How to Transfer a Locked Domain
A registrar lock is a common reason an inter-registrar domain transfer cannot proceed. In many cases the domain must be unlocked before the transfer can begin. This guide explains what domain locks are, how to check for them, how to remove them, and what else can block a transfer even after the lock is off.
What is a domain lock?
Registrar lock (transfer lock)
A registrar lock — sometimes called a transfer lock or domain lock — is a security setting applied by your registrar that prevents the domain from being transferred to a different registrar. It is enabled by default on most domains after registration as a safeguard against unauthorized transfers. Removing it is a routine part of the transfer process and does not affect your website, email, or DNS in any way.
Other statuses that can block a transfer
Beyond the standard registrar lock, several other conditions can prevent a transfer from completing:
- 60-day lock after registration: ICANN policy requires that newly registered domains cannot be transferred to a different registrar for 60 days after initial registration.
- 60-day lock after a previous transfer: The same 60-day restriction applies after a domain has been transferred. This is an ICANN requirement for inter-registrar transfers of generic TLDs.
- serverTransferProhibited status: A registry-level lock distinct from the registrar lock (see below). Cannot be removed through your control panel.
- Account holds or suspensions: Some registrars place a hold on domains when there is a billing issue or unverified contact. Policy varies by registrar.
- Redemption period: A domain that has expired and entered the redemption grace period cannot be transferred until it is renewed or restored.
How to check whether your domain is locked
Via your registrar's control panel
The most direct method. Log in to your registrar, open the domain's settings or security page, and look for a "Transfer lock," "Domain lock," or "Registrar lock" toggle. Most major registrars display this prominently in the domain management section. If the toggle shows as enabled, the domain is locked.
Via WHOIS / EPP status codes
A WHOIS lookup on your domain will show its EPP status codes. The relevant ones for transfers are:
clientTransferProhibited— the registrar lock is active. This is the standard lock you remove through your control panel.serverTransferProhibited— a registry-level lock. This cannot be removed by you through the control panel; it requires contacting your registrar or, in some cases, the registry itself.- No
clientTransferProhibitedin the status list — the registrar lock is off, but other transfer requirements or restrictions may still apply.
You can check WHOIS status for .com and .net domains through the Verisign WHOIS tool, or use your registrar's WHOIS lookup. The Domain Evaluator tool on this site checks live registry data for .com domains.
How to unlock a domain before transferring
Log in to your current registrar
Go to your registrar's website and sign in to the account that owns the domain. Make sure you are in the correct account if you manage multiple accounts.
Open the domain's settings or security page
Navigate to your domain list, select the domain you want to transfer, and look for a settings, security, or management section. The lock option is commonly labelled "Transfer lock," "Domain lock," "Registrar lock," or simply a padlock icon with an on/off toggle.
Disable the transfer lock
Toggle the lock off or select "Unlock." Some registrars ask you to confirm the action via a second click or an email confirmation. Complete any confirmation step required — the domain is not fully unlocked until the change is saved.
Verify the lock is removed
Some registrars apply the change immediately; others may take a few minutes. You can confirm by refreshing the settings page or running a WHOIS lookup and checking that clientTransferProhibited is no longer listed. Proceed to the transfer as soon as possible — do not leave the domain unlocked for longer than necessary.
Getting the EPP/auth code after unlocking
Once the domain is unlocked, request an authorization code (also called an EPP code or auth code) from your registrar. This is a one-time security code that proves you have authorized the transfer. Depending on the registrar, the EPP/Auth code may be shown in the control panel or provided through email or support.
Request the code only when you are ready to initiate the transfer at the new registrar immediately. For the full transfer process from this point, see our complete domain transfer guide.
Transfer restrictions that are not the registrar lock
Unlocking the domain resolves the registrar lock but does not override other transfer restrictions. The most common ones to be aware of:
The 60-day inter-registrar transfer restriction
ICANN's inter-registrar transfer policy requires a 60-day waiting period after initial registration and after each successful transfer. If your domain was registered or last transferred within the past 60 days, the transfer will be rejected regardless of lock status. This applies to generic TLDs like .com and .net; ccTLDs have their own rules.
Restrictions after registrant contact changes
Some registrars apply a temporary transfer hold after a material change to the domain's registrant contact — for example, changing to a different legal entity. This is a registrar-level policy, not a universal ICANN requirement for all contact edits, and the duration and trigger conditions vary. If you recently updated registrant details, check with your registrar whether a hold applies before initiating a transfer.
serverTransferProhibited (registry-level lock)
Unlike the registrar lock, a serverTransferProhibited EPP status is set by the domain registry, not your registrar. It is typically applied in cases such as a legal dispute, ICANN compliance action, or a registry-specific hold. You cannot remove this status yourself. Contact your registrar's support team to understand the reason and next steps; in some situations they will need to coordinate with the registry.
Expired or suspended domains
A domain that has expired may enter a grace period or redemption period depending on the registry. Transfers are generally not possible during these states. The domain must be renewed or restored first.
What to do if the unlock option is unavailable
If you cannot find a lock toggle in your registrar's control panel, or if disabling it has no apparent effect, try the following:
- Contact registrar support. Many registrars can confirm the exact lock status on your account and unlock it manually if there is a system issue.
- Check account verification status. Some registrars restrict domain management actions if the account email has not been verified or if there is an outstanding verification request.
- Check for billing holds. An overdue invoice can result in domain management being restricted at some registrars.
- Check the TLD. Some country-code TLDs (ccTLDs) and newer gTLDs do not use the standard registrar lock mechanism. Transfer authorization for those extensions may work differently — your registrar can advise.
- Check for a serverTransferProhibited status. If a registry-level lock is present, the registrar lock toggle may not even appear. A WHOIS lookup will confirm which EPP statuses are active.
Common blockers and mistakes
Does unlocking a domain make it less secure?
Temporarily removing the transfer lock does create a short window during which a transfer request could theoretically be submitted by an unauthorized party. To minimize risk, unlock the domain only when you are ready to initiate the transfer immediately, and keep the window as short as possible. Re-enable the lock if your plans change before the transfer begins.
The transfer was rejected even though I unlocked the domain
Unlocking removes the registrar lock but does not clear other restrictions. Check whether the domain is within 60 days of registration or last transfer, whether the auth code has expired or is incorrect, and whether a serverTransferProhibited or account hold is present. Run a WHOIS lookup to confirm the current EPP status codes.
My registrar's control panel does not show an unlock option
Some TLDs do not use the standard client lock mechanism. Contact your registrar's support team — they can confirm whether a lock is present and how to remove it for your specific domain extension.
Will unlocking the domain affect my website or email?
No. The registrar lock only controls whether the domain can be transferred to a different registrar. It has no effect on DNS, nameservers, website availability, or email routing. You can safely unlock the domain while your site and email remain fully operational.
Looking for a registrar with a clear, easy transfer process?
Compare Domain Registrars →Related guides
How to transfer a domain between registrars →