EPP STATUS CODESUPDATED 2026-05-06

clientTransferProhibited: registrar has locked the domain against transfer

clientTransferProhibited is a registrar-applied EPP status that blocks the domain from being transferred to another registrar. It is the standard "transfer lock" most registrars enable by default for security. The registrant can disable it from their registrar dashboard at any time.

clientTransferProhibitedTakenIndefinite (registrant-controlled via registrar)low buyer signal
TakenGraceExpiredRedemptionPending deleteAvailable

Tells you nothing about availability. Most active domains have this set.

Quick facts

EPP codeclientTransferProhibited
Categorylock
Typical durationIndefinite (registrant-controlled via registrar)
Buyer signal strengthlow

What this status means

Transfer locks exist to prevent domain hijacking. With clientTransferProhibited set, an attacker who steals registrar account credentials cannot immediately move the domain to a different registrar — they would need to disable the lock first, which usually requires a second confirmation step.

Registrars set this status by default on most new registrations. Removing it is a normal step in the legitimate transfer process: registrant logs into the losing registrar, disables the lock, requests an authcode, supplies it to the gaining registrar.

For buyers, this status appears on essentially every actively-managed domain. It tells you nothing about whether the registrant intends to keep the domain — it just means the registrar has the standard security lock enabled.

Timeline

  1. 01

    Set

    Registrar applies clientTransferProhibited at registration or transfer-in. Default for most registrars.

  2. 02

    Active

    Status persists indefinitely as long as the registrant does not disable it.

  3. 03

    Removed for transfer

    Registrant disables in registrar dashboard, transfer proceeds, status is reapplied at gaining registrar.

What to do if you are watching a domain in this status

  • Ignore for availability purposes. This status does not predict drops.
  • If you are negotiating a private domain sale, this is the lock the seller will need to disable before the transfer.

Real-world examples

  • A standard, healthy registration: status field shows "ok", "clientTransferProhibited". Means everything is normal.
  • A premium domain: typically shows clientTransferProhibited along with clientUpdateProhibited and clientDeleteProhibited — the registrar has applied the full lock set.

Frequently asked questions

Does clientTransferProhibited mean a domain cannot be sold?

No. The owner can disable it whenever they want. It just prevents a transfer-in-progress without owner action.

Why do I see this on every domain I look up?

Most registrars apply it by default. It is the standard security posture for active registrations.

Can the registrar refuse to remove it?

Only if there is an unpaid invoice, a 60-day post-transfer cooldown, or a pending dispute. Otherwise the registrant has the right to disable it at will.

How is this different from serverTransferProhibited?

clientTransferProhibited is set by the registrar and disabled by the registrant. serverTransferProhibited is set by the registry and only the registry can disable it. server-side locks usually indicate legal or compliance action.

Does this affect availability for buyers?

Not directly. This is a normal active-registration status. It does not signal drops or sales.

Related statuses

References

Watch a domain you want to buy — snooze.domains tracks the lifecycle and emails you when it changes status. Free, up to 100 domains. Start watching — free