IT

Domains, DNS and hosting explained: what a business owner must control

Domains, DNS and hosting explained for business owners: who should hold each account, what each DNS record does, how transfers and renewals work, and a handover checklist.

ESTASOFT
10 min read
A list of DNS record types next to a registrar lock switch
On this page
    On this page

      This guide is for owners and managers whose company website or online store runs on a domain they do not fully control. You will learn how a domain, DNS and hosting differ, who should hold each account, which DNS records matter, and how to hand over control safely. We read the sources listed at the end on 30 October 2026.

      This is general information, not legal, tax or professional advice. Contracts with registrars and agencies differ by country, so check with a qualified adviser for your country if ownership is in dispute. DNS details change, so treat the values below as examples and copy the current ones from your provider.

      Domain, DNS and hosting are three different jobs

      • The domain registration is your right to use a name for a set period, bought through a registrar. ICANN says a registrant is the individual or entity that registers the name, and that the registrant enters into a contract with a registrar.
      • DNS is the set of records that tell the internet where your name points: your website, your email and your verification codes. The records sit on name servers, which can be at your registrar or at another provider.
      • Hosting is the service that runs the site. On Shopify, Shopify hosts the store. With self-hosted WordPress, you or your agency choose a host.

      When you connect a third-party domain to Shopify, you still log in to your domain provider to manage and renew it, and Shopify Support cannot log in there for you, even with your permission.

      Who should own the domain

      The business should be the registrant. If an agency, a freelancer or an employee registers the name in their own name, they hold the contract, and you depend on their goodwill. ICANN says registrants are entitled to information from their registrar about registering, managing, transferring, renewing and restoring a name.

      Register in the company's legal name, with a company address. Log in to the registrar with a mailbox on a different domain from the one you protect, as Shopify's transfer guide also advises.

      DNS records in plain words

      • A record. Points a name to an IPv4 address. Shopify's manual connection page lists 23.227.38.65 for the root domain.
      • AAAA record. The same job for an IPv6 address.
      • CNAME record. Makes one name an alias of another. Shopify asks for the www name to point to shops.myshopify.com. RFC 1034 adds that if a CNAME exists at a name, no other data should be present there.
      • MX record. Tells other mail servers where to deliver email for your domain. Your email provider gives you the values.
      • TXT record. Holds descriptive text, such as proof and rules. Google Search Console accepts a TXT record, or a CNAME, to verify a domain property.
      • NS record. Names the servers that answer for your domain. Shopify advises keeping your provider's default name servers unless you manage DNS elsewhere, because wrong custom ones can cause connection and email problems.

      These one-line definitions follow RFC 1034 and RFC 1035. At the time of writing (30 October 2026), Shopify also says a domain can have only one A record and one www CNAME, and does not support third-party proxies. Copy the values from your own Shopify admin, because they can change.

      TTL and waiting for changes

      TTL means "time to live". RFC 1035 defines it as the time interval that a record may be cached before the source should be consulted again. A long TTL means a change can take longer to reach everyone.

      • For a hosting move that keeps the same URLs, Google advises lowering the TTL to a few hours at least a week before the move, and keeping the old host until your logs show no more traffic to it.
      • Shopify says a connected domain might take up to 48 hours to be fully live, and that DNS changes usually take effect within two hours but can take up to two days.
      • Google says a manually added verification record can take up to two or three days to be served.

      Before you change anything, export or screenshot every record. Our article on redesigning without losing search traffic shows how a hosting move fits a larger plan.

      Registrar lock, transfers and renewals

      A registrar lock blocks transfers to another provider. Keep it on, and turn it off only when you want to move the name. ICANN's transfer policy calls the standard lock status ClientTransferProhibited. If you have no way to remove it yourself, the registrar must remove it within five calendar days of your request. Shopify's transfer guide shows typical rules:

      • Wait 60 days after registering the domain. Shopify attributes this to ICANN, whose transfer policy lets a registrar deny a transfer requested within 60 days of creation.
      • Turn the lock off, get an authorization code and approve the transfer by email. Keep the lock off until it finishes.
      • A transfer into Shopify can take up to 20 days. Its table shows 5 days for .com and .net, and 15 days for some extensions, such as .nz and .pl.
      • The domain must be renewed for one year as part of the transfer. Shopify does not copy custom DNS records, so save them first.
      • Extensions such as .co.uk and .de cannot be transferred to Shopify, but you can connect them.

      For renewals, put the expiry date in two calendars, turn on auto-renew and keep the contact email current.

      Country domains: rules differ

      Country domains such as .iq, .ae, .sa, .uk, .ca and .eu are run by registries that set their own eligibility rules. Read the current rules on the registry's own site, not a reseller's summary. At the time of writing (30 October 2026), we could confirm this much:

      • .ca. CIRA's Canadian Presence Requirements (version 1.3) allow only listed groups to hold a .ca name, such as Canadian citizens, permanent residents and corporations under Canadian law. A federally registered trademark owner may register a name with the exact word component of that mark. A company with no Canadian link may not qualify.
      • .eu. EURid's rules page lists an EU citizen wherever they live, a non-EU citizen who is a resident of an EU Member State, and an undertaking or organization established in the EU.
      • .sa. The Saudi Domain Names Registration Regulations on nic.sa (version 5.0, February 2024) limit registration services to an entity located in Saudi Arabia, a person with Saudi nationality or Premium Residency, an entity registered or licensed by a Saudi authority, or the owner of a trademark or trade name registered there.
      • .uk. Nominet's rules accept compliant applications first come, first served, with extra criteria for some endings (.me.uk for natural persons, .ltd.uk and .plc.uk for incorporated companies). A new .UK Registration Policy (version 2026-03) states an effective date of 9 February 2027, so check which rules apply when you register.
      • .iq. IANA lists Iraq's Communications and Media Commission (CMC) as the sponsoring organization. We could not open published eligibility rules, so ask the CMC or your registrar.
      • .ae. WIPO's page on .ae describes registration as unrestricted and names the .aeDA as the registry. We could not open the .aeDA's own policy, so confirm the current rules for your ending.

      For search, Google says a country-code domain is a strong signal of the country you serve, but it can target only one country. Google treats .eu, .asia and some country-code domains, such as .io, .co, .me and .tv, as generic. Ask the registry: Who may register? Is a local presence or document needed? Can I transfer the name later?

      Hosting types in one minute

      • Shared hosting. Many sites share one server. It usually gives you the least control.
      • VPS. A private slice of a server, with more control and more to manage.
      • Cloud hosting. Resources spread over several machines, with more setup.
      • Managed hosting. The provider runs updates and server tasks for a platform such as WordPress.
      • Platform hosting. The platform, such as Shopify, hosts the site.

      These are general descriptions. Providers use the terms differently, so ask what each plan includes.

      Match the host to the platform. At the time of writing (30 October 2026), WordPress.org recommends PHP 8.3 or greater, MariaDB 10.11 or greater or MySQL 8.0 or greater, and HTTPS support, and warns that older versions have reached end of life and may expose a site to security vulnerabilities. For store requirements, see WooCommerce hosting and speed.

      Reliability matters for search too: Google says 5xx server errors slow its crawlers, and URLs that keep returning them are eventually dropped.

      Control and handover checklist

      • The company is the registrant, with a company address and a company-controlled login.
      • The registrar login uses a mailbox on a different domain and the strongest sign-in protection offered.
      • Two named people can recover the account, and a written list says who they are.
      • The registrar lock is on, and auto-renew is on with a payment method that does not expire soon.
      • A copy of all DNS records is saved outside the DNS provider.
      • You know who hosts the site, who pays for it, and who can log in.
      • Email records (MX, SPF, DKIM and DMARC) are documented. Our SPF, DKIM and DMARC guide explains the email TXT records.
      • The agency hands over every login at project end, confirmed in writing.

      Mistakes to avoid

      • Letting an agency register the domain in its own name.
      • Changing name servers without copying MX and TXT records first.
      • Deleting the Search Console verification record, which must stay for the property to stay verified.
      • Letting auto-renew fail because a payment card expired.

      Questions owners ask

      Who owns my domain if my agency bought it?

      Check who is listed as the registrant and which registrar account holds the domain. ICANN defines the registrant as whoever registers the name, so ownership usually follows the registration details and the contract. Ask in writing for a transfer to your own account, and take legal advice if the agency refuses.

      How long do DNS changes take?

      It depends on the TTL and on caches that hold the old answer. Shopify says a connected domain usually updates within two hours and can take up to two days.

      Should I connect my domain to Shopify or transfer it?

      Connecting keeps the domain at your current provider, and transferring moves registrar management to Shopify. Shopify suggests connecting if your email or DNS records are tied to your provider, your extension cannot transfer, or you want the store live quickly.

      Need a hand?

      If you are planning a website, our web development page says we can set up hosting or use yours. You can send a short brief on the contact page, and we will reply with next steps. For ongoing upkeep, our website maintenance checklist shows what to review each month.

      Sources

      Written by
      ESTASOFT

      Need help with a project?

      Share a short brief. We reply with next steps.

      Book a call

      30 minutes. Free.

      Tell us about your project and we will suggest a time.

      Or email us at info@estasoft.com