You've decided to transfer your domain and initiated the process, only to discover you "cannot transfer" due to a lock. This restriction feels frustrating when you own the domain and have legitimate reasons for moving it, but understanding why locks exist and which type affects your domain helps you navigate the situation. Two distinct lock mechanisms protect domains, the registrar lock you can toggle manually, and the ICANN-mandated 60-day lock that cannot be bypassed under most circumstances.
Why Transfer Locks Exist
Transfer locks prevent unauthorized domain hijacking and theft. Without these protections, attackers who gained access to your email or account credentials could quickly transfer your domains to different registrars, making recovery difficult or impossible. The locks create security checkpoints that give legitimate owners time to notice and stop unauthorized transfer attempts before they complete.
The 60-day lock specifically prevents rapid successive transfers that could obscure ownership trails and make it nearly impossible for legitimate owners to track and recover stolen domains. By forcing a waiting period after certain events, ICANN ensures domains remain stable and traceable even during ownership transitions or contact updates.
The 60-Day New Registration Lock
ICANN policy mandates a 60-day transfer lock immediately following new domain registration or a recent transfer. When you register a brand new domain, you cannot transfer it to a different registrar until 60 days have passed from the registration date. This lock is absolute, no registrar can override it, and no exceptions exist regardless of circumstances.
This restriction protects the domain ecosystem from registration abuse where bad actors could rapidly cycle domains through multiple registrars to evade detection or exploit promotional pricing. The 60-day window ensures registrars can verify new registrations and address any issues before domains move elsewhere.
Check your domain's registration date in WHOIS records before planning transfers. If you registered your domain recently, calculate when 60 days from registration will pass and plan your transfer accordingly. Attempting to initiate transfers before this period expires results in automatic rejection regardless of all other factors being correct.
The 60-day counter starts from the exact registration completion date, not from when you first began the registration process. If you registered your domain on January 1st at 3:00 PM, the 60-day lock expires on March 2nd at 3:00 PM. Some registrars display when transfers become available in your domain management panel, eliminating the need for manual calculation.
The 60-Day Contact Change Lock
Changing your domain's registrant contact information triggers another 60-day transfer lock. This lock applies specifically to changes in the registrant name, organization, or email address, the fields that identify the legal owner of the domain. Updating administrative or technical contact information typically doesn't trigger this lock, only changes to the registrant contact.
This protection prevents domain hijackers from changing ownership information and immediately transferring domains before legitimate owners can respond. The 60-day window gives domain owners time to notice unauthorized contact changes and reverse them before theft becomes irreversible through transfer.
Critical timing consideration: Never update your registrant contact information immediately before planning a transfer. If you change your name or email on Monday and try to initiate a transfer on Tuesday, you've triggered a 60-day lock that prevents the transfer until that period expires. Always complete transfers first, then update contact information at your new registrar after the transfer completes.
The lock applies even to legitimate contact updates you make yourself. ICANN's policy doesn't distinguish between unauthorized changes by attackers and intentional changes by legitimate owners, any registrant information modification triggers the 60-day lock automatically.
Some registrars offer opt-out mechanisms for the contact change lock if you can verify you're making legitimate changes and wish to waive the protection. However, not all registrars implement this opt-out, and even when available, it requires affirmative action rather than being automatic.
The ClientTransferProhibited Status
The ClientTransferProhibited status, commonly called a "registrar lock" or "domain lock," represents a security setting you control through your registrar's interface. Unlike the 60-day locks mandated by ICANN policy, you can toggle this lock on or off at any time through your domain management panel.
When enabled, ClientTransferProhibited prevents all transfer requests from processing, even if someone obtains your EPP authorization code. This lock serves as your first line of defense against unauthorized transfers. Most registrars enable this lock by default when you register or transfer domains, requiring you to manually disable it before legitimate transfers can proceed.
To transfer your domain, you must remove the ClientTransferProhibited status at your current registrar before initiating the transfer at your new registrar. The process varies by registrar but typically involves:
- Logging into your account at your current registrar
- Navigating to your domain's management or security settings
- Finding the "Domain Lock” toggle
- Disabling the lock and confirming your action
After unlocking your domain, the status change propagates through registry systems within minutes to hours. You can verify the lock removal by checking your domain's EPP status codes through any WHOIS lookup service; the absence of "clientTransferProhibited" in the status list confirms the domain is unlocked.
The registrar lock automatically reapplies after transfers complete, securing your domain at the new registrar. Some registrars also automatically re-lock domains if you unlock them but don't transfer within a certain timeframe, protecting against accidental security exposure.
What This Means for You
Before purchasing domain transfers as part of business acquisitions or marketplace transactions, verify the domain isn't within a 60-day lock period. Check the WHOIS registration date and confirm no recent registrant contact changes occurred. Discovering a 60-day lock after negotiating a purchase and paying transfer fees creates frustrating delays that could have been avoided through upfront verification.
Plan contact information updates strategically around transfer timing. If you need to update your registrant details and plan to transfer the domain, complete the transfer first, then update contact information at your new registrar. This sequencing avoids triggering the 60-day lock that would delay your transfer by two months.
Unlock your domain at your current registrar before initiating the transfer at NameSilo. The transfer process requires both the correct EPP code and an unlocked domain status. Having one without the other results in transfer failure or delays.
When the 60-day ICANN lock applies, no workaround exists, you must wait for the full period to expire. Use this waiting time productively by preparing other transfer requirements: obtaining your EPP code, verifying your administrative email access, and planning any website or DNS changes you'll make after the transfer completes.
Moving Forward
Understanding the distinction between registrar locks you control and ICANN's mandatory 60-day locks prevents confusion when transfers don't proceed as expected. The registrar lock requires simple removal through your account settings, while the 60-day locks demand patience as they cannot be bypassed regardless of circumstances.
Start your transfer at the NameSilo transfer tool only after verifying your domain isn't subject to a 60-day lock and after removing any registrar locks at your current registrar. These preparatory steps ensure smooth transfer processing without avoidable delays from overlooked lock statuses. .png&w=3840&q=75)
.png&w=2048&q=75)
.png&w=3840&q=75)
