Take the 2-minute tour ×
Webmasters Stack Exchange is a question and answer site for pro webmasters. It's 100% free, no registration required.

I work for a company that has an older website. We hired a firm to update our web site and index it properly. I have control of the actual domain name. I created an FTP site for them to use, but they are also asking for my registrar account and password. The only explanation I have gotten so far is that they need it for "indexing" the site to search engines. Is this a valid reason, or is their any valid reason they would need my registration information?

share|improve this question
21  
It's so unnecessary that it raises a red flag to me. –  John Conde Aug 18 '10 at 19:13
    
@John, I completely agree. See my answer. If I was in this users shoes I would be very concerned about this company's intentions! –  RandomBen Aug 18 '10 at 19:17
    
find a new company, this one seems likely to scam you. –  corymathews Aug 19 '10 at 21:01
3  
Any update? Have you found out why they're requesting these details? –  Mark Henderson Aug 20 '10 at 3:20
    
I personally would love to know who this company is. SEO is snake oil to begin with. SEM (Search Engine Marketing) has actual value, but I can not think of a real reason they would need this information for either. –  Frank Robert Anderson Aug 24 '10 at 9:09

7 Answers 7

The only reason I would need someone's account with a registrar is to change the DNS settings (name server .. etc). But this has nothing to do with the site being indexed by search engines. Besides this can be used to initiate a domain name transfer (= you get your domain name stolen). If I were you, I'd never give such information to them.

share|improve this answer

Possible reasons for needing control:

  1. Adding, managing sub-domains and mirrors.

  2. If you're running an email server, you'll have to appease email service providers' demands to legitimize your email communications, which may involve tweaking dns records.

  3. If you don't have a static IP, someone has to keep on top of updating dns records every time your ISP switches your server's IP address.

  4. Keeping on top of registration renewals.

  5. Publishing website support and complaint contact information, and otherwise keeping in compliance with ICANN rules.

Your registrar should be able to provide you with the means to add a sub-user account, which lacks transfer ability and missing some other key permissions. Set this up for them instead. But for added security, you may instead want to have this consultant supply you with a list of changes needed, and you personally make these changes or otherwise open a support case with your registrar to make it happen.

share|improve this answer
    
I realize I'm coming a year late to the party, but our registrar and our ISP are two different parties. Network Solutions is our registrar; AT&T is our ISP. AT&T controls our DNS records. –  Mike Sherrill 'Cat Recall' Dec 4 '11 at 23:39

do not do this. In fact, run very fast away from these people.

share|improve this answer

Do not, under any circumstances, do such a thing.

However, if you are with a registrar that allows you to delegate only certain rights (i.e. if you're with NameCheap - I'm sure others support this but I don't know which), if they really only care about the right to change DNS servers or other such, by all means, if that is an acceptable thing to you. Maybe they just want to change the info to a private registration for G-d knows what reason, or they want to extend the registration period as part of looking better for Google.

Sidenote: I manage about fifty client domains and I have their registrar passwords or even their domains in my registrar accounts, but only because some would forget to renew their domains and I have contracts with them guaranteeing their ownership and transfer upon signed request, as well as my (albeit limited) liability in case I am too much of an idiot and actually forget to renew them myself.

share|improve this answer
    
Intlect, good point. I similarly register for all my clients but my contract states that I immediately turn over access passwords once completed. If they wish to let me in, they do....but they are free to change their passwords too, in which case my contract states that they are in control until they give me access back. It's worked great for several years this way. –  bpeterson76 Aug 19 '10 at 17:10
    
To be honest, if I were you I wouldn't turn over "access passwords". Force them to setup an account with the registrar you use, and push it to their own private accounts. Otherwise, if they never change the password you set them up with and they end up with a disgruntled employee they don't know about screwing with their domains, the first fingers will point to you, and denying involvement wouldn't really help. –  intlect Aug 24 '10 at 2:37

There's nothing in DNS/Whois that is going to make a difference in terms of indexing a site. Getting pages indexed is as simple of notifying the search engines that the page exists. This can be done through a HTML sitemap, XML site map, or regular internal links.

The only possible explanation I can think of for needing this access is to register the domain for 10 years. Some people speculate since Google patented the idea that domain name registration length can be used in ranking algorithms that a 10 year domain registration must help search rankings. Besides the fact that there is no evidence that is true, if they were going to do this they would have simply said so.

Like I said in my comment, this sounds very shady. I'd mention it to someone and have them look into it further if I were you.

share|improve this answer

I know for a fact that Google Webmaster Tools only requires you to put a file on your site to prove that you are in control of it. Which having FTP access will let you know. I highly doubt any other search engine would require anything regarding your registration information.

Do not give them your username and password. If they push for it ask for a specific defined reason for why they need it. If they do not give you one then they are obviously lying. If they do give you a reason question it extensively. If this company is trying to pull one on you and your company now is the time to figure it out. I would consider any work they do or claim they will do for you suspect if they don't back down on requesting that information and more or less apologize right away.

share|improve this answer
1  
+1 for mentioning the shadiness. I find SEO companies shady to begin with. This only makes my opinion even lower... –  John Conde Aug 18 '10 at 19:24
1  
@John - I agree most SEO companies come across as very slimy. –  RandomBen Aug 18 '10 at 19:38
1  
You also may want to seriously consider ending your business relationship with this company. At the very least, make sure that you're completely covered to the fullest extent of the law with a clear contract that explicitly details the responsibilities of both sides. –  Virtuosi Media Aug 18 '10 at 20:28

This is not a valid reason. Your instincts are correct here. The only possible use of this information is to change the info stored with the registrar (dns etc.) which (given what you've said) isn't something they need to do.

share|improve this answer
1  
+1 for sniffing out the BS –  John Conde Aug 18 '10 at 19:23

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.