Domain lock and unlock

Domain lock and unlock, explained

A domain lock stops your domain being transferred to another registrar without you. Here is what the lock does, when to turn it off, and how to unlock a domain safely for a transfer.

4 chapters and a transfer checklist

What a domain lock is

A domain lock, also called a transfer lock or registrar lock, is a setting on your domain that blocks transfers to another registrar. While it is on, a transfer request is refused, even if someone has the domain's transfer code.

It does not affect your website or email. The domain keeps working exactly as before; only transfers are blocked.

Key points

  • Blocks transfers to another registrar
  • Your website and email keep working
  • Keep it on unless you are moving the domain

Registrar lock and registry lock

The registrar lock is the one you switch on and off yourself. It shows in WHOIS as the status clientTransferProhibited.

A registry lock is a stricter, manual lock set at the registry. Changes need extra verification, so it suits high-value domains. Not every extension offers it.

Key points

  • Registrar lock: you control it
  • Shows as clientTransferProhibited
  • Registry lock: extra verification for every change

When to unlock

Only unlock a domain when you are moving it to another registrar. Unlock it, get the transfer code, start the transfer, and the lock no longer matters once the domain has moved.

If you change your mind, or the transfer fails, turn the lock back on.

Key points

  • Unlock only to transfer
  • Relock if the transfer is cancelled
  • Never share the transfer code

The 60-day transfer lock

Separate from the lock you control, ICANN rules block transfers of generic domains such as .com for 60 days after registration or a previous transfer. A change of owner details can also start a 60-day lock, unless you opt out when making the change.

You cannot remove it early; wait for it to end, then transfer.

Key points

  • 60 days after registration or a transfer
  • Can follow a change of owner details
  • Cannot be removed early

Locked vs unlocked

Which setting should your domain have?

How the two states compare.

Which setting should your domain have?
01

Locked

02

Unlocked

The setting for every domain you are not moving.

Only while you transfer the domain away.

  • Transfer requests are refused
  • Website and email keep working
  • Recommended for active domains
  • Transfers can start with the transfer code
  • Website and email keep working
  • Relock if you cancel the move

Step by step

Unlock a domain for a transfer in five steps.

  1. 1

    Check the domain can move

    It must be active, and past any 60-day lock after registration or a previous transfer.

  2. 2

    Turn off the lock

    In your current registrar's dashboard, open the domain and turn off the transfer, registrar or domain lock.

  3. 3

    Get the transfer code

    Ask for the transfer code, also called the EPP or authorization code. Keep it private.

  4. 4

    Start the transfer

    Enter the domain and code at the new registrar and approve any confirmation email.

    Moving to Cloudoora? Start on our domain transfer page.

  5. 5

    Lock it again

    When the domain has arrived, check that the lock is on at the new registrar.

FAQ

Domain lock questions

What does domain lock do?

It blocks transfers of your domain to another registrar. Your website, email and DNS keep working as normal.

Should my domain be locked?

Yes, unless you are transferring it. A lock is the simplest protection against an unauthorised transfer.

Does unlocking a domain affect my website?

No. Unlocking only allows transfers. Your site and email are not affected.

How do I check if my domain is locked?

Run a WHOIS lookup and look at the status codes. clientTransferProhibited means the registrar lock is on.

Why can't I transfer my domain even though it's unlocked?

It may be within 60 days of registration or a previous transfer, have expired, or have a registry lock. The current registrar can tell you which.

What is the difference between a registrar lock and a registry lock?

You turn the registrar lock on and off yourself. A registry lock is set at the registry and needs extra verification to change, so it protects high-value domains further.

Do I need to unlock a domain to change its DNS?

No. The lock only affects transfers. You can change nameservers and DNS records while it is on.

Moving a domain to Cloudoora?

Unlock it at your current registrar, then start the transfer here.