Domain Locking

Domain Locking, sometimes referred to as Registry or Registrar-locking, describes the service provided by registries or registrars to "lock" a domain name so that it cannot be transferred or altered without the explicit permission of the registrant. If a lock is in place, the registrant must request that the name be "unlocked" before such changes can be made.

Public Perception

The public perception of domain locking is generally positive, and it is offered by a large number of registrars. Certain registrars, such as Nominet and Verisign, also offer domain locking at the registry level. However, there are still elements of the practice that can be prone to abuse, such as registrars potentially refusing to unlock names despite legitimate requests from registrants. Domain locking is usually seen as a handy safeguard against Domain Name Hijacking or Slamming. In this way, it creates a greater sense of security for the user. However, while locked, the user may be unable to make certain kinds of changes to domain, which can be irritating if the registrar's unlocking procedure is not clear.

Outcome

Domain locking assists in the prevention of domain name hijacking and slamming and gives users an additional safeguard against unsanctioned actions regarding their domain names.

Historical Use

Domain locking services emerged out of ICANN's Transfer of Registration Policy as a way of ensuring that transfers are intentional before they are completed. Domain locking addresses important security concerns, such as transferring a domain name without the registrant's permission. It is important to note that different registrars and registries may have different locking and unlocking procedures. Some automatically put locks in place while others have an opt-in procedure or a fee-based locking service. Domain locking has also been used by registries or registrars in cases of abuse or suspected abuse as locking the domain keeps the owner from transferring or deleting it. An example of this can be found in ICANN's URS Proceedings, where registry operators, after receiving a URS notice, are required to lock the name in question.

ICANN Policy

• ICANN's Inter-Registrar Transfer Policy: this policy specifies how registrations can be transferred between the gaining and losing registrars. It also mandates that the gaining registrar verifies information about the registrant and receives a standardized form of authorization (FOA) before the transfer can take place.
  • Domain locking serves as an additional guard implemented by registrars against unauthorized transfers in addition to the other safeguards in ICANN's transfer policy. This policy specifically addresses domain locking in the context of making the unlocking procedure readily available to registrants. See section 3 of the Transfer Policy titled "Obligations of the Registrar of Record" for more details.
  • ICANN's Registrar Transfer Dispute Resolution Policy (TDRP) contains similar wording to the Transfer of Registration between Registrars Policy when addressing registrar locks and states that registrars can refuse a transfer based on the lock status of a domain name IF the registrant has had a relatively clear path and opportunity to unlock it.

Legislation

There is no legislation addressing domain locking.

Additional Resources

• View ICANN's Standardized Authorization Form required to transfer domain names from one registrar to another
• See ICANN's Transfer Policy

Related Articles

• Domain Slamming
• Domain Name Hijacking
• URS