Lost Access to Your Website Code or Your Developer Has Disappeared: How to Regain Control
If you have lost access to your website code or your developer has disappeared, regain control in this order: the domain name, the hosting or cloud account, the source code repository, the app store developer accounts, then third-party services such as payments and email. Use each provider's official recovery process and your own business records to show the accounts are yours. Meanwhile, keep the domain renewed and the live site running, because the server may hold the only copy of your code.
Most of this is paperwork, not programming, and you can start today. Once you hold the accounts, a team that provides website and custom software development services can take over the technical side.
What does it usually mean when my developer disappears and I cannot reach my code?
It usually means the accounts your website depends on were opened in the developer's name or with the developer's email address, not that the website is gone. The site keeps running while the domain and hosting are paid for. The risk is that renewal notices go to an inbox you cannot read.
ICANN, the body that coordinates domain names, describes this case: a developer "may have registered the domain name using their own contact details", even if you paid them, and so may be listed as the registrant of record.
What can I safely check in about 10 minutes, and in what order?
Check the domain first, then hosting, code, app stores and other services, because each depends on the one before it. Only look and write things down; change nothing yet.
- Domain registrar. Search for your domain in the ICANN Lookup tool at lookup.icann.org to see the registrar and, if shown, the expiry date. Then search your email and card statements for that company's name.
- Hosting or cloud account. Find the hosting invoices and try to sign in. Use the "forgot password" link only with email addresses that belong to you or your company.
- Source code repository. Ask whether anyone in your company was ever invited to the code hosting account, for example a GitHub organization.
- App store developer accounts. Sign in to the Apple Developer site and Google Play Console and see whether you are the Account Holder (Apple) or account owner (Google Play), or only an invited user.
- Third-party services. List the payment processor, business email, analytics and SMS services, and check which address receives their receipts.
For each one, record the provider, the named owner, the login email, the renewal date and whether you can sign in.
How do I prove to a registrar or host that the domain or account is mine?
You prove it through the provider's own account recovery process, with documents that tie the account to your business. The provider decides what it accepts. ICANN's guidance is to check with the registrar who the registrant of record is, and it notes that you "may need to provide proof of your payment to the third-party/developer" to show you are the rightful holder.
Gather invoices that mention the domain or hosting, payment statements, the contract and company registration documents. Then contact the provider through the support page on its official website.
Moving a domain once you control it
To move a domain to another registrar you need a transfer code. ICANN states that the registrar must provide the AuthInfo code within five calendar days of your request. That rule covers generic domains such as .com; country-code domains such as .co.uk follow their own registry's rules.
App store and repository accounts
As of October 6, 2026, Apple says the current Account Holder can transfer the role to a team member with legal authority to bind the organization, and its page refers other cases to Apple Developer Support. On Google Play, the owner can transfer the account to an existing user after a 7-day hold, and developers who have lost owner access should contact its support team.
If the repository sits in the developer's personal account, send a written request for a full copy, including its history.
What can be recovered from a running website if the repository is lost?
If you can get into the hosting account, a developer can usually copy the deployed files and the database from the server, and for many websites that is a working copy of the application. On PHP sites, such as WordPress or Laravel sites, the files on the server are the source code itself.
Some things do not come back: the history of changes and unfinished work kept in the repository. Where the front end was bundled before upload, the server holds only built output, which runs but is hard to edit.
Without hosting access, you can save only what a browser sees: page text, images and layout, not the server-side code, database or admin area. Who owns the code is a separate question that depends on your contract and local law; this is not legal advice.
What should I not do while trying to get back in?
Do not guess passwords, use someone else's login, or pay anyone to break into an account, even one you paid for. It can lock the account and create legal problems of its own.
Do not let the domain expire. ICANN requires registrars to send two renewal reminders, about one month and one week before expiry, but they go to the registrant's contact details, which may be the developer's. ICANN describes a 30-day Redemption Grace Period in which a name can still be redeemed, after which it can be released to anyone. Ask the registrar how to keep the domain renewed while ownership is unresolved.
Do not cancel hosting, dispute card payments, delete anything or change settings until copies of the site exist.
When should I call a developer, and what does a new team need from me?
Call a developer as soon as you can sign in to the hosting or domain account, and immediately if the domain is close to expiry or the site is down. Copying files and databases off a server, changing DNS, moving hosting, replacing passwords and restoring backups are developer tasks. Have this ready:
- Your account inventory, with owner, login email and renewal date for each service.
- Every administrator login you hold, shared through a password manager, not email.
- Contracts, invoices and handover messages from the previous developer.
- Any copy of the code or database, such as zip files or old backups.
- A plain description of what the system does, what it connects to and what is broken.
How do I stop this from happening again?
Make your company the owner of every account and invite developers as users. Register the domain, hosting, repository and store accounts to a company email address that more than one person can read, and keep the logins and recovery codes in a password manager.
Keep two owners on the code. GitHub's documentation recommends that at least two people in each organization hold the owner role, because projects can become inaccessible if a sole owner is unreachable. Write the handover of code and credentials into the contract, and keep backups in an account you control.
Quick answers
Who controls my domain name if my developer registered it?
ICANN says a developer who registered a domain with their own contact details may be listed as the registrant of record even if you paid. You may need proof of payment to show the registrar you are the rightful holder.
Can I get my website code back without the repository?
With hosting access, a developer can usually copy the deployed files and database from the server, but the change history and the original source of any bundled parts cannot be recovered that way.
How long does a registrar have to give me a domain transfer code?
ICANN states that a registrar must provide the AuthInfo code within five calendar days of the registrant's request.
What happens if my domain expires while I am locked out?
Your website and email on that domain can stop working. ICANN describes a 30-day Redemption Grace Period in which a name can still be redeemed, after which it can be released for anyone to register.
Can I take over an Apple or Google Play developer account if the owner has left?
As of October 6, 2026, Apple and Google Play both describe the transfer as started by the current Account Holder or owner. If that person is unreachable, contact the store's developer support.
Conclusion
Losing touch with a developer rarely means losing the website. Recover the accounts in order, keep the domain renewed, and leave the live site untouched until copies exist.
If you have no developer available, you can contact Entrant Technologies and we will take a look.