Who Can Recover Your Business Accounts?

Know who controls essential business accounts, where recovery messages go and how access would transfer if a supplier became unavailable.

You pay for the website. Who can recover the account that controls its address?

The same question belongs beside business email, accounting software and the place customer files are stored. Paying an invoice and being able to regain access are different things.

A trusted supplier may manage these services well. The business still needs to know how its access works when that supplier is unavailable, changes staff or stops providing the service.

Who controls your business accounts?

Start with the services the business would struggle to operate without. Record who is responsible for each account, where renewal notices go and who can contact the provider. Keep passwords and recovery codes in appropriate secure storage, separate from an ordinary account list.

Then ask the person who manages the service to explain the recovery route. Is the recovery address current? Can an authorized person reach it without first signing into the account they have lost? What evidence would the provider require to establish control?

The UK's National Cyber Security Centre guidance on administrator accounts recommends protecting them with two-step verification, limiting who receives that access and keeping recovery information current. Its advice includes separately managed administrator accounts so recovery does not depend on a single account.

Arrange suitable access with an IT professional, keeping powerful permissions limited to the people who need them.

Include the supplier in the conversation

Ask how the service would transfer if you changed providers. Where are the relevant records? Which actions would the current supplier need to take? Which subscriptions are in the business's name, and which belong to a service the supplier provides under its own agreement?

Those arrangements can differ legitimately. Understanding the dependency and the exit process before you need it is what matters.

For a domain name, also establish who controls registration and renewal. A website can be functioning while renewal messages are going somewhere nobody checks.

Check the route without disrupting live work

Have the responsible people review the provider's current instructions and confirm the contact details. Any recovery exercise should be planned with the person managing the system. Avoid disabling a live login to see what happens.

Recovery procedures vary by service. A documented route needs to match the account you actually hold.

The useful result is modest: the business knows who can help, what they are authorized to do and where to begin. If that review exposes wider uncertainty about who owns essential work, the Altvina Blueprint can help establish the operating responsibilities before more tools or suppliers are added.

More from this week

This piece stands on its own. Here are this week's 5 pieces:

• Monday: Who Can Recover Your Business Accounts? (this post)
• Tuesday: Try the Work Before You Change Your Career (coming Tuesday)
• Wednesday: Bring the Awkward Case to the Software Demo (coming Wednesday)
• Thursday: You Can Build a Career Without Managing People (coming Thursday)
• Friday: Ask What Would Change the Recommendation (coming Friday)

Content and Accuracy Disclaimer

This article was drafted with AI assistance and reviewed by the Altvina team. We rigorously fact-check all content to ensure reliability.

Should you notice any inaccuracies or outdated information, please contact us so we can correct it. Your feedback helps us maintain high standards of accuracy and transparency.