Registry Lock Service

"Domain name hijacking," in which perpetrators fraudulently transfer domain names, can have a significant impact on individuals and organizations. To help protect against hijacking of domain names, Verisign Registry Lock Service is available for domain names in .com, .net, .cc and .name through participating domain name registrars.

What is Verisign Registry Lock Service?

Verisign Registry Lock Service can help ensure that .com, .net, .cc and .name domain names do not get hijacked. Domain name hijacking occurs when an attacker gains unauthorized access to registration data for a domain name, thereby gaining administrative control over the domain name that enables them to modify several elements of the domain name, including the website to which the domain name resolves.

Because Verisign is the registry operator for .com, .net, .cc and .name, only Verisign Registry Lock Service can offer this type of registry-level protection for these top-level domains.

Why is it important to lock a domain name at the registry level?

Registry-level locking of domain names provides additional levels of authentication between the registry (Verisign in the case of .com, .net, .cc and .name) and the registrar of the domain name. If an end customer requests a change to a Registry Locked domain name, an authorized individual at the registrar must submit a request to Verisign to unlock the domain name. This requester is then contacted by Verisign via phone and required to provide an individual security phrase in order for the domain name to be unlocked. This "out-of-band" step helps protect against automation errors and system compromises.

How can I be sure my domain name is locked at the registry level?

Our Whois lookup tool will enable you to check if your domain names are locked at the registry. Type your domain name into the Whois lookup bar. In the results, there are up to four "Status" fields: Delete, Renew, Transfer and Update. Delete, Transfer and Update are the critical statuses for locking your domain name. Using Update as an example, if the status for Update says "serverUpdateProhibited" then your domain name is locked at the registry level and cannot be unlocked (and therefore changed) without "out-of-band" authentication between Verisign and your registrar. This "Server" and "Prohibited" status must appear for all three statuses (Update, Delete, Transfer) for the domain name to be on Registry Lock.

If the Whois results for your domain name ONLY indicate "ClientUpdateProhibited" this means that your domain name has been locked by your registrar, but not at the registry. If your Whois results show both "client" and "server" status as "Prohibited," your domain names are locked.

Here is an example of the Whois results for a registry-level-locked domain name, with the key statuses highlighted: