clientTransferProhibited: registrar has locked the domain against transfer
clientTransferProhibited is a registrar-applied EPP status that blocks the domain from being transferred to another registrar. It is the standard "transfer lock" most registrars enable by default for security. The registrant can disable it from their registrar dashboard at any time.
Tells you nothing about availability. Most active domains have this set.
Quick facts
What this status means
Transfer locks exist to prevent domain hijacking. With clientTransferProhibited set, an attacker who steals registrar account credentials cannot immediately move the domain to a different registrar — they would need to disable the lock first, which usually requires a second confirmation step.
Registrars set this status by default on most new registrations. Removing it is a normal step in the legitimate transfer process: registrant logs into the losing registrar, disables the lock, requests an authcode, supplies it to the gaining registrar.
For buyers, this status appears on essentially every actively-managed domain. It tells you nothing about whether the registrant intends to keep the domain — it just means the registrar has the standard security lock enabled.
Timeline
- 01
Set
Registrar applies clientTransferProhibited at registration or transfer-in. Default for most registrars.
- 02
Active
Status persists indefinitely as long as the registrant does not disable it.
- 03
Removed for transfer
Registrant disables in registrar dashboard, transfer proceeds, status is reapplied at gaining registrar.
What to do if you are watching a domain in this status
- Ignore for availability purposes. This status does not predict drops.
- If you are negotiating a private domain sale, this is the lock the seller will need to disable before the transfer.
Real-world examples
- A standard, healthy registration: status field shows "ok", "clientTransferProhibited". Means everything is normal.
- A premium domain: typically shows clientTransferProhibited along with clientUpdateProhibited and clientDeleteProhibited — the registrar has applied the full lock set.
Frequently asked questions
Does clientTransferProhibited mean a domain cannot be sold?
No. The owner can disable it whenever they want. It just prevents a transfer-in-progress without owner action.
Why do I see this on every domain I look up?
Most registrars apply it by default. It is the standard security posture for active registrations.
Can the registrar refuse to remove it?
Only if there is an unpaid invoice, a 60-day post-transfer cooldown, or a pending dispute. Otherwise the registrant has the right to disable it at will.
How is this different from serverTransferProhibited?
clientTransferProhibited is set by the registrar and disabled by the registrant. serverTransferProhibited is set by the registry and only the registry can disable it. server-side locks usually indicate legal or compliance action.
Does this affect availability for buyers?
Not directly. This is a normal active-registration status. It does not signal drops or sales.
Related statuses
- serverTransferProhibitedserverTransferProhibited is a registry-applied EPP status that blocks transfer at the regi…
- clientUpdateProhibitedclientUpdateProhibited is a registrar-applied EPP status that prevents updates to nameserv…
- clientDeleteProhibitedclientDeleteProhibited is a registrar-applied EPP status that blocks the domain from being…
- okThe "ok" EPP status indicates a domain in normal operating state — registered, present in …
References
Watch a domain you want to buy — snooze.domains tracks the lifecycle and emails you when it changes status. Free, up to 100 domains. Start watching — free