How to lock your domain at Dynadot

Three registrar settings prevent the two ways domains are most often lost — hijacked by an unauthorized transfer, or silently expired: the transfer lock, auto-renew, and WHOIS privacy. In WHOIS/RDAP, clientTransferProhibited is the transfer lock: it tells the registry to reject transfer-away requests until you remove it via your registrar.

1. Transfer lockon by default at Dynadot

1. My Domains → Manage Domains → tick the domain's checkbox.
2. Action dropdown → Unlock Domains (you'll be asked for your security PIN and any 2FA) — the same flow re-locks.

ICANN policy allows registrars to block transfers within 60 days of registration or a previous transfer, and applies a 60-day lock after changing registrant contact details. Some registrars let you opt out of the post-change lock BEFORE making the change; once it applies, it can't be lifted early.

2. Auto-renew

1. My Domains → Manage Domains → tick the checkbox → Action → Renew Options → choose auto-renew and a payment method → Save Settings.
2. Account default for future domains: Payments → Domain Auto-Renew.

Keep the payment method current — auto-renew with an expired card is how "locked" domains still lapse.

3. WHOIS privacy

My Domains → Manage Domains → checkbox → Action → Privacy Settings (free; new registrations default to full privacy).

Steps verified against Dynadot: set DNSSEC and related Dynadot docs on 2026-07-14.