What Does "clientTransferProhibited" Mean? (And Why You Want It)

You just used a https://findinfo.io/tool/domain-search Whois Lookup Tool to check your domain.

Under the "Domain Status" section, you see a long, scary string of text:

Status: clientTransferProhibited

Your heart sinks. "Prohibited"? Did I break a rule? Is my domain banned?

Relax. This is actually good news.

The "EPP Code" Explained

This text is called an EPP Status Code. It is the language registrars use to talk to the central registry.

clientTransferProhibited simply means: "Domain Lock: ON".

It tells the global registry: "Do not allow this domain to be moved to another registrar (like GoDaddy to Namecheap) unless the owner explicitly unlocks it."

The "Car Door" Analogy

Think of your domain like your car.

• Unocked Domain (OK): Anyone who walks by can try to open the door. If they hotwire it (guess your password), they can drive it away.
• Locked Domain (clientTransferProhibited): The doors are deadbolted. Even if a thief steals your keys (password), they cannot drive the car away because the engine is immobilized.

This status prevents Domain Hijacking—a common attack where hackers transfer your domain to their own account before you even notice.

When Should You Remove It?

You should keep this status ON 99.9% of the time.

The only time you should ever see this status change is when you are intentionally transferring your domain to a new company.

1. You log into your registrar.
2. You click "Unlock Domain."
3. The status changes to OK or Active.
4. You initiate the transfer.

Once the transfer is done, the new registrar will automatically lock it again (setting it back to clientTransferProhibited).

Conclusion

If you see "Prohibited" on your domain report, give yourself a pat on the back. It means your registrar is doing their job and your digital property is safe.

Is your domain locked correctly? https://findinfo.io/tool/domain-search Check your security status here.