The Own-Your-Internet Checklist: Audit Every Piece of Your Online Presence (2026)

Published October 19, 2026

If a single company disappeared tomorrow — or locked you out — what would break? Work through this checklist and you’ll know. Then fix it.

This isn’t paranoia. In October 2026, Namecheap seized and disabled all domains of a 12-year customer over a single missed verification email — his servers and company email went down with them. He’d trusted one company with everything and had no inventory of what “everything” was. This checklist is the defense: know what you depend on, spread the risk, and keep your own copies.

Set aside an afternoon. Most people find at least one thing that would have hurt them.

1. Domains

• List every domain you own. Check your registrar account(s). People forget domains constantly — search your email for registration confirmations too.
• Verify the registrant contact is you. Not your developer, not your old agency, not a privacy service you don’t control. If someone else is listed, transfer ownership now.
• Check expiration dates. Anything expiring in the next 90 days gets renewed today. Enable auto-renew everywhere.
• Confirm the admin email is current. Transfer approvals, renewal notices, and verification emails go here. A dead admin email is how people lose domains.
• Unlock assessment: is your registrar trustworthy? After Namecheap’s 2025 private-equity buyout, 2026 price hikes, and the October 2026 domain seizure, “we’ve always used them” isn’t a reason. See best domain registrars for small business.
• Enable WHOIS privacy (free at any decent registrar — see domain privacy explained).
• Turn on registrar lock for domains you’re not transferring.

2. DNS

• Know where your DNS is hosted. Registrar? Hosting company? Cloudflare? Write it down — most people can’t answer this.
• Export your DNS zone. Screenshot or export every record. If your DNS host vanished, you’d need to rebuild this from memory otherwise.
• Check TTL values. Low TTLs (300s) make future moves fast; high TTLs (86400s) mean changes take a day to propagate. Lower them before any migration.
• Consider separating DNS from your registrar. If your registrar holds both your domain and your DNS, one problem takes both. Cloudflare’s free DNS is the standard move.

3. Hosting

• Know what you’re paying for and where. Shared, VPS, managed — and which company. Check whether you’re on an intro price about to renew at 3x.
• Check renewal pricing, not intro pricing. Log into billing and look at the next invoice, not the landing page.
• Verify backups exist — and test one. “Automatic backups” you’ve never restored are a hope, not a backup. Do a test restore to a staging area once.
• Know your exit. Can you get a full site export? Is there a lock-in (proprietary builder, no export tool)? If leaving would mean rebuilding from scratch, that’s a risk to price in.
• Match hosting to need. Paying for a VPS serving a brochure site is waste. Struggling on shared with a busy store is false economy. See when to upgrade from shared to VPS.

4. Email

• Know where your email lives. Google Workspace? Microsoft 365? Your host’s bundled email? Your registrar’s?
• Check MX records match reality. Misconfigured MX is a silent killer — mail just stops arriving.
• Verify SPF, DKIM, and DMARC. Without these, your mail increasingly lands in spam — or gets rejected outright. This is a 30-minute fix with outsized impact.
• Separate email from hosting if it matters. If your web host goes down and your email is bundled with it, you lose your website and your ability to communicate about it. For a business, email on Google Workspace or Microsoft 365 (independent of hosting) is worth it.
• Export important mail. Whatever the provider, have an offline archive of anything you’d miss.

5. Backups (the layer nobody tests)

• Website backup: automated, off-server, tested restore. “My host backs up” is insufficient — verify.
• Database backup: separate from file backup if applicable. A file backup without the database is half a site.
• DNS backup: the zone export from section 2.
• Domain list: the inventory from section 1, stored somewhere other than your registrar account.
• Credentials: registrar login, hosting login, DNS login — in a password manager, with a backup admin who can access them if you’re unavailable.

6. Domain portfolio hygiene

If you own more than a handful of domains, they accumulate like clutter:

• Kill what you don’t need. Let junk domains expire instead of auto-renewing them out of inertia. Every domain is an annual bill and an attack surface.
• Consolidate registrars. Three registrars means three accounts to secure, three admin emails to keep current, three renewal systems. One is better.
• Document why you own each one. A simple spreadsheet: domain, purpose, expiry, registrar. Future you will thank present you.
• Check for typosquat exposure. If your brand matters, consider owning the obvious misspellings and the alternate TLDs (.net, .org) — not every extension, just the ones a phisher would use.

7. Consolidation decisions

After the audit, you’ll probably find sprawl: domains at three registrars, DNS in two places, email somewhere you forgot. Consolidate deliberately:

• One registrar for all domains (simpler renewals, one admin email to guard).
• DNS at Cloudflare or with your registrar — picked once, documented.
• Email independent of web hosting for anything business-critical.
• Hosting matched to actual need, on renewal pricing you can see coming.

Each consolidation is a domain transfer or a hosting migration — standard processes, not risky ones, as long as backups exist first.

8. Website legal basics

Owning your site also means the paperwork:

• Publish a privacy policy. Required by law in the EU (GDPR), California (CCPA), and increasingly everywhere else. A generator is faster and cheaper than a lawyer for a standard small-business site.

9. The annual review

Put a yearly calendar reminder: re-run this checklist. Registrars get acquired, hosts raise prices, admin emails go stale, auto-renew cards expire. The 2026 Namecheap story happened to a 12-year customer who wasn’t paying attention. Attention is the whole defense.

When you find a problem, fix it in this order: expired/expiring domains first (they can vanish permanently), then admin email accuracy (everything else depends on it), then backups (verify one restore), then consolidation (the nice-to-have). Don’t try to fix everything in one sitting — work the list top-down over a week. And save the completed checklist somewhere you’ll find it next year; the annual review only works if you can compare against last year’s state.

Work through it section by section. Most people finish in an afternoon and find at least one thing that would have hurt them — an expiring domain, a dead admin email, a backup that never ran. That’s the point: find it on a calm afternoon, not during an outage.

Keep reading: how domain transfers work when consolidation means moving registrars, or best domain registrars for small business if the audit tells you it’s time to switch.