A domain lock (transfer lock, also known as Registrar Lock) is a security feature that prevents your domain name from being transferred to another provider without your knowledge or consent.

How does it work?

If a domain is locked, transfer requests are automatically rejected by the registry, even if someone obtains the EPP code for the domain. The lock status is also visible in the WHOIS data: for a locked domain, the status clientTransferProhibited appears (see the meaning of statuses).

Unlocking a domain can usually be done via the client portal in just a few clicks, and takes effect immediately with most registrars.

Why is this important?

Domain locking provides protection against domain hijacking, whereby someone attempts to unlawfully take over another person’s domain name, often using data obtained from hacked email accounts or through social engineering. If a domain is lost, both the website and email accounts are lost, and recovering it can involve lengthy legal proceedings. When a domain is locked, this type of attack becomes significantly more difficult.

When should it be unlocked?

You should only unlock the domain if you actually wish to transfer it to another provider. The transfer process is described in the article on domain transfers. Once the transfer is complete, please re-enable the lock with the new registrar.

The lock does not prevent the normal use of the domain: the name servers and DNS records can be freely modified even whilst locked, and renewal proceeds without interruption.

Default status

With most domain registrars, including aWh, domain names are locked by default following registration or transfer, and the domain holder can change this at any time via the client portal.

Protection of .hu domains

There is no separate ‘transfer lock’ status for .hu domains: transfer is protected by the fact that the domain authorisation code can only be requested following two-factor authentication of the domain holder (via email and telephone confirmation). It is therefore important that the email address and telephone number associated with the domain are always up to date, and that only you have access to them.

The registry’s optional registry lock service provides enhanced protection: whilst this is active, the domain’s registrar and domain holder cannot be changed, and no authorisation code can be requested. The domain holder can enable or disable the registry lock on the start.domain.hu website without the registrar’s involvement, using a digitally signed document. It is worth considering for important, valuable domains.