clientUpdateProhibited: registrar has locked the domain against changes
clientUpdateProhibited is a registrar-applied EPP status that prevents updates to nameservers, contact information, and other domain attributes. The registrant can disable it from the registrar dashboard. It is typically combined with clientTransferProhibited and clientDeleteProhibited as part of a "registrar lock" feature.
Standard security posture. Tells you nothing about availability.
Quick facts
What this status means
When this status is active the registrar will reject any EPP update commands for the domain — change of nameservers, contact updates, DNSSEC changes, etc. The registrant must disable the lock first.
This is part of the standard "registrar lock" or "domain lock" feature most registrars expose to customers. Premium domain holders often enable the full lock set (transfer, update, delete) for security.
For buyers this status carries no availability signal. It is just a sign the registrant takes domain security seriously.
Timeline
- 01
Applied
Registrar sets the status, often as part of a "lock domain" feature in customer dashboard.
- 02
Active
No updates possible until the registrant disables the lock.
- 03
Removed
Registrant disables in dashboard, makes their changes, then typically re-enables.
What to do if you are watching a domain in this status
- Ignore for availability. This is a normal active-registration status.
Real-world examples
- Premium .com domains often have clientUpdateProhibited as part of their standard lock set.
- Enterprise customers may apply this across their entire portfolio to reduce social-engineering risk.
Frequently asked questions
Why would a registrant enable clientUpdateProhibited?
Security. It prevents an attacker who gained registrar account access from changing nameservers or contact info to take over the domain.
How does the registrant remove it?
Disable "registrar lock" in the registrar dashboard. The status is removed within minutes.
Does this prevent renewal?
No. Renewals are not "updates" in EPP terms. The lock only blocks domain attribute changes.
How is this different from serverUpdateProhibited?
clientUpdateProhibited is registrar-applied and registrant-removable. serverUpdateProhibited is registry-applied and only the registry can remove it.
Will this affect a domain I am trying to buy?
Not directly. The seller will need to disable it before transferring contact info, but the lock itself is not an obstacle.
Related statuses
- serverUpdateProhibitedserverUpdateProhibited is a registry-applied EPP status that blocks updates to the domain.…
- clientTransferProhibitedclientTransferProhibited is a registrar-applied EPP status that blocks the domain from bei…
- clientDeleteProhibitedclientDeleteProhibited is a registrar-applied EPP status that blocks the domain from being…
- okThe "ok" EPP status indicates a domain in normal operating state — registered, present in …
References
Watch a domain you want to buy — snooze.domains tracks the lifecycle and emails you when it changes status. Free, up to 100 domains. Start watching — free