A registry lock is an additional protection set at the domain registry, not only at the registrar. When enabled, changes such as nameserver updates, transfers or deletion are blocked until the registrar and registry verify them through a separate, usually manual, procedure.
Why it matters
Ordinary registrar locks stop transfers, but anyone who takes over your registrar account can often remove them in a few clicks. Domain hijacking redirects your website and mail, so high-value domains use a stronger layer. In domain status output, registry-level locks appear as serverUpdateProhibited, serverDeleteProhibited and serverTransferProhibited, while registrar-level locks use the client prefix.
Example
whois example.com | grep -i status
Domain Status: clientTransferProhibited
Domain Status: serverUpdateProhibited
Domain Status: serverDeleteProhibited
Domain Status: serverTransferProhibitedAvailability, price and process depend on the registrar and the TLD, and many TLDs do not offer the service, so check with your registrar.
Common mistakes
- Assuming the registrar's "domain lock" toggle is a registry lock.
- Enabling it and then being unable to make a quick DNS emergency change because the unlock takes time.
- Skipping basic account security such as two-factor authentication.
Related
Get notified when this term updates
Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.
This page is general information written by our editorial team and updated when documentation changes. Servers and providers differ, so test changes safely first. See our editorial policy and disclaimer.