⚡ Quick Answer
ClientTransferProhibited means your domain is locked to prevent unauthorized transfers. To fix it: log into your current registrar, find "Domain Lock" or "Transfer Lock" settings, and toggle it OFF. Then you can proceed with your transfer.
What Does ClientTransferProhibited Mean?
When you see clientTransferProhibited in your domain's WHOIS data, it means your registrar has applied a transfer lock. This is a standard security feature designed to prevent domain hijacking.
The "client" in the name refers to the registrar (they're ICANN's client). This status is set at the registrar level, which means you have the power to remove it.
EPP Status Code Breakdown
- client = Set by your registrar (you can change it)
- Transfer = Relates to domain transfers
- Prohibited = Currently blocked
This is NOT an error. It's working exactly as intended—protecting your domain until you're ready to move it.
How to Remove ClientTransferProhibited
The process varies slightly by registrar, but the concept is the same: find the domain lock setting and turn it off.
G GoDaddy
- Log into your GoDaddy account
- Go to My Products → Domains
- Click on your domain name
- Scroll to Additional Settings
- Find "Domain Lock" and toggle it OFF
- Confirm via email if prompted
N Namecheap
- Log into Namecheap
- Go to Domain List
- Click Manage next to your domain
- In the Domain tab, find "Domain Lock"
- Toggle the switch to OFF
NS Network Solutions
- Log into Network Solutions (account.networksolutions.com)
- Navigate to My Domain Names
- Select your domain
- Look for "Protect/Lock" or "Domain Protection"
- Turn OFF all protection levels
- Note: This may take up to 72 hours at Network Solutions
CF Cloudflare
- Log into Cloudflare dashboard
- Select your domain
- Go to Domain Registration → Manage Domain
- Find "Configuration" section
- Toggle "Registrar Lock" to OFF
🐷 Porkbun
- Log into Porkbun
- Go to Domain Management
- Click on your domain
- Find "Domain Lock" toggle
- Switch to Unlocked
After Unlocking: Next Steps
Once you've disabled the transfer lock, your domain's EPP status should change to OK or Active. This can take anywhere from a few minutes to 24 hours to propagate.
Complete Transfer Checklist
- ✅ Unlock domain (remove clientTransferProhibited)
- ✅ Get your EPP/Auth code from current registrar
- ✅ Ensure domain wasn't registered/transferred in last 60 days
- ✅ Verify registrant email is accessible (you'll need to approve)
- ✅ Initiate transfer at new registrar
- ✅ Approve transfer via email confirmation
Why Does This Lock Exist?
Domain hijacking is a real threat. Attackers who gain access to your registrar account (through phishing, credential stuffing, or social engineering) could transfer your domain to another registrar and effectively steal it.
The transfer lock adds a deliberate friction point. Even if someone compromises your account, they'd need to:
- Disable the lock (which may trigger an alert)
- Wait for the status to update
- Obtain the EPP code
- Initiate transfer at another registrar
- Approve the transfer via email
Each step is an opportunity to catch unauthorized activity. That's why you should keep your domains locked when you're not actively transferring them.
Common Issues & Troubleshooting
❓ "I unlocked it but still can't transfer"
WHOIS data can take up to 24 hours to update. Also check for other status codes like clientUpdateProhibited or the 60-day lock (if you recently registered or transferred).
❓ "I don't see a lock option"
Some registrars bundle this under "Domain Protection" or "Transfer Protection." If you truly can't find it, contact support—some legacy registrars hide this deliberately to make transfers difficult.
❓ "Registrar is asking me to call to unlock"
This is a dark pattern used by some registrars (notably Network Solutions) to discourage transfers. You can file a complaint with ICANN if they don't provide the unlock within 5 days.
Transferring to a Better Registrar?
If you're dealing with a registrar that makes unlocking difficult, it might be time to move to one that respects your time. Modern registrars like Cloudflare, Porkbun, and Spaceship offer instant self-service unlocking.
Compare Registrars →Related Status Codes
| Status Code | Meaning | Who Sets It |
|---|---|---|
| clientTransferProhibited | Transfer blocked by registrar | Registrar (you can remove) |
| serverTransferProhibited | Transfer blocked by registry | Registry (contact registrar) |
| clientHold | Domain suspended (usually billing) | Registrar |
| serverHold | Domain suspended (legal/abuse) | Registry |
| redemptionPeriod | Domain expired, recovery possible | Registry |