How to lock your domain at Porkbun

Three registrar settings prevent the two ways domains are most often lost — hijacked by an unauthorized transfer, or silently expired: the transfer lock, auto-renew, and WHOIS privacy. In WHOIS/RDAP, clientTransferProhibited is the transfer lock: it tells the registry to reject transfer-away requests until you remove it via your registrar.

1. Transfer lock

1. Open Domain Management.
2. Click the lock icon to the right of the domain name — green means locked, gray means unlocked. Click it again to toggle.

ICANN policy allows registrars to block transfers within 60 days of registration or a previous transfer, and applies a 60-day lock after changing registrant contact details. Some registrars let you opt out of the post-change lock BEFORE making the change; once it applies, it can't be lifted early.

2. Auto-renew

1. Domain Management → the renew icon under the Renew column → Enable/Disable Auto Renew.

Keep the payment method current — auto-renew with an expired card is how "locked" domains still lapse.

3. WHOIS privacy

Free and on by default — the eye icon under the WHOIS column switches between privacy modes.

Steps verified against Porkbun: install DNSSEC and related Porkbun docs on 2026-07-14.