My Web Developer Disappeared: How to Get Your Website Back

If your web developer has disappeared, your website is almost never gone. It's locked behind accounts someone else controls. The way back is to work out who owns the domain name, who pays for the hosting, and who holds the WordPress admin login, then recover each one in that order, using your proof of payment and the official recovery routes at the registrar and host. Most owners get everything back within a few days to a few weeks, and a working site usually keeps running while you do it.

I'm Rustam from Frame the Pixel, a web design and WordPress maintenance studio in Kuala Lumpur. I take over sites from developers who have moved on, closed up, or simply stopped answering, so I've seen most versions of this. Here is the order I'd work in.

First, don't panic and don't break anything

A silent developer is stressful, but a live site is still doing its job. Before you change anything:

• Don't let anything expire. Find out when the domain and hosting renew. An expired domain is the one thing that can turn a nuisance into a real loss.
• Don't sign up for new hosting and rebuild yet. You may be able to keep everything you already paid for.
• Give the developer one clear, written chance. One polite email and one message on whatever channel you used, asking for the logins by a set date. Keep copies. Sometimes people are ill or overwhelmed, and a friendly nudge is all it takes.

Step 1: Gather proof that the website is yours

Before you contact anyone, collect what proves you're the owner. Registrars and hosts will ask for it.

• Invoices or receipts for the website, domain and hosting.
• Bank or card statements showing those payments.
• Any contract or quote that mentions the site.
• Emails where the developer confirms work for your business.
• Your business registration documents (SSM in Malaysia, Companies House in the UK).
• Every email address you might have used to sign up for anything.

Step 2: Find out who controls the domain

The domain is the most important asset. Whoever controls it controls where your website and often your email point.

1. Look the domain up on ICANN Lookup. It shows the registrar (the company the domain is registered with) and the expiry date. Owner details are often hidden for privacy, which is normal.
2. For .my domains, the registry is MYNIC, and you'll deal with the reseller or registrar listed for the domain.
3. Contact the registrar's support. Explain that you're the business the domain was registered for and ask how to recover access. If the domain is in your name or your company's name, this is usually straightforward. If it's in the developer's name, it's slower but still possible with your proof.
4. Once you have access, turn on two factor authentication and set the registrant email to an address you control.

ICANN's transfer policy explains how transfers and the registrant contact work for generic domains like .com, which helps if you need to move the domain to your own account later.

Step 3: Find out who controls the hosting

Next, find where the website files actually live.

• Check your statements. If you've been paying a host directly, you own the account, and the host can reset access for you.
• If the developer paid the host and billed you, the account is in their name. Contact the host anyway. Some will help when you can show the site belongs to your business. Others will only deal with the account holder.
• If the host won't help, you may not need them. As long as the site is live, it can often be copied from the WordPress side once you're back in, and moved to hosting in your name.

Not sure who the host is? Free lookup tools that show a domain's DNS and IP address usually reveal the hosting company. A maintainer can do this for you in a few minutes.

Step 4: Get back into WordPress

Once you control the hosting, getting into WordPress is usually the easy part.

• Try the "Lost your password?" link on your login page with every email you might have used. WordPress explains the ways to reset a password, including through phpMyAdmin if email doesn't work.
• With hosting access, a maintainer can create a new administrator account safely through the database or WP-CLI.
• Once you're in, go to Users and review every account. The Users screen shows roles. Remove or downgrade any admin you don't recognise, and change passwords on the rest.

Step 5: Recover everything else

The domain, hosting and WordPress are the big three. Then there's a longer tail:

• Business email. Often tied to the domain or the hosting. Check where your mail actually runs.
• Premium plugin and theme licences. Elementor Pro, page builder add-ons, form and backup plugins. If they're on the developer's account, you'll need new licences in your name before the old ones lapse.
• Google accounts. Search Console, Analytics, Business Profile and Tag Manager. Ask Google support with your proof, or add yourself through a verification route once you have DNS or site access.
• CDN and DNS services like Cloudflare, if used.
• Payment gateways for stores. These are usually in your name already, but check the API keys in the site.

My WordPress site takeover checklist has the full list of accounts I check when I inherit a site.

Step 6: Secure the site once you're back in

When a site has been unattended, I assume it needs a health check.

• Take a full backup and store it somewhere you control.
• Update WordPress, the theme and plugins, on a staging copy first if the site is important.
• Scan for malware and unknown admin users.
• Check the PHP version and the hosting plan.
• Write down every login in a password manager that belongs to the business, not a person.

If the site was neglected for a long time, my post on signs your WordPress site needs maintenance helps you spot what's been missed. If you find signs of a hack, follow what to do in the first hour after a WordPress hack.

What if you can't get it back?

Occasionally the domain is lost or the site is already offline. Even then:

• An archived copy of your pages may exist on the Internet Archive, which helps a rebuild keep your wording.
• Your Google Business Profile and social accounts still carry your reputation.
• A new domain can be redirected from any old domains you still own.

A rebuild is the last resort, not the first. If it does come to that, my guide on how to choose a web design company covers the questions that stop this happening twice.

How to talk to the developer, if they reappear

Sometimes the developer does reply, weeks later. Keep it practical rather than angry. Ask for, in writing:

• Every login, or for the accounts to be transferred to your name.
• A full backup of the site files and database.
• Licence keys for premium plugins and themes, or confirmation of which ones are on their account.
• Any custom code they wrote that isn't in the site itself.

Then change every password once you have access.

How to make sure this never happens again

• Every account (domain, hosting, licences, Google) is in the business's name, paid with the business's card.
• Your developer or maintainer gets their own login, never your main one.
• A shared password manager or a written handover document lists every account.
• A maintenance agreement states that you own the site and all accounts.

How Frame the Pixel can help

Recovering access and taking over abandoned WordPress sites is a regular part of my website maintenance work. I'll work out what you own, deal with the registrar and host alongside you, and get the site backed up, updated and secure. I'm based in Kuala Lumpur and work with clients in Malaysia, the UK, Europe and elsewhere, 9am to 5pm GMT+8. Contact me here or email contact@framethepixel.com with your domain name, and I'll tell you what I can see from the outside.

FAQ

Who legally owns my website if the developer registered it?

It depends on your contract and local law, and I'm not a lawyer. In practice, registrars and hosts look at whose name is on the account and what proof of payment you have. If there's a dispute, get legal advice.

Can my developer take my website offline?

If they control the hosting or domain, technically yes. That's why recovering the domain and hosting first matters, and why both should be in your business's name.

How long does it take to get a website back?

Where the accounts are already in your name, often a day or two. Where they're in the developer's name, it can take a few weeks of back and forth with the registrar or host.

Will I lose my Google rankings?

Not if the site stays online at the same domain. Rankings are mostly at risk if the domain expires or the site goes down for a long time.

Do I need to rebuild the site?

Usually not. Most recovered sites can be updated and kept. A rebuild only makes sense if the site is lost, badly hacked, or no longer fits the business.