clientTransferProhibitedHow to unlock a domain for transfer in 7 steps
- Check the domain age and transfer history. Confirm that at least 60 days have passed since the initial registration and the last registrar-to-registrar transfer. Some TLDs follow different registry rules, so check the exact extension when it is not a common gTLD.
- Confirm that the domain is active. Resolve expiration, payment, dispute, abuse, court-order or registry-hold issues before trying to unlock it. A simple registrar-lock toggle cannot clear these restrictions.
- Verify your contact email. Make sure you can receive messages at the registrant or administrative contact address shown in the registrar account. Transfer approval or security verification may use that address.
- Turn off the transfer lock. Open the domain's security, sharing or transfer settings and disable Domain Lock, Registrar Lock or Transfer Lock. Registrars use different labels for the same protective control.
- Recheck the public status. Use an RDAP or ICANN Lookup result to confirm that
clientTransferProhibitedis gone. The change can take a short time to appear, so refresh after a few minutes if necessary. - Request the Auth/EPP code. Generate or request a fresh authorization code only when you are ready to transfer. Treat it like a temporary password and never place it in a public screenshot, support forum or shared document.
- Start and approve the transfer. Enter the domain and authorization code at the new registrar, review the transfer and renewal price, pay when required, and approve any release email from the old registrar.
Why is my domain locked for transfer?
A domain can look “locked” for several different reasons. The most important distinction is between a security setting you control and a policy or status restriction you cannot remove yourself. Turning off the wrong switch repeatedly will not help if the domain is still inside a mandatory waiting period.
| Lock or status | Can you turn it off? | What to do |
|---|---|---|
| Registrar or transfer lock | Usually yes | Disable the lock in the current registrar's domain security or transfer settings. |
| 60-day registration lock | No | Wait until 60 days have passed after the domain was first registered. |
| 60-day post-transfer lock | No | Wait until 60 days have passed after the previous registrar transfer. |
| Registrant-change lock | Sometimes avoidable before the change | Check the registrar's change-of-registrant policy. If the lock is already active, ask the registrar for the exact end date. |
| Expired or redemption status | Not with the lock toggle | Renew or restore the domain first, then confirm when transfer eligibility returns. |
| Registry, dispute or court hold | No | Resolve the underlying registry, legal, abuse or ownership issue with the registrar. |
How to check if a domain is unlocked and ready for transfer
Do not rely only on a green toggle in the account dashboard. Check the public registration status as a second signal. In an RDAP or ICANN Lookup result, clientTransferProhibited normally means the registrar lock is still active. If that status disappears but the transfer still fails, look for other server or registry status codes, the registration date, the last transfer date, expiration, and any registrar notices.
A ready-to-transfer domain should normally meet all of these conditions:
- The domain is active and not in redemption, pending delete or a dispute-related hold.
- More than 60 days have passed since registration and the previous registrar transfer.
- The current registrar lock is off and the public status has updated.
- You control the account and can receive security or approval messages.
- You have a current Auth/EPP code and the new registrar supports the TLD.
- You have reviewed the domain transfer cost and the next renewal price, not only the first transfer offer.
Do you need to change nameservers or DNS before unlocking?
No. Unlocking a domain changes a registrar security status; it does not move website files, email or DNS records. A normal registrar transfer can keep the existing nameservers in place, which is usually the lowest-risk approach. Do not change nameservers merely because you are turning off the transfer lock.
The main exception is a registrar with a product-specific DNS requirement. For example, moving registration to Cloudflare Registrar requires Cloudflare authoritative DNS. If that is your target, use the dedicated Namecheap to Cloudflare transfer guide rather than applying a generic sequence blindly. Whichever path you use, inventory A, AAAA, CNAME, MX and TXT records before any nameserver change.
What if the unlock switch is missing or turns back on?
First confirm that you are signed in to the registrant account rather than a hosting, delegated-access or reseller view. Some registrars hide transfer controls when the account has a security hold, the domain is too new, contact verification is incomplete, or a registrant change is pending. A lock can also be re-enabled automatically after you cancel a transfer or after a short security window.
Contact the current registrar and ask for three specific items: the exact transfer status code, the policy reason for the restriction, and the date or action that will make the domain eligible. Avoid a vague request such as “please unlock it,” because support may only repeat the dashboard steps without identifying the actual blocker.
When should you wait instead of transferring?
Delay the move when the domain is business-critical and close to expiration, when you cannot verify DNS and email ownership, or when the price saving is too small to justify timing risk. Renewing first can be the safer decision, but check the losing registrar's post-renewal transfer rules and whether the expected transfer-year extension will apply. Use the domain renewal cost calculator to compare a renewal-first path with an immediate transfer.
Domain transfer lock FAQ
How do I turn off a domain transfer lock?
Sign in to the current registrar, open the domain security or transfer settings, and disable Domain Lock, Registrar Lock or Transfer Lock. Then check RDAP or ICANN Lookup to confirm clientTransferProhibited has cleared.
How long does it take for a domain to unlock?
The account setting often changes immediately, while the public status may take several minutes or longer to update. A 60-day policy lock will not clear until its required end date.
Can I unlock a domain before 60 days?
You may be able to turn off the dashboard lock, but a domain registered or transferred within the last 60 days is normally still ineligible for an inter-registrar transfer under the current policy.
How can I check if my domain is unlocked?
Check the registrar dashboard and an RDAP or ICANN Lookup result. The domain is not fully unlocked while the status includes clientTransferProhibited.
What is an EPP or Auth code?
It is the transfer authorization code used to prove that the person starting the move controls the domain. Request a fresh code from the current registrar and keep it private.
Does unlocking a domain affect my website or email?
No. Turning off the registrar lock does not change hosting, DNS records, nameservers or email. Those services normally continue unless you separately change their configuration.
Why is my domain still locked after I disabled transfer lock?
The public status may not have updated yet, or another restriction may apply, such as a 60-day lock, expiration, registrant-change lock, dispute, registry hold or account security review.
Should I unlock a domain long before transferring?
Keep it locked until you are ready to move. Unlocking briefly for the transfer reduces the time the domain is exposed to an unauthorized transfer attempt.
Official policy references
This guide was reviewed on 2026-07-30. The ICANN Transfer Policy explains inter-registrar transfer requirements, authorization codes and denial reasons. The ICANN registrant transfer FAQ explains the common 60-day restrictions. Registry and ccTLD rules can differ, so verify the target extension and both registrars before acting.
Summary
The safest answer to how to unlock a domain for transfer is to disable the registrar lock, verify that clientTransferProhibited has cleared, request a fresh Auth/EPP code, and submit it to the new registrar. If the transfer remains blocked, identify whether the cause is a 60-day waiting period, expiration, a registrant-change rule or another registry status. Keep DNS stable unless the receiving registrar explicitly requires a nameserver change.