Registrar Lock vs Registry Lock
What a Domain Lock Does
A domain lock is a setting that blocks certain changes to a domain until the lock is removed. The most common type stops the domain from being transferred to another registrar. Locks protect against unauthorized moves, and they work alongside the auth code, which a transfer also requires.
Each lock is recorded as a status on the domain, which the registry stores and which lookup tools such as WHOIS show. The full list of statuses is explained in EPP status codes.
Registrar Lock and Registry Lock Compared
A registrar lock, sometimes called a transfer lock, is switched on or off in the registrar's control panel. It blocks transfers to other registrars. Many registrars turn it on by default, so owners should check it before a move and switch it off only when they plan to transfer.
A registry lock is stronger. It is set at the registry level, usually for high-value names, and it adds a manual verification step for changes, often through a phone call or signed documents. Not every registrar offers it, and changes take longer because a person must check each request.
The 60-Day Lock After Registration or Changes
ICANN, the organization that coordinates the domain system, has rules that block transfers for a period after some events. A newly registered domain generally cannot be transferred for 60 days. A similar 60-day block can apply after a change to the registrant's contact details, which slows down hijacking attempts. Some registrars let the registrant opt out of the post-change block, but opting out removes that safety margin.
These rules explain why a transfer can fail with a lock message even when the owner has the correct auth code. The answer is to wait out the period or contact the registrar, not to look for a way around the rule. Locks are one defence against domain hijacking.
Frequently asked questions
Should I turn on a registrar lock?
For most owners, yes. A registrar lock adds a simple barrier against unauthorized transfers. Switch it off only when you intend to move the domain, and turn it back on once the move is finished.
Does a registry lock stop a domain from expiring?
No. Locks prevent transfers and certain changes, but they do not renew a domain. A locked domain can still expire if the renewal is missed, so the renewal date still needs attention.
Why can't I transfer a domain I just registered?
ICANN rules generally block transfers for 60 days after a new registration, so the domain must stay with the first registrar during that time. The same rule can apply after certain contact changes. Once the period ends, the lock lifts and a normal transfer can begin.