"My domain is locked" can mean three completely different things, and people mix them up constantly. Here's each one: what it blocks, and how long it lasts.
1. Registrar lock
A simple on/off setting on the domain, on by default at most registrars. It blocks the domain from being transferred to another registrar, and nothing else - DNS, renewal, and contact edits all keep working. You control it: toggle it off when you want to transfer, back on when you're done. See Unlocking a domain for transfer.
2. The 60-day locks
These are time-based locks imposed by ICANN policy, not a switch you can flip. There are three, and each blocks transfers for 60 days:
- 60 days from registration - a new domain can't move for its first 60 days.
- 60 days from a previous transfer - a domain that just changed registrars has to settle first.
- 60 days from a registrant change - changing the registrant name, organization, or email locks transfers for 60 days. This one is mandatory; the other two are discretionary, but registrars usually enforce them.
You can't unlock these early - you wait them out. The registrant-change lock is the one that catches people after a contact update, and an opt-out is only offered at the exact moment of the change, never after.
3. Registry-level locks
The strongest kind, applied at the registry rather than the registrar. Two common forms:
- Registry lock - a paid, deliberate security service for high-value domains. It freezes transfers, DNS changes, and deletions until identity is verified out of band, so nothing changes without a manual, verified request.
- Status holds - the registry can place a hold, for example during a dispute, a redemption period after expiry, or a compliance issue. These clear when the underlying cause is resolved.
Which one is stopping me?
- Transfer blocked but everything else works, and there's a toggle in your panel - that's the registrar lock. Turn it off.
- Toggle is already off but the transfer still won't go, and the domain is new, recently transferred, or recently had a contact change - that's a 60-day lock. Wait it out.
- DNS and renewal are frozen too, or you set up a security service - that's a registry-level lock, resolved with the registry, usually through your registrar.
For transfer-specific troubleshooting, see Why was my domain transfer rejected.