Understanding the Different Types of Domain Locks

To protect your domain from unauthorized access or accidental changes, Bluehost uses different types of domain locks. These security features prevent domain name transfers, changes to registration data, and other updates that could impact the services connected to your domain.

---

• Different Types of Domain Locks
• How to Toggle Domain Lock On and Off
• Why are Domain Locks Important
• Frequently Asked Questions (FAQs)
• Related Articles
• Summary

---

Different Types of Domain Locks

Domain locks serve different purposes—some are optional security features, while others are mandatory based on registry rules. Here's a breakdown of the most common types of domain locks you might encounter:

• Domain Security Lock
• Domain Legal Lock
• Domain Transfer Lock
• 30 Day Lock
• Change of Registrar (COR) Lock

Domain Security Lock

This lock is automatically applied to protect your domain from unauthorized modifications or transfers. It prevents changes to nameservers or registrar details unless the lock is removed by the domain owner.

Domain Legal Lock

Applied when a domain is under legal review or involved in a dispute (such as bankruptcy or litigation), this lock restricts any changes. You can still renew the domain, but editing or transferring it is not permitted until the legal status is resolved.

Domain Transfer Lock

Enabled by default when you register a domain, the Transfer Lock prevents unauthorized registrar transfers. This ensures that your domain stays within your Bluehost account unless you manually unlock it.

30 Day Lock

A temporary lock is triggered when key account or contact details—such as the primary email or Registration Data Directory Services (RDDS), formerly known as WHOIS information—are changed alongside a password reset. Affected TLDs include:

• .name
• .net
• .org
• .tv
• .us
• .biz
• .cc
• .cn
• .com
• .info
• .mobi

An Outbound Change of Registrar lock (OCRA) can also occur when you update the following information combined with a password reset; this lock is not a required lock and can be removed at your request.

• The Primary Contact name has been changed.
• The Primary Contact email address has been changed.
• The RDDS Admin Contact email address has been changed.
• The RDDS Admin Contact has been replaced.
• The User IDs are merged in the Account Manager.
• The Primary Contact has been changed.

Change of Registrar (COR) Lock

This ICANN-mandated lock is placed for 60 days after changes to the registrant's name, organization, or email. It helps prevent domain hijacking following ownership or contact information updates.

Triggers for COR Lock include:

• Changing the registrant's name, email, or organization
• Internal domain transfer (Registrant Name Change Agreement - RNCA)
• No registrant email is shown in RDDS (admin email triggers the lock)
• Transfer from one party to another

During the 60-day lock, you can still manage and renew domains or transfer them internally between Bluehost accounts—but not to another registrar.

How to Toggle Domain Lock On and Off

If you need to transfer or move your domain, you can toggle the Domain Transfer Lock:

1. Log in to your Bluehost Account Manager.
2. Click on the Domains tab in the main navigation menu.
   
   • If you have only one domain in your account, clicking the Domains tab in the left-hand menu immediately opens the Domains Overview panel.
     
   • If you have multiple domains, click on the domain you want to manage to access its management panel.

     Alternatively, you can use the Search box to find the domain name you wish to manage.
     

     Note: You can easily switch between Card View and List View modes for your domain's display.

3. Scroll to the Domain Lock section.
4. Use the toggle switch to Turn On or Turn Off the lock:
   • Turn on
     
   • Turn Off
     

A confirmation message will appear once your change is saved.

Why are Domain Locks Important

Domain locks protect your website from cyber threats, including domain hijacking and unauthorized transfers. Without these locks, malicious users could redirect your site, alter contact details, or even ransom your domain. Accidental changes made by users also pose a risk. Domain locks ensure that your website stays secure and fully under your control.

Frequently Asked Questions (FAQs)

Related Articles

• Domain Transfer Status: What It Means & What You Should Do
• How to Get Your EPP Code from Bluehost
• How to Transfer A Domain Name To Us
• How to Troubleshoot Common Domain Transfer Issues
• How to Update Contact Information
• How to Update Domain Owner Contact Details

Summary

Understanding the different types of domain locks is crucial for domain security. From standard Transfer Locks to ICANN-required COR Locks, each lock serves a unique purpose in protecting your domain from unauthorized access, changes, or transfers. Keeping your domain locked and staying informed about when locks are applied helps ensure the long-term safety of your web presence.