You wouldn't buy a car and not know whether you owned it. You wouldn't let your mechanic keep the registration in their name, store the spare key, and never tell you where the engine was serviced. You'd want to know what you were driving, where the important bits were, and how to get to them if something went wrong.
Your website works the same way. There's a handful of systems underneath it that keep everything running: domain, hosting, DNS, SSL, email, backups. Most business owners have never looked at any of them. Someone set it all up once, probably years ago, and it's been humming along in the background ever since.
That's fine. Until the mechanic moves interstate and you realise you can't open the bonnet yourself.
This is the guide I wish I'd been able to hand every client on day one.
Domain name
Your domain is your address on the internet. It's the bit people type into a browser to find you, and it's the single most important thing you should own outright.
I've lost count of how many clients have come to me with a domain registered in their previous web designer's name. Sometimes it's bundled into a hosting account they can't access, sometimes it's registered to an ABN that isn't theirs. When that relationship ends, you're stuck. I've watched people lose a domain they'd been trading under for years because someone else controlled it and wouldn't hand it over. Or couldn't be found to hand it over.
I handle domain registration for my clients, but the domain is always registered in their name. That's how it should work. If your current web designer holds your domain and you don't have the login details, ask for them today. If they won't give them to you, that tells you everything you need to know.
Set it to auto-renew. A lapsed domain can be picked up by anyone, and the process of recovering one ranges from expensive to impossible depending on how fast someone else moves.
Hosting
Hosting is where your website actually lives. The files, the database, the images. You're renting space on a server, and the quality of that server determines how fast your site loads, how often it goes down, and how well it handles traffic.
Think of it like parking your car in a garage versus leaving it on the street. Both technically work. One of them is going to give you fewer problems.
I offer two hosting options. A cost-effective international one that does the job well for most small sites, and an Australian-hosted option that costs more but gives you faster local load times and Australian-based support when something goes sideways. Which one makes sense depends on your site and your budget.
The hosts I'd steer you away from are the big international ones that advertise heavily and offer hosting for almost nothing. The price is low because the servers are overcrowded and the support is slow. Cheap parking, but your car gets dinged a lot.
DNS
DNS stands for Domain Name System. It's the system that connects your domain name to your hosting. When someone types your web address, DNS tells the internet where to actually find your site.
You mostly don't need to think about this. Where it gets messy is when your domain is registered in one place, your hosting is somewhere else, your email runs through a third provider, and nobody wrote down how it all connects. One wrong change and your email stops working, or your site vanishes, or both.
Know where your DNS is managed. If you're using Cloudflare (which I set up for a lot of clients), your DNS lives there instead of at your domain registrar. That's fine, as long as someone has documented it.
SSL certificate
SSL is what puts the padlock in your browser bar and makes your site load as https instead of http. It encrypts the connection between your visitor and your server. Without it, browsers throw up a security warning and most people leave before they even see your homepage.
I manage SSL certificates for my clients as part of their hosting and maintenance. The thing most people don't realise is that SSL certificates expire, and even when renewal is set to happen automatically, it occasionally fails. A DNS change, a server migration, a setting that got bumped somewhere. When it breaks, your site looks unsafe to every visitor until someone fixes it. I monitor this across all my client sites because a broken SSL is one of those problems that can sit there for days doing damage before anyone notices it.
Your business email. The one that matches your domain. hello@yourbusiness.com.au rather than yourbusiness@gmail.com.
This is the digital equivalent of having your business name on the side of your van versus a handwritten sign in the window. Both get the message across. One of them builds more trust before you've even said hello.
There are two ways to set this up. Your hosting usually includes email at no extra cost, which is the simplest option. The trade-off is that hosted email is more likely to land in spam filters, and the storage is basic. For a sole trader sending a few emails a week, it works fine.
Google Workspace or Microsoft Outlook cost a monthly fee per user but give you better spam filtering, more storage, and the full suite of tools those platforms offer. If email is central to how you run your business, the monthly cost tends to pay for itself in reliability alone.
Whatever you choose, make sure you hold the login. Your email should never be something only your web designer can access.
Website platform
This is the engine. The software your website runs on.
I build on WordPress. It's open-source, which means you own your site and can move it to any host, any time. About 40% of websites on the internet run on WordPress, and that's not an accident. The ecosystem of developers, plugins, and support around it is enormous.
Within WordPress, I use Divi or Elementor as page builders. These give you a visual editor so you can update your own text, swap an image, or add a new staff member without writing code or calling me. Your website should be something you can maintain between professional updates. You shouldn't need to lodge a support ticket to fix a typo.
Some sites don't need that. A simple service-based business with a few static pages and a contact form, where nothing changes from month to month, doesn't need a CMS at all. CMS stands for Content Management System — it's the backend dashboard where you log in to edit things. WordPress is a CMS. If you don't need that dashboard, I can build a headless site using just HTML and JavaScript. Faster, more secure, cheaper to host. Fewer moving parts.
Squarespace and Wix exist too. They're popular because they're easy to get started with, but they're closed systems. Your site lives on their servers, built with their tools, and if you want to leave, you're starting over. For some people that's an acceptable trade-off. But the question I'd always ask is: can you take your car to a different mechanic if you need to?
Backups
If your server fails, gets hacked, or an update breaks something, a recent backup is the difference between a quick restore and rebuilding from scratch. There is no middle ground here.
I build backups into every site. Daily, automated, stored offsite so there's always a clean copy that isn't sitting on the same server as the problem. Belt and braces.
If someone else manages your site, ask them where the backups are stored and how far back they go. If they can't answer that clearly, sort it out before you need to find out the hard way.
Google Business Profile
This sits slightly outside the technical stack, but I'm including it because for local businesses it's often the first impression you make. Your Google Business Profile is the panel that shows up on the right side of Google when someone searches your business name or your service in their area. Address, phone number, hours, reviews, photos.
It's free from Google. I set these up for my clients because the verification process has a few steps to it and the optimisation details — the categories, the description, the photo quality — make a real difference to whether you show up for the right searches.
Make sure yours is claimed and that you control the account. I've seen businesses with profiles showing an old address or a disconnected phone number because someone else set it up years ago and never handed over access. Not a great first impression.
Analytics
You should know how people find your site. Google Analytics and Google Search Console are both free, and between them they tell you where your traffic comes from, what people do when they arrive, and whether Google is having trouble reading your pages.
Worth setting up even if you never check them. When you need the data — for a redesign, a marketing decision, or just to understand whether your site is actually doing its job — it's there waiting for you.
Your web designer should set both of these up as part of any site build. If they haven't, ask.
Why this matters
All of this is boring until it isn't. I've sat with business owners who lost access to their own domain because it was registered in someone else's name. Last year I restored a site from backup after a plugin update broke everything on a Friday afternoon. Undocumented DNS records come up more often than anyone expects.
You don't need to understand how every piece works. You just need to know that you own your car, you know where it's parked, and you can take it to a different mechanic if you ever need to.
See how I handle hosting and managed care for client sites →