Website handover: domain, hosting and admin access
You own a website only when you hold the credentials. Otherwise you are using it with your contractor's permission.
The full list
Domain registrar account above all, hosting panel, site admin with superuser rights, database or backups, and the source repository for custom builds.
Plus service accounts: Google Analytics, Yandex.Metrica, Search Console, the Google business profile, domain email, and the Telegram bot token if it receives enquiries.
Why it matters
Without registrar access you cannot migrate, change contractors or even renew the domain if the studio stops answering.
Without analytics access you cannot verify reports; without backups you cannot recover from an outage. Studios close and staff leave while the site keeps bringing customers.
How to take handover
At acceptance, alongside final payment — and tested in the meeting, logging into each panel from your own device.
Check permission levels too. A restricted account that cannot add users or change settings is access in name only.