What Is Domain Lock?

A domain lock is a security control that restricts certain changes to a domain, most commonly domain transfers. Locks exist to protect domain ownership and reduce the risk of unauthorized or accidental changes.

When a domain is locked, transfer-related actions are restricted until the lock is removed or expires. Other domain functions, such as DNS resolution, usually continue to work normally.

Why do domain locks exist?

Domain names are valuable digital assets. If a domain is transferred without authorization, recovering it can be difficult or impossible. Domain locks add protective barriers that help prevent domain theft, account compromise, and accidental transfers.

Locks are designed to protect domain owners even if credentials are exposed or a change is made unintentionally. Different types of locks exist to provide different levels of protection depending on the situation.

Layers of domain locks

There are several types of locks that can be applied to domains. A registrar lock is applied by your domain registrar and prevents the domain from being transferred to another registrar. This is the most common type of lock and is typically enabled by default for security. Registrar locks can usually be removed by the domain owner through their registrar account when they want to transfer the domain.

A registry lock is applied at the registry level and provides even stronger protection than a registrar lock. Some registrars also offer SuperLock for enhanced protection. Registry locks are typically used for high-value domains or when maximum security is required. Registry locks usually require additional steps to remove and may involve contacting the registry directly.

The ICANN 60-day lock is automatically applied after certain changes to domain registrant information. This lock prevents domain transfers for 60 days after a registrant contact change, is required by ICANN policy for most generic top-level domains (gTLDs), cannot be removed by the registrar, and automatically expires after 60 days. This lock helps prevent unauthorized transfers that might occur immediately after a registrant change.

How locks affect domain operations

While locks restrict transfers and some ownership-related actions, they typically do not affect DNS resolution or domain renewals. A locked domain can continue to serve websites, handle email, and operate normally while protections are in place.

Locks focus on safeguarding ownership rather than interrupting active services.

Removing domain locks

The process for removing locks depends on the type of lock. Registrar locks are usually removed through your registrar account interface when you’re ready to transfer. Registry locks may require contacting the registry or your registrar’s support team. ICANN 60-day locks cannot be removed and automatically expire after 60 days.

Have more questions?

If you have any questions about domain locks or need help with your domains, just contact our support team — we’re here to help.