Domain, hosting and professional email: how to choose them without mistakes

Before you have a website you need three pieces that hardly anyone explains properly: the domain, the hosting and a professional email address. They tend to be bought in a hurry, in the same shopping cart and with the first offer that pops up, and then cause trouble for years: renewals that slip through the cracks, emails that land in spam, a domain that turns out to be registered to the agency that built your site ages ago, or a server that goes down just when you get the most visits.

In this guide I explain what each piece is, how to choose between .es and .com, which kind of hosting suits your business, why your email shouldn’t end in @gmail.com, and what those three cryptic records (SPF, DKIM and DMARC) are that decide whether your emails reach the inbox. No unnecessary jargon, and with the mistakes I see most often when I review the technical foundations of small business and freelancer websites.

The easiest way to understand it is to think of a shop. The domain is the address (yourbusiness.es): what people type or tap to find you. The hosting is the premises: the server where your website’s files, database and images live. And professional email is the mailbox with your name on the door: addresses like hello@yourbusiness.es.

Between the three there’s a fourth piece that usually goes unnoticed: DNS. It’s the address book that tells the internet which server to go to when someone visits your domain, and which server should receive the emails sent to you. Thanks to DNS you can have your domain with one provider, your website with another and your email with a third.

• Domain: rented for a number of years from a registrar and renewed. You never buy it outright.
• Hosting: usually paid monthly or yearly, and its quality affects your website’s speed, security and availability.
• Email: it can come bundled with your hosting or be contracted separately from a specialist service.
• DNS: managed from a control panel (the registrar’s, the host’s or an external service’s), and it’s what ties everything together.

Understanding this separation gives you something very valuable: freedom. If one day you want to switch hosting, you don’t have to lose your domain or your email; and if you change email provider, your website keeps working. Putting everything in a single bundle is convenient at first, but it makes any later change much harder.

Your domain name is what will go on business cards, invoices, signs and email signatures, so it deserves some thought. A good domain is short, easy to say and to spell out over the phone, with no hyphens or numbers that force you to explain “with a dash in the middle” every time. Matching your brand name is better than stringing keywords together: stuffing “cheap” or your city’s name into a domain stopped being a ranking shortcut a long time ago.

When it comes to the extension, the rule of thumb is simple:

• .es: the best option if your customers are in Spain. It feels local, and it’s managed by Red.es, the public body in charge of registering Spanish domains (dominios.es).
• .com: the most widely recognised extension internationally. It fits if you sell outside Spain or your brand has global ambitions.
• Others (.shop, .online, .studio…): they can work for specific projects, but people tend to type .es or .com out of habit, so use them carefully.

If your budget allows, register both the .es and the .com of your brand and redirect one to the other. It’s a cheap way to stop someone else using your name and to catch visitors who mistype it. And before registering, check that the name doesn’t clash with a trademark already registered in your sector: a trademark dispute could force you to change domain once your site is already ranking.

This is the mistake that causes the most grief and the one nobody sees coming. When an agency, a tech-savvy friend or a former partner registers the domain for you, they often do it with their own details. While the relationship is going well, nobody notices. The problem appears when you want to change provider, that person stops answering or their account expires: the legal owner is someone else, and getting the domain back can be slow, expensive or downright impossible.

Besides ownership, make sure you have:

1. 1Your own access to the registrar’s panel, with your own username and password and two-step verification turned on.
2. 2A contact email you really check, because that’s where renewal notices and verification requests will arrive.
3. 3Transfer lock enabled, so nobody can move the domain to another registrar without your permission.
4. 4A clear idea of how to request the authorisation code (auth code), which is what you need to move the domain to another provider whenever you want.

A good professional has no problem with the domain being in your name; on the contrary, it’s what they recommend. If someone pushes back, treat it as a red flag.

There’s no perfect hosting, only the right hosting for what your website needs today and what it will need in a year or two. These are the three main types you’ll come across:

• Shared hosting: your website lives on the same server as many others and they share resources. It’s the cheapest option and enough for simple business websites with little traffic. Its weak spot: if a neighbour uses too much, your site can slow down, and there’s limited room for configuration.
• VPS (virtual private server): you get a portion of a server reserved just for you, with guaranteed resources and full control. It performs much better, but someone has to run it: system updates, security, backups and monitoring. Without that care, a VPS is riskier than shared hosting.
• Managed hosting: the provider takes care of the technical side (updates, backups, caching, security) and it’s optimised for a specific technology, such as WordPress or Next.js applications. It usually costs more than shared hosting, but it saves you hours and scares.

To choose, look beyond the headline price. Ask where the servers are (ideally in the European Union, for data protection and proximity to your visitors), whether automatic backups are included and how many days they’re kept, whether an SSL certificate is included, what support they offer and in which language, and what happens if your website grows. The technology matters too: a WordPress site doesn’t need the same as a Next.js site, as I explain in Next.js vs WordPress.

Writing to a customer from yourbusiness@gmail.com isn’t illegal or the end of the world, but it feels a bit makeshift. An address like orders@yourbusiness.es tells people there’s a real company behind it, reinforces your brand in every message and, above all, belongs to you: if you switch provider tomorrow, the address is still yours because it’s tied to your domain.

There are two ways to get email on your own domain:

• The email included with your hosting: usually at no extra cost and fine for getting started. On the other hand, storage, spam filtering and deliverability vary a lot between providers, and if you change hosting you’ll have to migrate your mailboxes too.
• A specialist email service (such as Google Workspace or Microsoft 365): it has a per-user fee, but offers better filtering, calendars, reliable mobile apps and much more independence from your website’s server.

Keeping email separate from web hosting is good practice: if the website has a problem, email keeps working, and vice versa. Also create generic addresses (hello@, invoices@, bookings@) instead of relying only on personal mailboxes; when someone leaves the company, customer emails don’t leave with them.

And don’t mix day-to-day email with bulk sending. For newsletters and campaigns it’s best to use a dedicated tool, with its own properly authenticated sending domain, so you don’t put the reputation of your everyday email at risk. I go into more detail in the article on email marketing for local businesses.

These three acronyms are records added to your domain’s DNS, and they all serve the same purpose: proving that emails sent in your name really come from you and not from an impersonator. The big email providers pay more and more attention to them. Google, for example, requires in its email sender guidelines that anyone sending to Gmail accounts has at least SPF or DKIM, and that bulk senders set up all three.

1. 1SPF: the guest list. It states which servers are allowed to send email on behalf of your domain. If a message arrives from a server that isn’t on the list, the recipient becomes suspicious.
2. 2DKIM: a digital signature that travels with every email. It lets the recipient check that the message comes from your domain and that nobody has tampered with it along the way.
3. 3DMARC: the policy that tells the recipient what to do if an email fails the previous checks (let it through, send it to spam or reject it) and where to send reports about it.

The usual approach is to start with a monitoring-only DMARC policy, review the reports for a few weeks to spot legitimate services sending on your behalf (your online shop, your CRM, your invoicing software) and, once everything is in order, tighten it. Tightening it all at once without checking can stop your own invoices from being delivered.

More than one website stops working not because of an attack or a technical failure, but because someone forgot to renew the domain or the hosting. The card on file expired, the reminders went to an inbox nobody checks any more, or the person who managed it has left. When a domain expires, the website and email stop working at the same time, and once the grace period is over the domain can become available for someone else to register.

• Turn on auto-renewal for both domain and hosting, and check that the card on file is still valid.
• Put the expiry dates in your calendar with a month’s notice.
• Bear in mind that many offers have an introductory first-year price and a higher renewal price. Always ask how much the second year costs.
• If you can, renew the domain for several years at a time: it’s more convenient and reduces the risk of forgetting.

If you ever consider changing hosting or domain, do it calmly and with a plan, because a botched migration can cost you rankings on Google. I cover it in detail in the guide on how to migrate a website without losing SEO.

These are the slip-ups I come across most often when reviewing a website’s technical foundations:

• Domain registered in the name of the agency, the IT person or a former partner.
• Logins stored only in one person’s head (or inbox).
• Professional email without SPF, DKIM or DMARC, with messages ending up in spam.
• Buying the cheapest hosting for an online shop or a high-traffic website, or a VPS with nobody to run it.
• Having website, domain and email in the same bundle without knowing how to separate them.
• Renewal notices arriving in an abandoned mailbox.
• No backup stored anywhere other than the hosting itself.

Almost all of these problems can be prevented with a regular review of the technical side. That’s exactly what good website maintenance covers: renewals kept under watch, verified backups, up-to-date certificates and someone making sure everything keeps running.

Domain, hosting and email are the least glamorous part of a website, but everything else rests on them. Choosing a good name, keeping the domain in your name, picking hosting that fits your project, using properly authenticated email on your own domain and keeping an eye on renewals will spare you scares that, when they come, always arrive at the worst possible moment. If you’re about to launch a new site, this foundation comes included from day one with my web development service.

I’m Elmar Mamedova, a full stack developer based in Málaga. Before writing a single line of code, I make sure the foundations are tied down: the domain in the client’s name, hosting that suits the project and email configured to land in the inbox. If you want to start on the right foot or tidy up what you already have, drop me a line and we’ll look at it together.