If the person who built your therapy website has retired, changed careers, stopped responding, or simply disappeared, start by securing access to your domain, hosting account, and website platform. Gather old invoices and account emails, identify who controls each service, and avoid changing DNS or canceling hosting until a qualified web professional has reviewed the setup. In many cases, the existing website can be recovered or transferred without rebuilding it.
It is an unsettling position to be in. Your website may still be bringing potential clients to your practice, but you are not sure who controls it, where it lives, or what will happen if something breaks.
The good news is that losing contact with your web designer does not automatically mean you have lost your website. The right next step is to identify the accounts involved, protect what is currently working, and make a careful decision about whether to recover, repair, transfer, or rebuild.
Do These Three Things First
- Do not cancel hosting, transfer the domain, or change DNS settings yet. Those changes can interrupt the website or your practice email.
- Search your email, invoices, contracts, and password manager for the names of your domain registrar, hosting provider, website platform, and former designer.
- Save a current copy of the information you can see. Record your website address, take screenshots of important pages, and note any visible problems.
You do not need to solve everything in one sitting. You are simply creating a clear picture of what exists and who controls it.
Understand the Four Pieces of Your Website
One reason this situation feels confusing is that several different services may be involved. They are related, but they are not interchangeable.
Domain registrar
Your domain registrar is the company where your web address is registered. It might be GoDaddy, Namecheap, Squarespace Domains, Cloudflare, or another provider. Controlling the domain is especially important because it determines where your web address points.
Hosting provider
Your hosting provider stores the website files and database and makes the site available online. The host may be different from the registrar. A WHOIS or DNS lookup can often identify your registrar and nameservers, but it does not always reveal the company that actually hosts the website.
Website platform
This is the software used to build and manage the site, such as WordPress, Squarespace, Wix, or another system. With WordPress, the platform login is often separate from the hosting login.
DNS
DNS is the set of records that connects your domain to your website, email, and other services. Changing it without first documenting the existing records can take down the website, interrupt email delivery, or both.
A web professional may also need administrator access inside WordPress or the website platform. That is separate from owning the registrar or hosting account.
Step 1: Gather What You Already Have
Search your inbox for your designer’s name, your domain, and terms such as hosting, domain registration, WordPress, website login, DNS, renewal, SSL, and invoice.
Look for:
- Design contracts and invoices
- Hosting or domain renewal receipts
- Account-confirmation emails
- Password-reset messages
- Shared login records
- Messages about a launch, migration, or DNS change
- Credit-card statements showing recurring website charges
Do not worry if you find only part of the picture. A company name, billing record, or old login page may be enough to identify the next step.
Step 2: Identify the Registrar, Host, and Platform
Start with the domain registrar. You can use ICANN Lookup to find public registration details. Depending on the domain’s privacy settings, the results may identify the registrar and nameservers without identifying the owner or the underlying web host.
Next, look at your billing records and old emails. Those are often more reliable than a public lookup for identifying the host.
You can usually recognize the platform by the login address or the way the site is built. A WordPress login often appears at yourdomain.com/wp-admin. Do not repeatedly guess passwords or install recovery tools. If you do not have access, document what you found and move to account recovery.
Step 3: Contact the Account Providers
If an account is in your name or paid with your business card, contact the provider and explain that you need to recover administrative access.
They may ask you to verify:
- The email address associated with the account
- Billing details
- A recent invoice number
- The last digits of the payment method
- Business ownership or identity information
Account recovery can be straightforward when you are the recognized account owner. It becomes more complicated when the former designer created the account in their own name, bundled multiple clients into one hosting account, or built the site on a proprietary platform. In those cases, gather documentation before making changes and ask a qualified professional to help you evaluate your options.
Step 4: Protect the Site Before Making Changes
Once you regain access, resist the urge to update everything immediately.
First:
- Create or confirm a complete website backup
- Record current DNS settings
- Check who owns and receives renewal notices for the domain
- Create a separate administrator login for the new web professional
- Confirm that the website and practice email are both working
- Review active plugins, themes, integrations, forms, and analytics
This gives you a safer starting point. A neglected WordPress site may contain years of pending updates, and installing them all at once without a backup or compatibility check can create new problems.
Step 5: Review What Is Working
Visit the website on a computer and phone. Test the contact form. Confirm that the address begins with https and that the browser does not show a security warning. Review the services, clinician information, fees, locations, scheduling links, and contact details.
Google PageSpeed Insights can help you identify performance and user-experience concerns, but it is not a complete website-health assessment. It cannot tell you whether backups work, whether forms reliably reach your inbox, whether your account ownership is secure, or whether hidden WordPress and DNS problems exist.
Decide Whether to Recover, Repair, Transfer, or Rebuild
Recover access
Choose this path when the website is functioning and the main problem is missing credentials or unclear ownership. The goal is to establish proper control without disturbing a site that is already working.
Repair the existing website
Repair may make sense when the platform is still supportable and the site needs focused work, such as software updates, form repairs, content corrections, security cleanup, or performance improvements.
Transfer the website
A transfer may be appropriate when the website itself is sound but needs to move into hosting and accounts that the practice controls. The transfer should be planned carefully so the site, domain, email, analytics, and forms continue working.
Rebuild the website
Rebuilding is usually the better investment when the site uses an unsupported or proprietary platform, has extensive technical debt, no longer reflects the practice, or would cost more to stabilize than to replace.
A Common Strong Roots Takeover Situation
A situation we see regularly begins with a therapist who can view the website but does not know who controls it. The domain is registered in one account, the site is hosted through the previous designer, and WordPress access is incomplete. The website may still look normal, which makes it tempting to start changing settings as soon as one login is recovered.
Our first step is to map the accounts and preserve what is working. Once domain ownership, hosting, DNS, backups, website access, forms, and analytics are understood, the practice can make a calm decision about repair or transfer. The most important part is sequencing the work correctly. Recovering one password is helpful, but understanding the whole setup is what prevents a second disruption.
Prevent the Same Problem in the Future
- Keep the domain and primary business accounts in the practice owner’s name.
- Use a business-controlled email address for account ownership and renewals.
- Give each contractor a separate login instead of sharing your primary credentials.
- Store credentials in a password manager.
- Keep reliable, restorable backups.
- Document the registrar, host, platform, DNS provider, analytics accounts, form service, and renewal dates.
- Make sure there is a clear process for ending a contractor relationship and transferring access.
The Federal Trade Commission’s small-business cybersecurity guidance also recommends controlling access, protecting accounts, and keeping software current.
You Can Get Back to Solid Ground
A missing designer can create a real access problem, but it does not automatically require a new website. Start by identifying the accounts, protect what is currently working, and make the technical decisions in the right order.
If you want experienced help untangling the setup, Strong Roots Web Design offers website hosting, website care, semi-custom websites, and fully custom website design for therapists and mental health practices.
