Domain Names and Business Email

Your domain name is the single most valuable digital asset your business owns, and it is routinely registered by whoever built the first website, in their own account, and then forgotten about for a decade. That arrangement works perfectly until the day it does not.

This guide covers how domains and business email actually work, the ownership question that catches people out, the records that make email arrive, and the small number of decisions worth getting right.

Who actually owns your domain

This is the most important paragraph in this article. Log in to your domain registrar today and confirm that the account is in your business’s name, with your email address, and that you have the credentials.

A very large number of small businesses cannot do this, because the domain sits in an account belonging to a designer, an agency, or a relative who helped out years ago. Everything works fine until that person becomes unreachable, changes business, or simply stops paying attention to a renewal notice going to an address nobody reads.

Recovering a domain from an unresponsive third party ranges from tedious to impossible. Recovering one that has expired and been re-registered by somebody else is usually impossible. Meanwhile your website, your email and everything printed with your address stop working.

Domain, hosting and email are separate

These three services are frequently bought together and they are not the same thing. Your domain is the address. Hosting is where the website lives. Email is a separate service that happens to use the same domain.

There is a case for convenience in keeping them together, and for most businesses it is outweighed by resilience. A hosting outage should not take your email down, and moving your website should not require migrating mailboxes at the same time.

DNS in plain language

DNS is the system that translates your domain name into the addresses of the servers that actually do things. Your DNS records are a small list, held at your registrar or a DNS provider, and each entry directs a particular kind of traffic.

The ones a small business owner encounters: A records, which point your domain at your web server. CNAME records, which point a subdomain at another name. MX records, which direct email to your mail provider. And TXT records, which hold verification and email authentication information.

Changes take time to propagate, from minutes to a day depending on settings. This is why a website appears to work for some people and not others immediately after a change, which alarms business owners who assume something is broken.

Keep a record of your DNS configuration somewhere outside the registrar. If you ever need to rebuild it, or move to a different DNS provider, having the previous configuration written down turns an anxious hour into a five minute task.

Setting up business email

Business email means addresses at your own domain rather than a free consumer service. It is not primarily about appearances, although a consumer address on a quote does cost credibility. It is about control, deliverability and continuity.

Use a dedicated provider rather than the mailbox bundled with hosting. The mainstream business email services cost a modest amount per user per month, have far better deliverability, include reliable spam filtering, and keep working regardless of what happens to your website.

1. Choose a provider and buy one mailbox per person who needs one. Avoid one shared mailbox for a growing team.
2. Verify domain ownership, usually by adding a TXT record at your registrar.
3. Point MX records at the provider, which directs incoming mail to them.
4. Add the authentication records that prove your mail is legitimate. These are the ones that determine whether you land in the inbox.
5. Use aliases for role addresses such as info or accounts, rather than paying for separate mailboxes.
6. Set up an admin account owned by the business, not by an individual who may leave.

That final point repeats the ownership theme deliberately. A business whose email administration sits under a departed employee’s personal account has the same exposure as one whose domain sits in a former developer’s.

The records that make email arrive

Three DNS records determine whether your email reaches inboxes or spam folders, and most small businesses have never configured them. Mail providers increasingly treat their absence as a signal that a message may not be legitimate.

SPF states which servers are permitted to send email using your domain. DKIM adds a cryptographic signature proving a message genuinely came from you and was not altered. DMARC tells receiving servers what to do when a message fails those checks, and can report back on attempts to spoof your domain.

Your email provider will supply the exact values and step-by-step instructions. This is a one-off task of perhaps twenty minutes, and it is the single most effective thing a small business can do about email landing in spam.

“Most small businesses investigating why their emails go to spam are looking at their subject lines. The answer is almost always three DNS records nobody added.”

If you send marketing email or newsletters through a separate platform, that platform needs authorising too. Otherwise your newsletters fail the checks your ordinary email passes, which is a common and confusing situation.

Choosing a domain name

If you are choosing rather than inheriting, a small number of principles hold up. Short beats clever. Easy to say aloud beats keyword-stuffed. And it needs to survive being read over the phone in a noisy room, which rules out most hyphens and creative spellings.

On extensions, .ca signals a Canadian business and is genuinely useful for a locally-serving company. A .com is the global default and the one people type by habit. Where both are available and affordable, registering both and redirecting one is cheap insurance.

Check for existing trademarks and for the name being confusingly similar to an established business before committing, and check social handle availability at the same time. Discovering a conflict after printing signage is expensive.

Protecting the asset

Domain loss is almost always administrative rather than malicious. The registration lapses because a renewal notice went to an old address, or because a card expired, and by the time anyone notices the name has entered a redemption period with a substantial recovery fee.

That second item is worth explaining. If your registrar sends renewal notices to an address on the domain you are renewing, and the domain lapses, the notices about the lapse go to an address that no longer works. Use an independent address.

Moving a domain safely

Transferring a domain between registrars is routine and it has rules. Domains generally cannot be transferred within sixty days of registration or of a previous transfer, they must be unlocked, and you need an authorisation code from the current registrar.

Record your DNS configuration before starting, because transfers sometimes reset records to the new registrar’s defaults. Reconstructing MX records from memory while email is down is a bad afternoon that a screenshot prevents.

Do not let a domain get close to expiry before transferring. Transfers take days, and attempting one in the final week is how a straightforward administrative task turns into a recovery operation.

Choosing a domain extension

The part after the dot carries meaning, and the meaning is mostly about signalling rather than technology. Search engines do not favour one extension over another as a general rule, but people do, and people are your customers.

A practical approach for a local business is to register the country extension and the .com if you can, use one consistently everywhere, and redirect the other to it. Consistency matters more than which one you pick, because a business that appears as three slightly different addresses across its listings, signage and email is diluting exactly the recognition it is trying to build.

Choosing where to register

A registrar is the company that holds your domain registration. The differences between them are not exciting, and they matter at exactly two moments: when something goes wrong, and when you want to leave.

1. Transparent renewal pricing. The introductory rate is irrelevant. Ask what year two costs.
2. Free or cheap privacy protection, which keeps your personal contact details out of the public registration record. Some registrars charge annually for this and some include it.
3. Two-factor authentication on the account, and a registrar lock to prevent unauthorised transfers. Both should be standard.
4. Straightforward DNS management with a usable interface, because you will need it when setting up email.
5. No obstruction when you leave. Getting an authorisation code should take minutes, not a support argument.
6. Support that exists. Domain problems are urgent by nature, because the whole business is offline while they persist.
7. Separate from your hosting, ideally. Keeping domain, hosting and email with three different providers means no single account compromise or billing dispute takes everything down at once.

Variants, www, and redirects

Once you have a primary domain, a few technical decisions determine whether visitors reliably reach you. None are difficult and all are commonly left half-finished.

1. Pick www or no-www and enforce it. Both should work, but one should redirect to the other. Having both resolve independently splits your search signals and can create duplicate content.
2. Force HTTPS everywhere. The insecure version should redirect to the secure one, site-wide, not just on the homepage.
3. Register obvious misspellings sparingly. One or two common typos of a hard-to-spell name are worth it. Buying twenty variants is a subscription to nothing.
4. Redirect variants properly, using a permanent redirect to the equivalent page rather than dumping everything on the homepage.
5. Keep old domains alive after a rebrand. If you have changed name, hold the old domain and redirect it for years, not months. Links, listings and printed material persist far longer than you expect.
6. Do not run duplicate sites on multiple domains. One site, one canonical address, everything else redirecting to it.

Moving email without losing anything

Changing email provider is the part of this that frightens people, reasonably, because email is where the business actually lives. It is manageable with a sequence.

1. Set up the new provider first and create every mailbox, alias and group before touching anything live.
2. Lower the time to live on your mail records a day or two in advance so the change propagates quickly when you make it.
3. Import existing mail into the new mailboxes using the provider’s migration tool while the old system is still receiving. Most providers have one and it usually works well.
4. Switch the mail records at a quiet moment, typically an evening or weekend.
5. Keep the old mailboxes running for a fortnight, because a small amount of mail will continue arriving there while records propagate.
6. Re-check your authentication records after the switch, since a provider change means the records naming who may send on your behalf must change too.
7. Test thoroughly: send and receive from outside, check that forms on your website still deliver, and confirm anything automated such as invoices or booking confirmations is arriving.

Mailboxes, aliases and shared addresses

How you structure addresses matters more as soon as there is more than one person, and restructuring later means updating everything you ever printed.

What happens if a domain expires

Domains do not simply switch off on the expiry date, and understanding the stages is useful because the recovery cost rises sharply at each one.

1. Expiry. The domain stops resolving. Website and email both go down, usually within hours, and often on a weekend.
2. Grace period. A window during which you can renew at the normal price. This is where most recoveries happen, and it is short.
3. Redemption period. Recovery is still possible but typically at a substantially higher fee, and it may take days to restore.
4. Pending deletion. No recovery. The domain is queued for release.
5. Public release. Anyone can register it, and names with any history are frequently picked up immediately by automated buyers who will then offer to sell it back.

Going further on email security

Once the basic sending records are in place, two additional steps meaningfully reduce the chance of someone impersonating your business, which is worth doing for any organisation that invoices customers or handles payments.

The first is moving your policy from monitoring to enforcement. Authentication records can be published in a mode that simply reports on failures, which is the right place to start, and then tightened so that receiving servers actively reject mail that fails the checks. Skipping the reporting stage risks blocking your own legitimate mail from a service you had forgotten about, so the sequence matters more than the speed.

The second is auditing everything that sends on your behalf. Most businesses have more of these than they realise: the website contact form, an invoicing tool, a booking system, an email marketing platform, a customer support desk, an accounting package. Each one needs to be authorised in your records, and each one is a potential gap. Making a list of them once, and reviewing it when you add a new tool, is the whole discipline.

Domain and email mistakes

1. Registering the domain in a contractor’s name. The single most damaging one, and the most common. Every account should be in the business’s name with a business email address you control.
2. Using a personal email as the registrar contact. Renewal notices and transfer approvals go there. If it is a former employee’s address, you have a problem waiting.
3. Letting auto-renew lapse because a card expired. Check it annually alongside your other renewals.
4. Running business email on a free personal account, which costs you credibility on every message you send.
5. Skipping the sending authentication records, then wondering why invoices land in spam.
6. Keeping domain, hosting and email all with one provider, so one billing dispute takes down everything at once.
7. Choosing a name nobody can spell aloud. If you cannot say it over the phone without spelling it twice, it will cost you traffic forever.
8. Abandoning an old domain after a rebrand, losing years of accumulated links and printed references.

What to do this week

Three tasks, none of which takes long. First, log into your registrar and confirm three things: the account is in your business name, auto-renew is on, and the payment card has not expired. Second, send an email from your business address to a free webmail account you own and check whether it arrives in the inbox or the spam folder, because that single test tells you whether your sending authentication is working. Third, make a list of every service that sends email using your domain, including your website contact form, and check that each one is authorised.

If any of those three surfaces a problem, fix it before doing anything else on your website. A domain that lapses or email that silently fails to deliver undoes every other improvement you could make, because both of them stop customers reaching you at all. Everything in this guide is downstream of those three facts being true.

One last thing

A domain name and a business email address are the two smallest line items on most small business budgets and the two with the greatest capacity to take everything else down. They are also the two most likely to be registered in somebody else’s name, renewed on a card that expired, or configured once by a person who has since left. An hour spent confirming that you own them, control them and can prove it is the best-value hour available in running a website.

The short version

Own the domain in your business name, keep email away from your web host, publish the sending records that stop your invoices landing in spam, enforce one address with HTTPS, and set a reminder before renewal. Five things, one afternoon, and they protect every other investment you make online.

Frequently asked questions