Domain Transfer Lock Explained
Domain Transfer Lock Explained
Domain transfer lock is one of the most important security features available for your domain name. It prevents unauthorized or accidental transfers away from your registrar.
What Is Transfer Lock?
Transfer lock — also called registrar lock or client transfer prohibited — is a status code applied to your domain at the registry level. When enabled, the registry will automatically reject any transfer request for that domain, regardless of whether a valid EPP code is provided.
How It Protects You
Without transfer lock, anyone who obtains your authorization code and has access to the registrant email could initiate a transfer. Transfer lock acts as an additional layer of defense:
- Prevents domain hijacking — Even if your EPP code is compromised, the transfer cannot proceed while the lock is active.
- Blocks accidental transfers — Protects against unintentional transfer requests.
- Gives you control — You must explicitly unlock the domain before a transfer can begin.
Transfer Lock Status Codes
In the WHOIS database, transfer lock appears as specific status codes:
| Status Code | Meaning |
|---|---|
clientTransferProhibited | Lock set by the registrar at the domain owner’s request |
serverTransferProhibited | Lock set by the registry (usually for legal or administrative reasons) |
If your domain shows serverTransferProhibited, this is set at the registry level and cannot be removed through your registrar’s control panel. You may need to contact the registry or resolve any pending issues.
Managing Transfer Lock at 10Corp
To enable transfer lock:
- Log in to your 10Corp account.
- Go to Domains → My Domains and select the domain.
- Find the Transfer Lock toggle and switch it to On.
To disable transfer lock (for outgoing transfers):
- Follow the same steps but switch the toggle to Off.
- Proceed with obtaining your EPP code and initiating the transfer.
Best Practices
- Keep transfer lock enabled at all times unless you are actively transferring the domain.
- Re-enable the lock immediately after an incoming transfer completes.
- Monitor WHOIS status periodically to confirm the lock is in place.
- Enable additional security such as two-factor authentication on your registrar account for maximum protection.
Transfer lock is a simple but highly effective measure against unauthorized domain transfers. Always keep it enabled as part of your domain security strategy.