A domain lock is a registry status that blocks a domain from being transferred until you remove it.
A domain lock (also called a registrar lock or transfer lock setting) stops anyone from moving your domain to another registrar without your say-so. While it's on, transfer requests are automatically rejected, even if someone has your auth code.
It's a simple safety catch. If someone gets into your email or tricks your registrar's support team, the lock adds another barrier between them and your domain.
How a domain lock works
Behind the scenes, a domain lock sets a status code on the domain at the registry. The most common is clientTransferProhibited, which you'll see in a WHOIS or RDAP lookup. Related codes include:
- clientUpdateProhibited: blocks changes to the domain's details.
- clientDeleteProhibited: blocks deletion.
The word "client" means the status was set by the registrar and can be removed by the registrar, usually through a toggle in your account. Statuses starting with "server" are set by the registry itself.
Domain lock vs registry lock vs transfer lock
These names sound alike but mean different things:
- Domain lock: a status you can switch on and off yourself at your registrar.
- Registry lock: a stronger, paid service where changes need manual checks between the registrar and registry. It's used by big brands.
- Transfer lock: usually refers to ICANN's 60-day restriction after a new registration or transfer, which you can't remove early.
How to unlock a domain for transfer
- Log in to your current registrar's control panel.
- Find the domain's settings and switch off the domain lock or "registrar lock".
- Request the auth code (also called the EPP code).
- Start the domain transfer at the new registrar.
- Turn the lock back on at the new registrar once the transfer is complete.
Removing the lock usually takes effect within minutes, though some registrars take a little longer.
Common domain lock problems
- Transfer rejected: the most common cause is forgetting to unlock the domain first.
- Can't find the setting: some registrars call it "theft protection" or "transfer protection".
- Lock removed but still refused: the domain may be inside the 60-day transfer lock, expired, or in a dispute.
- Forgetting to relock: once a transfer is done, or cancelled, lock it again.
Domains registered with AblePage are locked by default, and transfers away are free once the 60-day ICANN lock has passed.