What Does clientTransferProhibited Mean in WHOIS?
The clientTransferProhibited status code simply means your domain is currently locked by your registrar to prevent unauthorized transfers to another company. This is a standard security feature, often called "Registrar Lock," that protects your domain from being hijacked. It is completely normal, and you can disable it in your dashboard if you wish to transfer the domain.
What Are EPP Domain Status Codes?
EPP (Extensible Provisioning Protocol) status codes appear in WHOIS results to indicate your domain's current state. They look intimidating but simply describe what actions are allowed or blocked.
Status Code | What It Means |
clientTransferProhibited | Registrar lock, transfers blocked |
clientUpdateProhibited | WHOIS updates blocked |
clientDeleteProhibited | Deletion blocked |
ok | No restrictions active |
"Client" prefix: Set by your registrar at your request. You control these.
"Server" prefix: Set by the registry (Verisign, etc.) or ICANN. You don't control these directly.
The word "Prohibited" sounds alarming, but it means "protected." These codes prevent unwanted changes, not punish you.
Why You Want This Status Code
clientTransferProhibited is your domain's security shield:
Anti-hijacking: If someone gains access to your registrar account, they can't immediately transfer the domain away. They must first unlock it, giving you time to detect and respond.
Accidental transfer prevention: Blocks transfers initiated by mistake or through phishing attempts.
Default best practice: Most registrars enable this automatically on new domains. It's the industry-standard security posture.
No downside: The lock doesn't affect your website, email, or DNS. It only blocks registrar-to-registrar transfers.
Leave it enabled unless you're actively transferring. There's no reason to disable it otherwise.
Client vs Server Status Codes
Code Type | Who Sets It | Can You Remove It? |
clientTransferProhibited | Your registrar (you) | Yes, toggle in dashboard |
serverTransferProhibited | Registry/ICANN | No, must resolve underlying issue |
clientTransferProhibited: Normal. You enabled it (or it was enabled by default). Disable anytime in your registrar dashboard.
serverTransferProhibited: Applied by the registry. Common reasons:
- 60-day ICANN lock after registration or transfer
- Legal dispute or UDRP proceeding
- Registry compliance issue
If you see serverTransferProhibited, check if you're within 60 days of registration or recent transfer. Otherwise, contact your registrar, you may have a compliance issue.
How to Unlock Your Domain
Step 1: Log into Your Registrar Access your NameSilo account and navigate to Domain Manager.
Step 2: Select Your Domain Click on the domain you want to unlock.
Step 3: Toggle Registrar Lock Find the lock/unlock option under the quick settings tab
Step 4: Verify in WHOIS Run a WHOIS lookup after a few minutes. clientTransferProhibited should disappear.
Step 5: Proceed with Transfer Now request your EPP code and initiate transfer at your new registrar.
For detailed instructions, see Domain Locking/Unlocking.
Common Mistakes
Initiating transfer without unlocking: Transfer requests auto-fail if the domain is locked. Always check WHOIS status before starting.
Leaving domain unlocked: After canceling a transfer or deciding not to move, re-enable the lock. Unlocked domains are vulnerable.
Confusing client with server locks: If you see serverTransferProhibited, unlocking in your dashboard won't help. That's a registry-level restriction.
Panicking at "Prohibited": The word sounds bad but means protected. It's a feature, not a problem.
What This Means for You
NameSilo's Domain Manager provides one-click lock control. The padlock icon instantly toggles clientTransferProhibited status.
Check your domain's current status anytime via WHOIS lookup. Seeing clientTransferProhibited? Good, your domain is protected.
Frequently Asked Questions
What does clientTransferProhibited mean?
Your registrar has locked the domain to prevent unauthorized transfers.
Is clientTransferProhibited bad?
No. It's a security feature protecting your domain from theft.
How do I remove clientTransferProhibited?
Toggle off Registrar Lock in your domain dashboard.
What does clientUpdateProhibited mean?
WHOIS contact updates are blocked until you disable it.
Why is my domain locked?
Most registrars enable transfer lock by default for security.
Can a locked domain be hacked?
The lock prevents transfers, not all attacks. Use 2FA for account security.
What is a registrar lock?
A setting that adds clientTransferProhibited status, blocking transfers.
How long does it take to unlock a domain?
Instant at your registrar. WHOIS may take minutes to reflect change.
NameSilo Staff
The NameSilo staff of writers worked together on this post. It was a combination of efforts from our passionate writers that produce content to educate and provide insights for all our readers.
