Unlock Domains Before Transferring

Last Updated: October 24, 2025

Transferring a domain between registrars requires unlocking it first. Domain locks are security features that prevent unauthorized transfers, but they must be disabled when you want to move your domain. This guide walks you through the complete unlocking and transfer process.

Understanding Domain Locks

What is a Domain Lock?

Domain Lock (Transfer Lock):

Security feature preventing unauthorized transfers
Enabled by default on most domains
Must be manually disabled to transfer
Protects against domain hijacking
No cost to lock/unlock

Why Locks Exist:

Prevents domain theft
Stops unauthorized transfers
Protects valuable domains
Requires owner action to move
Industry standard security

Types of Domain Locks

Registrar Lock (Client Lock)

Most Common Type:

Status Codes:

clientTransferProhibited
clientUpdateProhibited
clientDeleteProhibited

What It Blocks:

❌ Transfers to other registrars
❌ DNS changes (sometimes)
❌ Contact info updates (sometimes)
❌ Accidental deletion

Control:

✅ You can unlock via dashboard
✅ No waiting period
✅ Free to unlock
✅ Instant effect

Registry Lock

Maximum Security:

Status Codes:

serverTransferProhibited
serverUpdateProhibited
serverDeleteProhibited

What It Blocks:

❌ All transfers
❌ All modifications
❌ DNS changes
❌ Any updates

Control:

⚠️ Requires contacting registrar
⚠️ Manual verification needed
⚠️ May take 24-48 hours
💰 Usually paid service ($20-100/year)

Used For:

High-value domains
Enterprise domains
Critical business domains
Maximum protection needed

Checking Your Domain Lock Status

Method 1: Your Registrar Dashboard

Step-by-Step:

Log into your account
- Go to your current registrar
- Sign in with credentials
Navigate to Domains
- Click "Domains" or "My Domains"
- Find domain list
Select Your Domain
- Click on domain name
- Open domain details
Check Lock Status
- Look for "Transfer Lock"
- Or "Domain Lock"
- Status: Locked 🔒 or Unlocked 🔓

Common Labels:

"Transfer Lock: ON"
"Registrar Lock: Enabled"
"Protected: Yes"
Status: "clientTransferProhibited"

Method 2: WHOIS Lookup

Using WHOIS:

Online Tool:

Visit whois.pupam.com or similar
Enter your domain name
Click "Search" or "Lookup"
Review results

Command Line:

whois example.com

Look For:

Domain Status: clientTransferProhibited
Domain Status: clientUpdateProhibited
Domain Status: clientDeleteProhibited

If You See These:

Domain is locked
Must unlock to transfer
Normal security status

If You See:

Domain Status: ok

Domain is unlocked
Ready to transfer
No locks applied

Method 3: Transfer Check Tool

Use Our Tool:

Transfer Readiness Checker:

Go to transfer-check.pupam.com
Enter domain name
Get instant status report

Report Includes:

Lock status
Transfer eligibility
Auth code status
Contact email accessibility
Potential issues
Next steps

Why You Must Unlock Before Transfer

Transfer Requirements

Standard Transfer Process:

1. Domain must be unlocked
2. Auth code must be obtained
3. Contact email must be accessible
4. Domain must be at least 60 days old
5. Not expired or in redemption
6. Not recently transferred (60 days)

If Domain is Locked:

❌ Transfer will fail immediately
❌ New registrar can't initiate
❌ Auth code won't work
❌ Waste time and effort

Analogy: Like trying to drive away in a car with the steering wheel locked. The key (auth code) won't help if the lock is engaged!

Security vs. Accessibility

Why Locked by Default:

Prevents hijacking
Stops accidental transfers
Protects your investment
Requires deliberate action

When to Unlock:

✅ Intentional transfer to new registrar
✅ Consolidating domains
✅ Better pricing elsewhere
✅ Improved services needed

When to Keep Locked:

✅ Not transferring
✅ Maximum security desired
✅ High-value domain
✅ Recent hijacking attempts

Best Practice:

Keep locked normally
Unlock only when transferring
Re-lock at new registrar immediately
Monitor during transfer

How to Unlock Your Domain

Step-by-Step Unlocking Process

Step 1: Access Domain Settings

Log Into Current Registrar:

Go to registrar website
- Where domain is currently registered
- GoDaddy, Namecheap, Google Domains, etc.
Sign in to account
- Email and password
- Two-factor authentication if enabled
- Verify identity
Navigate to domain management
- "My Domains"
- "Domain List"
- "Manage Domains"
Select your domain
- Click domain name
- Or click "Manage" button
- Open domain settings

Step 2: Locate Lock Settings

Find Transfer Lock:

Common Locations:

Option A: Domain Settings Tab

Domain Details
├── General
├── DNS
├── Transfer Settings ← Here
│   └── Transfer Lock
├── Privacy
└── Advanced

Option B: Security Section

Security & Protection
├── Two-Factor Auth
├── Domain Lock ← Here
├── Privacy Protection
└── Security Settings

Option C: Transfer Section

Transfer Domain
├── Transfer Status
├── Domain Lock ← Here
├── Authorization Code
└── Transfer Out

Look For Labels:

"Transfer Lock"
"Registrar Lock"
"Domain Lock"
"Protection Status"
"Transfer Protection"

Step 3: Disable the Lock

Unlock the Domain:

Standard Process:

Find Lock Toggle
- Usually a switch or checkbox
- May be a button "Unlock"
Click to Disable
- Toggle OFF
- Uncheck box
- Click "Unlock Domain"
Confirm Action
- May ask "Are you sure?"
- Click "Yes" or "Confirm"
- May require password re-entry
Wait for Confirmation
- Usually instant
- May take 5-15 minutes
- Check email for confirmation

Visual Examples:

Example 1: Toggle Switch

Transfer Lock:  [ON] ← Click to turn OFF
               [OFF] ← Now unlocked

Example 2: Checkbox

☑ Keep domain locked ← Uncheck this
☐ Keep domain locked ← Now unlocked

Example 3: Button

Status: Locked 🔒
[Unlock Domain Button] ← Click here
Status: Unlocked 🔓

Step 4: Verify Unlock Status

Confirm It Worked:

Check Dashboard:

Refresh domain details page
Status should show "Unlocked"
Or "Transfer Lock: OFF"
Or lock icon removed

Check WHOIS:

whois example.com

Look for:

Domain Status: ok

(No "clientTransferProhibited")

Or Still Shows Lock:

Wait 15-30 minutes
Refresh WHOIS cache
Try different WHOIS tool
Contact support if still locked

Confirmation Email:

Should receive email notification
"Domain unlock successful"
Confirms lock removed
Keep for records

Common Registrar Instructions

GoDaddy

Unlock Process:

Log into GoDaddy account
Click "Domain Portfolio" or "My Products"
Find domain → Click "DNS" or "Manage"
Scroll to "Additional Settings"
Under "Domain lock" → Toggle OFF
Confirm action

Location: Settings > Additional Settings > Domain lock

Namecheap

Unlock Process:

Sign into Namecheap account
Go to "Domain List"
Click "Manage" next to domain
Find "TRANSFER DOMAIN" section
Click "Unlock" button
Confirm unlock

Location: Domain Details > Sharing & Transfer > Registrar Lock

Google Domains

Unlock Process:

Login to domains.google.com
Click on your domain
Click "Registration settings"
Find "Transfer lock"
Toggle OFF
Confirm

Location: Registration settings > Transfer lock

Cloudflare

Unlock Process:

Log into Cloudflare
Select domain
Click "Configuration"
Scroll to "Transfer"
Click "Unlock domain"
Confirm

Location: Domain Configuration > Transfer > Domain Lock

Hover

Unlock Process:

Login to Hover
Click domain name
Go to "Transfer" tab
Find "Domain Lock"
Click "Disable"
Confirm

Location: Domain > Transfer > Domain Lock

Network Solutions

Unlock Process:

Sign in to account
Go to "My Domain Names"
Click domain
Select "Transfer Domain"
Click "Unlock Domain"
Verify via email link

Location: Domain Details > Transfer > Unlock

Troubleshooting Unlock Issues

Can't Find Unlock Option

Possible Reasons:

Issue 1: Registry Lock Active

More restrictive than registrar lock
Requires contacting support
Cannot self-service unlock

Solution:

Contact registrar support
Request registry lock removal
May take 24-48 hours
Verify identity required

Issue 2: Account Permissions

Not the domain owner
Limited account access
Reseller account restrictions

Solution:

Login with owner account
Request owner to unlock
Add your account as authorized
Contact account admin

Issue 3: Recent Security Alert

Domain locked due to suspicious activity
Automated security measure
Protection from potential hijack

Solution:

Contact support immediately
Verify identity
Explain legitimate transfer reason
May need to wait security hold

Unlock Not Working

If Unlock Fails:

Symptom 1: Toggle Doesn't Save

Click unlock but reverts to locked
No error message
Seems to work but doesn't persist

Try:

Clear browser cache
Try different browser
Disable browser extensions
Use incognito/private mode
Try mobile app if available

Symptom 2: Error Message

"Cannot unlock domain at this time"
"Contact support to unlock"
"Domain ineligible for unlock"

Reasons:

Registry lock active
Security hold
Unpaid balance
Recent changes (60 days)
Legal dispute

Action:

Read error carefully
Contact support with screenshot
Check account billing
Review domain status
Verify no disputes

Symptom 3: Unlock Success but WHOIS Still Shows Locked

Dashboard shows unlocked
WHOIS still shows clientTransferProhibited
Delay in propagation

Wait Time:

Allow 15-60 minutes
WHOIS caches can lag
Try different WHOIS services
Check new registrar's lookup

Domain Recently Registered

60-Day Lock Rule:

ICANN Policy:

Domains locked for 60 days after registration
Also 60 days after transfer
Cannot be overridden
Universal rule

What This Means:

Cannot transfer for 60 days
Even if unlocked
Transfer will be rejected
Must wait

How to Check:

whois example.com

Look for:

Creation Date: 2025-09-01

Calculate 60 days from creation date.

Workaround: None. You must wait 60 days.

Exception: Internal registrar transfers (between accounts at same registrar) may be allowed.

Obtaining Authorization Code

What is an Auth Code?

Authorization Code (Auth Code / EPP Code / Transfer Key):

Unique password for your domain
Required to authorize transfer
Like a key that proves ownership
Different for each domain
Changes when needed

Format:

Usually 10-20 characters
Mix of letters and numbers
Case-sensitive
Example: Abc123XYZ789def456

Security:

Keep confidential
Don't share publicly
Only give to new registrar
Can be regenerated if compromised

How to Get Auth Code

Step-by-Step Process

After Unlocking:

In Domain Settings
- Same place as unlock
- Look for "Authorization Code"
- Or "EPP Code"
- Or "Transfer Code"
Click "Get Auth Code"
- May say "Show Auth Code"
- Or "Email Auth Code"
- Or "Get EPP Code"
Receive Code
- May display immediately
- Or sent to admin email
- Check spam folder
- Arrives within minutes
Copy Code Carefully
- Copy and paste (don't type)
- Include all characters
- Case-sensitive!
- Store securely

Example Display:

Authorization Code: Abc123XYZ789def456

[Copy to Clipboard]

This code expires in 30 days.
Keep it secure and don't share publicly.

Common Auth Code Locations

By Registrar:

GoDaddy:

Domain settings
"Authorization code" section
Click "Email my code"

Namecheap:

Domain details
Under "Sharing & Transfer"
Click "Get EPP Code"

Google Domains:

Registration settings
Under "Transfer out"
Click "Get authorization code"

Cloudflare:

Domain configuration
Transfer section
"Get authorization code"

Auth Code Best Practices

Security Tips:

Do:

✅ Store in password manager
✅ Keep confidential
✅ Only share with new registrar
✅ Regenerate if compromised
✅ Use immediately

Don't:

❌ Post publicly
❌ Share in email signature
❌ Include in screenshots
❌ Give to unknown parties
❌ Reuse old codes

If Code Compromised:

Log into registrar immediately
Regenerate/reset auth code
Lock domain again
Monitor for unauthorized attempts
Contact support if concerned

Complete Transfer Process

Pre-Transfer Checklist

Before Starting Transfer:

Transfer Timeline

What to Expect:

Day 0: Initiate Transfer

At New Registrar:

Sign up/login to new registrar
Start transfer process
Enter domain name
Enter auth code
Complete payment
Submit transfer request

Confirmation:

Transfer initiated
Request sent to registry
Email notifications sent

Day 0 (Within Hours): Approval Email

Check Admin Email:

Transfer authorization email received
From current registrar
Contains approval link
Time-sensitive (usually 5-7 days)

Email Example:

Subject: Approve Domain Transfer for example.com

Your domain example.com has a pending transfer 
request to [New Registrar].

To APPROVE: Click here [link]
To DENY: Click here [link]

You have 5 days to respond. If no action is taken,
the transfer will auto-approve.

Action:

Click "Approve" link
Or login and approve in dashboard
Transfer proceeds immediately

Day 1-5: Transfer Processing

If Approved:

Transfer completes within hours
Domain appears at new registrar
DNS remains unchanged
Services continue working

If No Response:

Transfer auto-approves after 5 days
Some registrars may auto-deny instead
Check your specific registrar policy

If Denied:

Transfer cancelled
Investigate reason
May need to try again

Day 5-7: Transfer Complete

Final Steps:

Domain at new registrar
1 year added to expiration
Update payment methods
Re-enable domain lock
Verify DNS settings
Test all services

During Transfer

What Happens to Services:

Website:

✅ Continues working
✅ No downtime
✅ DNS unchanged
✅ Same nameservers

Email:

✅ Keeps working
✅ Same MX records
✅ No interruption
✅ Same configuration

DNS Records:

✅ All preserved
✅ No changes
✅ Same settings
✅ Automatic transfer

What You Should Monitor:

Check website daily
Monitor email delivery
Verify DNS resolution
Watch for issues

After Transfer Complete

Post-Transfer Tasks:

Immediate (Day 1)

1. Verify Domain Control:

Login to new registrar
Confirm domain appears
Check expiration date (should be +1 year)
Review domain settings

2. Re-Enable Domain Lock:

Security → Domain Lock → Enable

Critical for security
Prevents unauthorized transfers
Do this immediately!

3. Update Payment Method:

Add credit card
Set up auto-renewal
Verify billing info
Prevent expiration

4. Configure Privacy Protection:

Enable WHOIS privacy
Hide personal information
Included free or paid
Turn on if desired

Within Week (Day 1-7)

5. Review DNS Settings:

Verify all records present
Check A, MX, TXT records
Test website accessibility
Confirm email working

6. Update Account Settings:

Change password
Enable 2FA
Add recovery email
Set notification preferences

7. Document Transfer:

Save confirmation emails
Note new registrar details
Update password manager
Record new expiration date

8. Test All Services:

Visit website from multiple devices
Send/receive test emails
Check subdomains
Verify SSL certificates

Within Month (Day 7-30)

9. Monitor for Issues:

Watch email delivery
Check website uptime
Monitor DNS changes
Review account activity

10. Cancel Old Registrar:

If no other domains there
Export any needed data
Close account if desired
Keep records for 1 year

11. Update Documentation:

Internal documentation
Team access
Vendor contacts
Service records

Troubleshooting Transfer Issues

Transfer Rejected

Common Rejection Reasons:

Reason: Domain Locked

Error Message:

"Transfer denied: Domain is locked"
"clientTransferProhibited status detected"

Solution:

Go back to old registrar
Verify unlock completed
Check WHOIS for status
Wait 30 minutes after unlock
Try transfer again

Reason: Invalid Auth Code

Error Message:

"Authorization code invalid"
"EPP code does not match"

Solution:

Get fresh auth code
Copy carefully (case-sensitive)
No extra spaces
Use immediately
Some codes expire (regenerate if old)

Reason: Contact Email Not Accessible

Error Message:

"Cannot verify domain ownership"
"Email not accessible"

Issue:

Transfer approval email bounced
Admin email in WHOIS incorrect
Email account closed

Solution:

Update WHOIS admin email at current registrar
Wait 24 hours for propagation
Verify email works
Restart transfer

Reason: 60-Day Lock

Error Message:

"Domain not eligible for transfer"
"60-day transfer lock in effect"

Explanation:

Recently registered (within 60 days)
Recently transferred (within 60 days)
ICANN policy, cannot override

Solution:

Wait until 60 days pass
Note exact date becomes eligible
Set calendar reminder
Retry after lock expires

Transfer Stuck/Pending

If Transfer Not Progressing:

Day 1-2: Be Patient

Normal:

Some delays expected
Can take 5-7 days
Wait for approval email
Monitor spam folder

Day 3-4: Check Status

At New Registrar:

Login to account
Check transfer status
Read any messages
Note any required actions

At Old Registrar:

Check for approval email
Look in spam/promotions
Check dashboard for pending
May need to manually approve

Day 5+: Take Action

Contact Support:

New registrar support first
Provide domain name
Share auth code
Ask for status update

Contact Old Registrar:

Ask about approval status
Verify no blocks
Request manual approval
Escalate if needed

Transfer Denied by Owner

If Someone Denied Transfer:

Possible Scenarios:

Scenario 1: You Accidentally Denied

Clicked wrong link
Misunderstood email
Thought it was spam

Solution:

Initiate transfer again
Approve promptly this time
No penalty for retry

Scenario 2: Unauthorized Attempt

You didn't initiate transfer
Potential hijacking attempt
Security alert

Action:

Change passwords immediately
Enable 2FA
Contact registrar security
Review account activity
Lock domain securely
Monitor for further attempts

Scenario 3: Other User/Admin

Multiple account users
Lack of communication
Another admin denied

Solution:

Coordinate with team
Single point of contact
Try again with alignment
Document who approves

Special Cases

Transferring Multiple Domains

Bulk Transfer Process:

Most Registrars Support:

Upload domain list
Bulk auth code entry
Mass approval
Single payment

Best Practices:

1. Prepare Spreadsheet:

Domain          | Auth Code         | Status
----------------|-------------------|---------
domain1.com     | Abc123...        | Unlocked
domain2.net     | Def456...        | Unlocked
domain3.org     | Ghi789...        | Unlocked

2. Unlock All First:

Unlock all domains
Get all auth codes
Verify all unlocked
Check all eligible

3. Initiate Bulk Transfer:

Use registrar's bulk tool
Upload CSV if available
Or enter one-by-one
Submit all at once

4. Monitor All Approvals:

Multiple approval emails
Track each domain
Approve all promptly
Note any issues

5. Verify All Complete:

Check all transferred
Re-lock all domains
Update all auto-renewal
Test critical domains

Premium Domains

Special Considerations:

Transfer Implications:

✅ Same process as standard
✅ Premium status transfers
⚠️ Renewal price stays high
⚠️ Verify new registrar supports premium
💰 May have transfer fees

Check Before Transfer:

Does new registrar support it?
What's renewal price there?
Any transfer fees?
Same premium status?

International/ccTLD Domains

Country Code Domains:

Different Rules:

Vary by country
May require local presence
Different unlock process
Specific documentation

Examples:

.UK Domains:

Use IPS tag system
No auth code
Different process
Tag-based transfer

.CA Domains:

Standard auth code
Canadian presence required
CIRA approval needed

.DE Domains:

AuthInfo code system
DENIC registry
May need admin contact change

.AU Domains:

Must maintain eligibility
Australian presence required
auDA policy compliance

Always Check:

Specific ccTLD rules
Eligibility requirements
Local regulations
Documentation needed

Frequently Asked Questions

How long does unlocking take?

Usually instant to 15 minutes. WHOIS may take up to 1 hour to update. If not unlocked after 1 hour, contact support.

Can I unlock a domain and not transfer it?

Yes. You can unlock and re-lock anytime. Some people unlock to get auth code for backup. Just remember to re-lock for security.

Will unlocking affect my website?

No. Unlocking only removes transfer restriction. Website, email, and DNS continue working normally.

Do I need to unlock for DNS changes?

Usually no. DNS changes typically allowed on locked domains. Unlock only required for transfer.

What if I can't access my registrar account?

Use account recovery process. If that fails, contact support with proof of ownership (ID, payment records). May take 3-5 days.

Can someone steal my domain if unlocked?

Very unlikely if you keep auth code secret. Without auth code, unlock alone isn't enough. Re-lock after transfer for safety.

How long does the full transfer take?

Typical: 5-7 days. Can be as fast as same day if you approve immediately. Maximum: 10 days if auto-approval used.

Do I pay both registrars during transfer?

No. You pay new registrar only. Transfer includes +1 year renewal. Old registrar gets nothing (unless other domains remain).

Will I lose my renewal date?

No. Transfer adds 1 year to existing expiration date. Example: Expires 2026-03-15, after transfer: 2027-03-15.

Can I cancel a transfer in progress?

Yes, usually. Login to old registrar and deny transfer request. Or contact new registrar to cancel. Must act quickly (within 5 days typically).

Quick Reference

Transfer Checklist

Complete These Steps:

Transfer Timeline

Time	Event	Action
Before	Preparation	Unlock, get auth code
Day 0	Initiate	Start transfer at new registrar
Day 0	Email sent	Check for approval email
Day 0-1	Approve	Click approval link
Day 1-5	Processing	Transfer in progress
Day 5-7	Complete	Domain at new registrar
After	Secure	Re-lock, set auto-renewal

Emergency Contacts

Need Help with Transfer?

Domain Unlocking Issues:

Email: unlock-help@pupam.com
Phone: +1 (555) 123-UNLOCK

Transfer Support:

Email: transfers@pupam.com
Phone: +1 (555) 123-TRANSFER
Live Chat: Available 24/7

Transfer Status Check:

Email: transfer-status@pupam.com
Include domain name and order number

Ready to transfer? Start Transfer Process →

Need unlock help? Contact Support → or call +1 (555) 123-SUPPORT

Check transfer status: Transfer Tracker →

Unlock Domains Before Transferring

Unlock Domains Before Transferring

Understanding Domain Locks

What is a Domain Lock?

Types of Domain Locks

Registrar Lock (Client Lock)

Registry Lock

Checking Your Domain Lock Status

Method 1: Your Registrar Dashboard

Method 2: WHOIS Lookup

Method 3: Transfer Check Tool

Why You Must Unlock Before Transfer

Transfer Requirements

Security vs. Accessibility

How to Unlock Your Domain

Step-by-Step Unlocking Process

Step 1: Access Domain Settings

Step 2: Locate Lock Settings

Step 3: Disable the Lock

Step 4: Verify Unlock Status

Common Registrar Instructions

GoDaddy

Namecheap

Google Domains

Cloudflare

Hover

Network Solutions

Troubleshooting Unlock Issues

Can't Find Unlock Option

Unlock Not Working

Domain Recently Registered

Obtaining Authorization Code

What is an Auth Code?

How to Get Auth Code

Step-by-Step Process

Common Auth Code Locations

Auth Code Best Practices

Complete Transfer Process

Pre-Transfer Checklist

Transfer Timeline

Day 0: Initiate Transfer

Day 0 (Within Hours): Approval Email

Day 1-5: Transfer Processing

Day 5-7: Transfer Complete

During Transfer

After Transfer Complete

Immediate (Day 1)

Within Week (Day 1-7)

Within Month (Day 7-30)

Troubleshooting Transfer Issues

Transfer Rejected

Reason: Domain Locked

Reason: Invalid Auth Code

Reason: Contact Email Not Accessible

Reason: 60-Day Lock

Transfer Stuck/Pending

Day 1-2: Be Patient

Day 3-4: Check Status

Day 5+: Take Action

Transfer Denied by Owner

Special Cases

Transferring Multiple Domains

Premium Domains

International/ccTLD Domains

Frequently Asked Questions

How long does unlocking take?

Can I unlock a domain and not transfer it?

Will unlocking affect my website?

Do I need to unlock for DNS changes?

What if I can't access my registrar account?

Can someone steal my domain if unlocked?

How long does the full transfer take?

Do I pay both registrars during transfer?

Will I lose my renewal date?

Can I cancel a transfer in progress?

Quick Reference

Transfer Checklist

Transfer Timeline

Emergency Contacts

Was this helpful?