How to lock your domain at Namecheap

Three registrar settings prevent the two ways domains are most often lost — hijacked by an unauthorized transfer, or silently expired: the transfer lock, auto-renew, and WHOIS privacy. In WHOIS/RDAP, clientTransferProhibited is the transfer lock: it tells the registry to reject transfer-away requests until you remove it via your registrar.

1. Transfer lockon by default at Namecheap

1. Domain List → Manage next to the domain.
2. Open the Sharing & Transfer tab.
3. In the Transfer Out section, set the lock.

ICANN policy allows registrars to block transfers within 60 days of registration or a previous transfer, and applies a 60-day lock after changing registrant contact details. Some registrars let you opt out of the post-change lock BEFORE making the change; once it applies, it can't be lifted early.

2. Auto-renew

1. Domain List → Manage → auto-renew toggle (also available from the caret in the Domain List row).
2. Account default for future purchases: Profile → Billing → Auto-Renewal.

Keep the payment method current — auto-renew with an expired card is how "locked" domains still lapse.

3. WHOIS privacy

Domain List → Manage → Protection toggle next to Domain Privacy (free, enabled by default for eligible TLDs).

Steps verified against Namecheap: registrar lock and related Namecheap docs on 2026-07-14.