Who has the keys?

Cloudflare: keep the keys with the business

Cloudflare often holds both the domain registration and the DNS, so whoever controls this account controls the website and the email.

Every step below is from Cloudflare’s own help pages, checked on 6th October 2026. Screens change: if a step doesn’t match what you see, the linked page is the one to trust. Nothing here needs you to share a password.

Add a second admin

In your register this is field N.4 of the Cloudflare account.

  1. In the Cloudflare dashboard, go to the Members page and select Invite.
  2. Enter the person’s email address and choose the Super Administrator role.
  3. Select Continue to summary, check it, then select Invite.

Only a Super Administrator with a verified email address can manage members.

Source: Cloudflare: manage account members

Turn on two-step login

In your register this is field N.6 of the Cloudflare account.

  1. Open My Profile, then Authentication.
  2. Select Add next to Mobile App Authentication and follow the steps with your authenticator app.
  3. As a Super Administrator, you can also turn on 2FA Enforcement so every member must use it.

Source: Cloudflare: two-factor authentication

Sign in with a business address

In your register this is field N.5 of the Cloudflare account.

  1. Go to your Profile.
  2. In the Email Address panel, select Change Email Address.
  3. Enter the business address twice and your current password, then select Save.

Billing and notification emails are set separately; update those too.

Source: Cloudflare: email address and password

Move the domain into the business’s own account

In your register this is field N.3 of the Cloudflare account.

  1. The business creates its own Cloudflare account, adds the domain as a website there, and sends you its account ID.
  2. In the current account, turn off DNSSEC for the domain.
  3. On the domain’s Manage Domain page, open the Configuration tab and select Start next to moving the domain.
  4. The business accepts the move under Manage Domains, View Actions, within five days.

The domain must have been registered more than 10 days ago. Settings in the old account don’t move with it, and the domain is transfer-locked for 30 days afterwards.

Source: Cloudflare: move a registration between accounts

All fix guides

See what your domain depends on.