• Built by Engineers, Picked by Leaders
  • 24/7 support from real experts
  • 2,000+ TLDs live in seconds, not days
  • 100% Secure
Status Login
Get Started Today

Protecting domains from unauthorized modifications and malicious activity

Registry Lock

Registry Lock prevents domain name hijacking. This occurs when an attacker gains unauthorized access to registration data for a domain name, thereby gaining administrative control over the domain. That enables them to modify several elements of the domain, including the website to which the domain resolves. The hijacker can execute DNS modifications, WHOIS updates or even unauthorized transfers. Registry Lock also prevents unintended consequences by incompetent or negligent behavior by personnel.

List of supported TLDs

  • Registry Lock is an essential part of brand protection
  • Strengthen your legal position
  • Expand your profits
  • Grow your business
  • Add value to your customers

Opportunities for your business

Your customers rely on your expertise and assistance to protect their valuable domain names and the business / value it serves. Registry Lock is the most effective weapon available against domain name hijacking as it involves human interaction that automated systems cannot easily bypass. Although there is a cost involved, this should be weighed against the consequences of the domain name being hijacked by criminals. Leading to subsequent loss of reputation and sales if the domain name is an integral part of your customer’s business activities.

  • Show your customers you take their domain and brand protection seriously
  • Offering Registry Lock strengthens your legal position, should anything happen with the domain registration in the future
  • Ideal for high-profile websites, high traffic websites and well-known brands, but can be added to any eligible domain
  • Great revenue opportunity for your registrar or reseller business
  • Expand your profits. Grow your business. Add value to your customers
  • Less risk of transfer out, as only a limited group of resellers is offering Registry Lock

Why is it important to lock a domain at the Registry level?

Registry-level locking of domains provides additional levels of authentication between the registry and the registrar of the domain name. If anyone requests a change to a registry locked domain, an authorized individual at the registrar must submit a request to the registry to unlock the domain name. The requester is then contacted by the registry (e.g., by phone), and required to provide an individual security phrase, for the domain name to be unlocked. (procedures differ per registry). This “out-of-band” step protects against automation errors and system compromises.

How can I be sure that my domain is locked at the Registry level?

The WHOIS lookup tool will enable you to check if your domains are locked at the Registry. In the results, there are up to 4 “Status” fields: Delete, Renew, Transfer and Update. Delete, Transfer and Update are the critical statuses for locking your domain name. Using Update as an example, if the status for Update says “serverUpdateProhibited” then your domain name is locked at the Registry level and cannot be unlocked (and therefore changed) without “out-of-band” authentication between the Registry and your registrar. This “Server” and “Prohibited” status must appear for all three statuses (Update, Delete, Transfer) for the name to be on Registry Lock.

If the WHOIS results for your domain name only indicates “clientUpdateProhibited” this means that your domain name has been locked by your registrar, but not at the registry. This registrar locking may still leave your domain name vulnerable to various types of malicious activity. If your WHOIS results show both “client” and “server” status as “Prohibited,” your domain names are locked.

Start with Registry Lock today

Great! Are you interested in Registry Lock? You can create your GO!ORANGE account to start straight away, without any hassle. Or just get in touch with us for more information.

Get started today
Want to speak with us?
+31 38 - 453 0759 Email

FAQ

For any further questions, don't hesitate to reach out to us.

Contact Support
What is Registry Lock and how does it differ from a standard Registrar Lock?

A standard Registrar Lock (visible as clientTransferProhibited in WHOIS) is set by your registrar to prevent accidental transfers. Registry Lock is a much higher level of security set directly at the Registry level. It prevents any modifications, deletions, or transfers of the domain without a manual, "out-of-band" verification process (like a phone call or a secure passphrase) between the Registry and the Registrar. It is the most effective defense against domain hijacking and unauthorized DNS changes.
Why is Registry Lock essential for brand protection?

High-profile websites and well-known brands are frequent targets for hijackers. If an attacker gains access to a registrar account, they can change the DNS and redirect your traffic to a malicious site. Registry Lock adds a human-intervention layer that automated systems and stolen passwords cannot bypass. It also prevents "accidental" deletions or changes caused by human error or internal negligence within your own organization.
How can I verify if my domain is actually locked at the Registry level?

You can check this using a WHOIS lookup tool. A Registry-locked domain will show the status "serverUpdateProhibited", "serverDeleteProhibited", and "serverTransferProhibited". If you only see "client" statuses, the domain is only locked at the registrar level and is still potentially vulnerable to certain types of sophisticated attacks.
What is the process for making changes to a Registry-locked domain?

Because the lock is designed to be "unbreakable" by automated means, any change (like updating nameservers) requires a manual "unlock" request. An authorized person at your company must contact the registrar, who then initiates a verification process with the Registry. Once the identity is confirmed via a secure out-of-band method, the Registry temporarily unlocks the domain, the changes are made, and the lock is immediately reapplied.
Which TLDs support Registry Lock?

Registry Lock is available for many popular and high-value extensions, including .com, .net, .org, .biz, .info, and several country-code extensions like .nl, .uk, and .fr. Since each registry has its own specific manual verification procedures and pricing, we provide a full list of supported TLDs and their requirements within our portal to help you secure your most critical assets.
Contact Support