How to lock your domain at GoDaddy

Three registrar settings prevent the two ways domains are most often lost — hijacked by an unauthorized transfer, or silently expired: the transfer lock, auto-renew, and WHOIS privacy. In WHOIS/RDAP, clientTransferProhibited is the transfer lock: it tells the registry to reject transfer-away requests until you remove it via your registrar.

1. Transfer lock

1. Open your Domain Portfolio and select the domain.
2. On the Domain Settings page, find the Transfer section.
3. Switch the transfer lock toggle on — it saves automatically.

⚠ Domains with Domain Protection require extra identity verification to unlock (two-step verification, or a one-time password emailed to the account).

ICANN policy allows registrars to block transfers within 60 days of registration or a previous transfer, and applies a 60-day lock after changing registrant contact details. Some registrars let you opt out of the post-change lock BEFORE making the change; once it applies, it can't be lifted early.

2. Auto-renew

1. Domain Settings page → Renew card → toggle auto-renew on.
2. Account-wide: Renewals and Billing → Manage Subscriptions.

Keep the payment method current — auto-renew with an expired card is how "locked" domains still lapse.

3. WHOIS privacy

Domain Settings page → Change on the Domain Privacy card (privacy via Domains By Proxy is applied automatically to eligible domains).

Steps verified against GoDaddy: lock or unlock my domain and related GoDaddy docs on 2026-07-14.