Logon
Nederlands, English
Donate to ASK-Solutions (the IRADIS Foundation)

Lost domain or online account access

Lost domain or online account access

A lost password is often straightforward. A lost account structure is not. Sometimes nobody remembers which registrar holds a domain, which email address is used for recovery or which former employee or supplier still has administrative rights.

It then helps to collect evidence and dependencies before requesting password resets everywhere at once. That prevents accidentally closing a recovery route that still works.

Questions on this page

How do I reconstruct where a domain or account is managed?

Search old invoices, bank statements, email, WHOIS or RDAP information where available, DNS data, browser passwords and documentation. Record the registrant, registrar, reseller, nameservers, technical contact and payment relationship separately.

The same principle is useful for platform accounts: who owns it, which login is used, which recovery email addresses or phone numbers exist and which other accounts have administrator rights?

Should I start a transfer immediately?

Not necessarily. First establish who holds the rights and which current access still works. Starting a transfer while the situation is unclear can introduce extra locks, waiting periods or verification problems.

If independent administration turns out not to be appropriate after recovery, Independence and technical continuity describes how a domain can, where appropriate, be placed under manual administration while keeping the rights holder as registrant.

What if an old supplier appears to be the owner?

Treat that as an ownership and evidence issue, not merely a password problem. Collect agreements, invoices, correspondence and information showing for whom the registration was made. Then contact the reseller, registrar or registry specifically through its recovery procedure.

After recovery, make it explicit who the registrant is, which contact details are used and who only carries out technical administration.

How do I prevent this happening again?

Use a recovery address suitable for the organisation, record the registrar and account ID, document two-factor authentication and recovery codes, and make sure one person is not the sole holder of access. Periodically check whether former employees or suppliers still have rights.

To practise accounts, password management and digital independence, the digital self-reliance workshop may be suitable.