Your domain name is a valuable business asset. If it is lost, transferred without permission or changed unexpectedly, your website, email and online reputation can all be affected.
Domain locking is one of the simple protections that helps reduce that risk.
What domain locking means
Domain locking is a security setting that helps prevent a domain name from being transferred away from its current registrar without permission.
When a domain is locked, transfer requests are blocked until the lock is removed. This reduces the chance of accidental transfers and makes unauthorised changes harder.
You may also see this described as registrar lock or transfer lock, depending on the registrar and domain extension.
Why it matters
Most businesses rely on their domain every day. It may be used for the website, email addresses, customer logins, invoices, marketing materials and search visibility.
If a domain is transferred or altered unexpectedly, the disruption can be serious. Domain locking adds a useful extra layer of protection.
It is not the only security measure you need, but it is a sensible default for many domains.
When should a domain be locked?
In most cases, a domain should stay locked when you are not actively transferring it.
That is especially true for:
- Business websites
- Ecommerce stores
- Domains used for email
- Domains used in advertising
- Brand names and important redirects
- Domains with strong search visibility
If the domain matters to your business, keeping it locked is a sensible precaution.
When should you unlock a domain?
You normally only need to unlock a domain when you are preparing to transfer it to another registrar.
Once the transfer is complete, the domain should usually be locked again. If you unlock a domain for a specific reason, make sure someone is responsible for locking it afterwards.
This is a small step, but it can prevent a lot of unnecessary risk.
Domain locking is not the same as DNS control
Locking a domain usually prevents transfers, but it does not necessarily stop every possible change to DNS records, nameservers or contact details.
The exact behaviour depends on the registrar and the domain extension. That is why account security is still important.
Use strong passwords, protect the email address associated with the domain account and enable two-factor authentication where available.
Keep contact details current
Domain security is not only about locks. Your domain contact details should also be accurate and accessible.
If your registrar needs to verify a change, transfer or ownership issue, old contact details can make the process much harder. A domain registered to an outdated email address or former employee can create problems at exactly the wrong moment.
Review domain contact details regularly, especially when staff, agencies or business addresses change.
A small setting with a big role
Domain locking is a simple feature, but it protects something important.
For most business domains, the safest approach is to keep the domain locked unless you are deliberately transferring it. Combine that with good account security, up-to-date contact details and careful DNS management and your domain will be much better protected.