where the site lives

Hosting is the server that stores the site's files and database and responds to visitors. It determines loading speed, stability and security. It is chosen based on the load, the requirements of the CMS and the budget.

Speed and search

A slow server spoils the impression and holds back promotion. Google assesses speed through a set of page loading and stability metrics; for example, the main content of a page should load in no more than 2.5 seconds. If the hosting is slow to respond to requests, optimizing images and code helps only partly. A site's usability is made up of many small things, which we covered in our article on usability that doesn't catch the eye.

Hosting and the personal data law

If a site collects the names, phone numbers and email addresses of visitors from Russia, this data must be stored on servers in Russia. This is a requirement of the personal data law, so choosing foreign hosting for such sites is risky. Besides storage, the law requires a data processing policy and the visitor's consent, so it is worth reviewing your request forms together with a lawyer.

The SSL certificate: why you need it

An SSL certificate encrypts the data a visitor sends to the site: requests, phone numbers, payment information. Without it, browsers mark the site as not secure, and some people leave without submitting a request. This is just one of the reasons we discussed in our article on why a site exists but brings no leads.

Types of certificates

For most sites a free certificate is enough: it is issued for a short term and renewed automatically. Paid certificates with organization validation are needed by banks, large stores and services where confirming the legal entity matters. For an ordinary visitor there is no difference in encryption between them.

What to check after installation

Once the certificate is installed, all pages should open only over the secure protocol, and old addresses should redirect to the new ones. Images and scripts must also load over a secure connection, otherwise the browser will show the warning again. Separately, check that automatic renewal is actually set up.

What the site owner should keep under control

The owner should have access to everything related to the site and know the payment dates. This is not about distrusting the contractor; it is about making sure the business does not depend on a single person.

The minimum set worth keeping yourself:

• the login and password for the domain registrar account;
• access to the hosting control panel;
• access to the site's admin area with owner rights;
• access to the files and the database;
• the renewal dates for the domain, hosting and certificate.

It is convenient to keep this list in a secure password manager and update it every time you change contractors.

Backups

Most hosting providers make backups, but they are stored in the same place as the site. If the account is blocked or someone forgets to pay, the backups disappear too. Once a month, export a full copy of the files and the database to separate storage, and make a manual copy before any major changes.

Typical owner mistakes

The most common mistake is registering the domain and hosting to the developer and forgetting about it. While everything works, the problem is invisible, but when you change contractors or a conflict arises, the site effectively ends up in someone else's hands.

Here is what else comes up regularly:

1. Renewal reminders go to a former employee's mailbox.
2. The cheapest plan was chosen, and it cannot handle growing traffic.
3. The certificate is installed but does not renew automatically.
4. Corporate email on the domain runs on the same hosting and disappears along with it.

When it makes sense to hand everything to a contractor

If you do not have your own technical specialist, it is sensible to entrust the setup to the team that will keep running the site. The only important thing is that the domain and the access remain registered to you.

A good studio raises these questions itself when building a site: it helps choose hosting for the expected load, registers the domain to the client and sets up the certificate. Building a site from scratch is a convenient moment to do everything right from the start rather than fix it a few years later. If you are choosing a CMS, our breakdown of which CMS to choose for your site will help: the hosting requirements depend on it too.

What a turnkey project includes

When you decide to order a turnkey website, the work should include not only design and programming but also the technical side: registering or transferring the domain, choosing hosting, the certificate and backups. Clarify this before signing the contract. Turnkey website development that does not hand access over to the client is a reason to be wary.

How we handle the technical side

At epic name., website development always includes setting up the domain, hosting and SSL, and we hand all access over to the owner. We build websites for companies in Moscow and across Russia, from small business-card sites to complex projects, and we start every custom website with a clear technical plan.

If you want to order turnkey website development or find out what a turnkey site would cost for your task, take a look at the page describing turnkey website development and our approach to building a website. You can also leave a request there: we will discuss what turnkey website price fits your budget and advise whether it makes sense to order the full development or first put your current technical setup in order. The cost of a website depends on the scope of work, so we name it after a short brief, and the site can also be ordered in stages.