A registry lock is an additional protection set at the domain registry, not only at the registrar. When enabled, changes such as nameserver updates, transfers or deletion are blocked until the registrar and registry verify them through a separate, usually manual, procedure.
Why it matters
Ordinary registrar locks stop transfers, but anyone who takes over your registrar account can often remove them in a few clicks. Domain hijacking redirects your website and mail, so high-value domains use a stronger layer. In domain status output, registry-level locks appear as serverUpdateProhibited, serverDeleteProhibited and serverTransferProhibited, while registrar-level locks use the client prefix.
Example
whois example.com | grep -i status
Domain Status: clientTransferProhibited
Domain Status: serverUpdateProhibited
Domain Status: serverDeleteProhibited
Domain Status: serverTransferProhibited
Availability, price and process depend on the registrar and the TLD, and many TLDs do not offer the service, so check with your registrar.
Common mistakes
- Assuming the registrar's "domain lock" toggle is a registry lock.
- Enabling it and then being unable to make a quick DNS emergency change because the unlock takes time.
- Skipping basic account security such as two-factor authentication.
Related
Get notified when this term updates
Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.
यह पेज सामान्य जानकारी है, जिसे हमारी संपादकीय टीम ने लिखा है और दस्तावेज़ीकरण बदलने पर अपडेट किया जाता है। सर्वर और प्रदाता अलग-अलग होते हैं, इसलिए बदलाव पहले सुरक्षित तरीके से जाँचें। देखें: संपादकीय नीति और अस्वीकरण.