The Different Types of Domain Locks
There are a few different types of locks we use on domain names that act as a safeguard, preventing a domain name from being accidentally or maliciously transferred out of an account to a different account, or altered in ways that may impact services or products that is associated with said domain name.
Here are the topics we will discuss in this article.
Types of Domain Locks
There are several different types of locks placed on a domain for a variety of reasons, some can be for security purposes, and some are required. Below you will find the different types of domain locks that can be placed on a domain name.
- Domain Security Lock
- Domain Legal Lock
- Domain Transfer Lock
- 30 Day Lock
- Change of Registrar (COR) Lock
Domain Security Lock
A Security Lock is a standard lock placed on domain names by the registrar to protect against unauthorized changes to the domain. These changes can include transferring a domain name from one registrar to another registrar.
Domain Legal Lock
A Legal Lock is a lock placed on a domain name that is the subject of a legal issue, such as a dispute that has legal implications or bankruptcy. Domain name registrations that have a Legal Lock can only be renewed, and the domain cannot be modified, or transferred while in a Legal Lock status.
Domain Transfer Lock
A Transfer Lock is applied at the time of registration, to prevent accidental or unwanted transfers to another registrar. It serves as an added layer of protection to keep domain names registered in your account and under your control.
30 Day Lock
The 30-day Lock is a temporary lock status placed on your domain when certain changes are made to your domain contact/ whois information.
An Outbound Change of Registrar lock (OCRA) can also occur when you update the following information combined with a password reset, this lock is not a required lock and can be removed at your request.
- The Primary Contact name has been changed.
- The Primary Contact email address has been changed.
- The WHOIS Admin Contact email address has been changed.
- The WHOIS Admin Contact has been replaced.
- The User IDs are merged in the Account Manager.
- The Primary Contact has been changed.
What domain extensions or TLDs will be affected?
Please note that a 30-day lock will be placed on the following domain TLDs when certain account changes have occurred.
- .name
- .net
- .org
- .tv
- .us
- .biz
- .cc
- .cn
- .com
- .info
- .mobi
You will receive an email explaining why the domain was locked due to recent changes.
The OCRA Lock is activated on the domain, the same day the change is made. The lock date is reset if any subsequent changes occur in the account after that time. When certain changes are made to an account in conjunction with a password reset, all eligible domains currently residing in that account will be placed on an OCRA Lock. Purchasing or moving a new domain name to the account will not affect the new domain(s).
Change of Registrar (COR) Lock
The Change of Registrar (COR) Lock is placed on a domain to prevent domain hijacking and other potential hazards after the contact information has been updated for the domain. If you are the Registrant or the primary account holder, and updates are made to your contact information that involves changes to the Registrant's name, email address, or organization name that will result in a 60-day COR Lock on all domains associated with your account. This is an ICANN required lock and cannot be removed.
What factors could trigger a COR Lock?
- When there are certain changes to the Registrant's information, which includes an internal transfer (also known as a Registrant Name Change Agreement, better known as RNCA) or any changes to the Registrant's name, email address, or organization name.
- There is a change of administrative email address if no Registrant email address is displayed in the WHOIS database.
- When a domain transfer from one party to another is initiated.
Depending on the change, you will need to verify the requested updates through a confirmation email. While your domains are under the 60-day lock, you can still manage, renew, and transfer them internally (moving domains between accounts). However, you cannot transfer domains to another registrar until the lock has been lifted.
How to Toggle your Domain’s lock On or Off
Please note that while you can toggle the Domain Lock on or off if you are initiating the following actions.
- Moving the domain to another account within Bluehost
- Another person (can be a domain transfer or an account move)
- Moving to another registrar (domain transfer)
We do not recommend the domain remain unlocked while in an account.
To check the status of your domain lock:
- Log in to your Account Manager.
- Click Domains in the left-hand side menu.
- Locate your domain from the list.
- If you have a single domain in your account, you will be redirected right away to the Domain Overview page.
- If you have multiple domains in your account, you can do the following:
In Advanced view:
- Click the domain or click the domain's vertical ellipsis icon on the far right, under the Actions column.
- Select Manage.
In Summary view:
Locate the domain and click its Settings button.
- Within the Domain Overview section, you will find the status of the domain lock.
You can also see the domain lock status when you scroll down to the Transfer or Move Domain section.
Why are Domain Locks Important
Domain locks are essential for protecting a domain from various security risks. Without these locks, unauthorized individuals could easily transfer a domain to another registrar or change its registration details without your permission. This could lead to domain hijacking, where a hacker takes over a domain and redirects visitors to harmful websites, sends spam emails using your domain, or even demands a ransom for its return. Similarly, the lack of domain locks might result in accidental changes or transfers caused by human error, further jeopardizing the security and credibility of your online presence. Domain locks keep a domain safe from these dangers.