You have a buyer, or you are close to one, and a broker has asked for a list of your online assets. Then you start checking, and the domain turns out to sit in a former developer's account, the Google listing is tied to your personal Gmail, and nobody remembers who set up the Facebook Page. That is a common place to be when selling a business, and transferring the website and online accounts is more manageable than it feels tonight. Each piece has its own documented route, and a few of them have waiting periods you can plan around. The work usually goes in a set order, because some accounts control the recovery of others. You can do much of it yourself, starting with a private list you can build in about half an hour. Get that list right, and the buyer sees a business whose online presence is under control.
Key Takeaways
The registrar account and the mailbox admin control password resets for almost everything else, so they come first in the handover.
GoDaddy says an account transfer keeps DNS but does not move the attached website or email products, so hosting and mail need their own handover.
Reviews and history stay with the existing profile, and a new owner may have to wait seven days before becoming primary owner.
Facebook, LinkedIn and YouTube each use an admin or owner role, and Instagram has no comparable official sale-transfer process.
CAN-SPAM bars selling or transferring the addresses of people who opted out, so opt-out records travel with the list.
The Handover Runs in the Order Things Break
The safest order follows dependency: what would lock the buyer out of everything else goes first. No source ranks how often each failure happens for small businesses, so this order comes from what controls what, not from a survey.
- Domain, DNS and business email: The registrar and the mailbox admin receive the recovery codes and reset links for other accounts. Losing them can block every later step.
- Google Business Profile primary ownership: Reviews and history stay if you transfer ownership correctly, and the transfer can involve a seven-day wait.
- Website host and builder: These are separate from the domain and have to be handed over on their own.
- Social accounts: Each platform uses its own role system.
- Payment processors and booking tools: Some providers restrict or refuse transfers during a sale, so ask early.
- The email list: A consent and compliance check, not a file you simply hand over.
| Asset | Documented route | Wait or limit to plan for |
|---|---|---|
| Domain, same registrar | Current owner starts an account transfer; buyer accepts | GoDaddy: buyer accepts within 10 days |
| Domain, new registrar | Remove the transfer lock, request the AuthInfo code | Code within five calendar days; a contact change can trigger a 60-day lock |
| Google Business Profile | Add buyer as owner, then make them Primary owner | New owners may wait seven days |
| Facebook Page | Give the buyer's personal profile Facebook access with full control | Test access before removing yourself |
| LinkedIn Page | Assign the buyer a super admin role | Pages have no separate login |
| YouTube Brand Account | Make the buyer an owner, then primary owner | Owner for seven days first |
| Stripe | Contact Support before owner or entity details change | Provider decides the route |
| Square | No account transfer during a sale | Buyer sets up their own account |
Platform procedures change. Recheck each linked help page in the week you do the transfer, and treat anything here about legal, tax or privacy questions as general information, not advice.
A Thirty-Minute Inventory Comes Before Any Password Change
The first thing to build is a private table, not a round of password resets. Resetting passwords in a hurry can lock out the one person who still knows how an account was set up. A list lets you see every account at once while the seller, the old developer and the bookkeeper can still answer questions.
For each account, record the asset, its web address or account ID, what it does for the business, the owner's email, the recovery email and phone, who pays for it, who has admin rights, the renewal date, where a backup lives, and the planned transfer route. Then note whether the login, the billing, the recovery details and any contract are in the business's name, the seller's own name, an employee's name or a vendor's name.
Work through these groups:
- Identity: Legal entity and DBA, domains, registrar and DNS.
- Website: Host, builder or CMS, code storage, developer and maintenance contract.
- Email: The business email account, its super admin, and shared inboxes.
- Google: Business Profile, Search Console, Analytics, Tag Manager and Ads.
- Social and listings: Facebook, Instagram, LinkedIn, YouTube, X, TikTok and directory listings.
- Revenue tools: Ad platforms, CRM, email and SMS tools, booking, ecommerce, marketplaces, payment processors and the bank account payouts go to.
- Everything else: Cloud storage, phone or VoIP, review platforms, passwords, MFA and recovery contacts, software licenses, data exports and renewal dates.
Mark an account as "tested" only when someone has actually logged in with admin rights. Assumed access is the gap buyers find.
What to untangle before listing, in order
- 1
Recovery control
List every email domain and mailbox admin, then test the registrar, DNS, hosting and Google Workspace or Microsoft 365 super-admin logins. Record each account's owner and recovery phone and email.
- 2
Named business access
Move day-to-day access to named business accounts while the seller is still around, without changing registrant details or billing yet.
- 3
Evidence and backups
Export the DNS zone, site files and database, analytics, CRM consent records, ad accounts, and the access lists for social and the Business Profile.
- 4
Provider rules
Ask each payment processor and software provider how a change of owner works for them.
- 5
Closing checklist
Transfer access, switch bank and billing details at the agreed time, remove seller and vendor access, change credentials and keep a record of what was done.
The Domain, DNS and Business Email Move First
These three decide who can reset everything else, so they deserve the most care. A domain is a registration held at a registrar. DNS is the set of records that points the domain at a website and a mail service. The mailbox itself lives with an email provider. Moving one does not move the others, and the sections below take each in turn.
Moving the domain within the same registrar
If the buyer is happy with the current registrar, the simplest route is an account-to-account move. The current owner starts it, and the buyer accepts. GoDaddy's account transfer instructions give the recipient 10 days to accept, keep the DNS settings, and say attached website and email products do not move with the domain. If a developer registered the domain in their own account, the developer, as the current account holder, is the person who has to start this. Other registrars have their own change-of-account or change-of-registrant procedure, so use theirs rather than handing over a login.
Moving the domain to a different registrar
A move to a new registrar generally needs the transfer lock removed and an AuthInfo code. ICANN's transfer policy summary says registrars provide that code through their site or support, or within five calendar days of a request. It also says a change to the registrant's contact details can trigger a 60-day lock on moving to another registrar. That lock limits an inter-registrar move after certain changes; it does not necessarily stop a same-registrar account move or DNS changes. Confirm the actual process with the registrar before you edit contact details.
Keeping business email running
Business email is usually a Google Workspace or Microsoft 365 account with a super admin. Find out who holds that role and whether their recovery phone is still current, then add the buyer as an admin before closing. Keep the existing admin in place until the buyer has logged in and tested access. On closing day, the aim is simple: mail keeps arriving, and the buyer receives the reset codes.
Google Business Profile Changes Hands Through Primary Ownership
Keep the existing profile. A new profile is not how reviews survive a sale. Google's help page on transferring primary ownership says, "If you want to transfer ownership of your business, make sure you're transferring primary ownership," so that business information, including reviews, is kept. When the business keeps its name under new management, the reviews and public history stay with the profile.
The route has two steps. First, add the buyer as an owner. Then the current primary owner selects that person as Primary owner. Google can make a new owner wait seven days before that second step, so plan for at least a week and do not leave it for closing day. If an agency or former employee holds primary ownership, Google's guidance on protecting your Business Profile is worth reading before you ask them to hand it over and before you remove anyone.
Hosting and the Website Builder Move Separately From the Domain
Moving the domain moves the name, not the house. The website itself lives with a host, and often inside a builder or content management system with its own accounts and billing. Each needs its own handover.
For the host, record the plan, who pays, and who has admin access, then add the buyer as an admin or change the account owner using the host's documented process. For the builder or CMS, make sure the buyer has an administrator login in their own name and can publish a change. Export the site files and database before anything moves, and keep the export somewhere the buyer controls. If a developer maintains the site, ask where the code is stored and who owns that storage account.
A common snag is a site the owner cannot edit without calling someone. If that sounds familiar, our post on not being able to edit your own website covers the access questions to ask before a sale adds a deadline.
Social Accounts Transfer Through Roles, Not Logins
A shared password is not the way to hand over a Page. Facebook, LinkedIn and YouTube each have a role system built for this, and followers stay with the Page when the roles change. Instagram is the exception, with no comparable sale process found. Each platform works a little differently.
Facebook Pages
A person who already has full control adds the buyer's personal Facebook profile with Facebook access and full control. The buyer confirms they can manage the Page, and then the outgoing people are removed. Meta's help page on managing Page access lays out the current steps. Followers and Likes stay with the Page, so there is nothing separate to move.
LinkedIn Pages
LinkedIn uses admin roles, and LinkedIn's Page admin help says Pages have no separate login credentials. Give the buyer the super admin role, have them confirm it works, and then remove yourself.
YouTube Brand Accounts
A YouTube channel on a Brand Account can change primary owner once the recipient has been an owner for seven days, according to YouTube's Brand Account help. Add the buyer as an owner early so the clock is running before closing.
No official Instagram workflow for transferring an account in a business sale turned up in the research. Do not hand over a personal login or assume a process exists. Record the account in the inventory, and have both parties check Meta's current support pages and terms at the time of the sale.
Payment and Booking Tools Need the Provider's Say-So
Payment accounts are tied to a legal entity, a bank account and tax reporting, so the provider decides how a sale is handled. Ask each one early, because a late surprise here can stop the buyer from taking money on day one.
Stripe's page on transferring an account after a business sale tells account owners to contact Support before the legal entity or owner details change. Square's help page on transferring ownership says it does not support an account transfer during a sale, because tax reporting would be disrupted. In practice, that can mean the buyer opens a new account and payouts switch over on an agreed date.
Booking, CRM and ecommerce tools vary too. Ask each provider how a change of owner works, and note the answer and the date in your inventory.
The Email List Is a Consent Question, Not a Bundled Asset
Customer and subscriber data can be part of a deal, but a purchase agreement does not by itself make a list usable for marketing. What people agreed to, and who has opted out, travel with the addresses.
In the United States, the FTC's CAN-SPAM compliance guide says that once someone opts out of your marketing email, "you can't sell or transfer their email addresses," except to a company helping you comply with the law. So, the opt-out records have to stay with the list and be honored. Mailchimp's compliance rules require permission and treat purchased or third-party lists as non-compliant.
If you have UK or EU contacts, the rules ask for a documented lawful basis and clear privacy information. The UK regulator's data sharing code treats a list transfer as data sharing and says the recipient must check it is compliant. Before the buyer sends a first campaign, review the privacy notice people saw when they signed up, the consent wording, where contacts live, any sensitive data, and the email provider's terms. A privacy professional is the right person for anything uncertain.
Buyers Look for Evidence of Control
Published broker checklists regularly list online assets. The Aegis Business Brokers seller checklist names the website and domain, customer databases, subscriber lists and sales records. The Business Broker and M&A Advisor Toolkit data-room outline includes domain registrations, a software license list, a website analytics export and an SEO report.
What reassures a buyer most is proof that you control each asset: registrar screenshots, tested admin access, who pays the renewals, where the code and site files live, and whether contracts with vendors can be assigned. These checklists show what gets asked for; they are not evidence that any single asset changes the sale price by a set amount, and no study located ties a handover checklist to a higher price.
Put the finished inventory into the sale agreement or its closing checklist, so both sides agree what is being handed over, by whom and when. How that is worded is a question for your attorney. This is general information, not legal advice.
Much of This Handover Costs Nothing but Time
You can build the inventory, test access while the seller is still available, and do the routine role changes yourself: adding an owner to the Business Profile, giving the buyer full control of the Facebook Page, assigning a LinkedIn super admin, and starting a same-registrar domain move. None of that requires replacing a working website, switching registrars, starting a new profile or paying for an emergency migration just because a sale is pending.
Help earns its place in a narrower set of cases. Recovery access is lost and has to go through platform support, which can take days or weeks with no certain outcome. Records are scattered across people who have left. The website, CMS or DNS is undocumented, or a developer controls the whole setup. Many systems are involved. Or the cutover has to happen without interrupting email or payments, and the buyer wants a tested record of what changed hands.
Ready to hand over your online accounts?
Pick an answer to begin.
1. You move your domain to the buyer's account at the same registrar. What happens to your website hosting and email?
2. What is the documented way to keep your Google reviews when you sell?
3. Under CAN-SPAM, what can you not do with the addresses of people who opted out?
Frequently Asked Questions About selling a business transfer website and online accounts
Do Google reviews stay when a business is sold?
Yes, when the business keeps its name under new management and you transfer primary ownership of the existing profile. Google says not to create a new profile for an ownership change.
Does transferring a domain move the website and email?
No. The registration can move while hosting, email and other connected products stay where they are. Each one needs its own handover.
How do I transfer Google Business Profile ownership to a buyer?
Add the buyer as an owner, then have the primary owner select them as Primary owner. Allow for a possible seven-day wait before that second step.
How do I hand over social media accounts in a sale?
Use each platform's roles: Facebook access with full control, a LinkedIn super admin, or YouTube Brand Account ownership. Test the buyer's access before removing your own. Instagram has no comparable documented sale process, so check Meta's current terms.
Can I transfer my email list in a business sale?
Treat it as a consent question first. Keep and honor opt-outs, check what subscribers were told when they signed up, and review the rules where your contacts live before the buyer sends anything.
Can I transfer a Stripe or Square account to the new owner?
Ask the provider first. Stripe asks owners to contact Support before owner details change, and Square says it does not support an account transfer during a sale.
Moving Forward
A clean handover follows the order things break: domain, DNS and business email first, then the Google Business Profile, the host and builder, the social accounts, payment and booking tools, and finally the email list. Each moves through its own documented route, several have waiting periods, and none of them moves by sharing a password. The inventory is where it all starts, and you can build it yourself this week.
Done well, the handover feels uneventful. The buyer renews the domain, gets the recovery codes, answers reviews, publishes site changes, receives mail and takes payments without calling you, and you leave with a clear record of what was handed over.
If the inventory turns up lost access, a site nobody can edit, or a cutover that cannot interrupt email or payments, Web Leveling can help. Our content management work gives the new owner documented control of the site and the ability to keep it updated, and we can plan the technical cutover around your closing date. We work with small and medium businesses across the country and overseas. Tell us what your inventory turned up, and we will help you sort out what to move first.
Terms
Handover terms in this post
Tap a term to see what it means.
Registrar. The company where a domain name is registered and renewed.
DNS. The records that point a domain at its website and email service.
AuthInfo code. A code the current registrar provides so a domain can move to a different registrar.
Primary owner. The top ownership role on a Google Business Profile or YouTube Brand Account, able to manage other owners.
Super admin. The highest admin role on a LinkedIn Page or a business email account.
CAN-SPAM. The US law that sets rules for commercial email, including honoring opt-outs.
Lawful basis. The documented legal reason UK and EU rules require before using someone's personal data.