EPP status codes: definition

Every domain name A readable internet name made of labels separated by dots. Full definition of domain name carries at least one status code: a short label, such as ok Status code for a domain with no pending actions or restrictions. Full definition of ok or clientTransferProhibited A registrar status that blocks transfers to another registrar. Full definition of clientTransferProhibited, that says what state the registration Obtaining the right to use a domain name for a set period. Full definition of registration is in and which actions are blocked. The codes come from EPP Extensible Provisioning Protocol The protocol registrars use to manage domain names at registries. Full definition of EPP, the standard language registrars use to talk to registries. Reading them explains why a domain has stopped working, whether it is protected against theft, and whether it is close to deletion.

What domain status codes are and where to see them

The codes are defined in the EPP standard for domain names, RFC Request for Comments A numbered document in the series recording the internet's technical standards and practices. Full definition of RFC 5731, and in its grace period A window after a registry action when it can be reversed, usually with a credit to the registrar. Full definition of grace period extension, RFC 3915, which adds the Redemption Grace Period (RGP Redemption Grace Period A last chance to recover a deleted domain, usually for an extra fee. Full definition of RGP) codes.

For gTLD generic top-level domain A top-level domain not tied to a country, run under ICANN contracts. Full definition of gTLD, the place to check is an RDAP lookup, such as ICANN Lookup ICANN's free web tool that looks up public registration data through RDAP. Full definition of ICANN Lookup or a registrar’s own lookup tool. Since 28 January 2025, RDAP has replaced WHOIS The legacy lookup service for domain registration data, now replaced by RDAP for gTLDs. Full definition of WHOIS as the definitive source of gTLD registration data The information kept about a domain and its owner. Full definition of registration data (as of October 2026). RDAP writes the codes as lowercase words with spaces, so clientTransferProhibited appears as “client transfer prohibited”, and ok appears as “active”. Registrars must display every status that applies to a domain.

ccTLD country code top-level domain A top-level domain for a country or territory, usually two letters long. Full definition of ccTLD set their own rules and may show status differently. This explainer follows EPP and the policies for gTLDs.

Client versus server codes: who set them

The first word of a code tells who set it.

Codes starting with client are set by the registrar that manages the domain, sometimes automatically at registration, sometimes on the registrant The person or organization that holds a domain name registration. Full definition of registrant’s request.
Codes starting with server are set by the registry. They take precedence: a registrar cannot change a server code, while a registry may override a client code under its own policies.
Codes with neither prefix, such as ok, inactive Status code for a registered domain with no name servers, so it does not resolve. Full definition of inactive and the pending codes, are managed by the registry.

In both cases, the registrant asks the registrar. For a server code, the registrar passes the request to the registry, so removal usually takes longer.

Lock codes: what is blocked and why

Four pairs of codes each block one action. While one is set, the registry rejects the matching request:

clientTransferProhibited and serverTransferProhibited Registry-set status code that blocks transfer of the domain to another registrar. Full definition of serverTransferProhibited: a transfer to another registrar.
clientUpdateProhibited Registrar-set status code that blocks changes to the domain's data. Full definition of clientUpdateProhibited and serverUpdateProhibited Registry-set status code that blocks changes to the domain's data. Full definition of serverUpdateProhibited: changes to the domain, such as contacts or name server A server that holds a domain's DNS records and answers lookups. Full definition of name server, other than removing the lock itself.
clientDeleteProhibited Registrar-set status code that blocks deletion of the domain. Full definition of clientDeleteProhibited and serverDeleteProhibited Registry-set status code that blocks deletion of the domain. Full definition of serverDeleteProhibited: deletion.
clientRenewProhibited Registrar-set status code that blocks renewal of the domain. Full definition of clientRenewProhibited and serverRenewProhibited Registry-set status code that blocks renewal of the domain. Full definition of serverRenewProhibited: renewal.

The client transfer, update and delete locks help protect against hijacking and fraud. The renew locks are rare: they usually appear during legal disputes or before a deletion.

For gTLDs, ICANN Internet Corporation for Assigned Names and Numbers The nonprofit that coordinates the global DNS and gTLD policy. Full definition of ICANN’s Transfer Policy ICANN's rules for moving gTLD domains between registrars and changing registrants. Full definition of Transfer Policy, in the version published on 21 February 2024 and in force as of October 2026, limits clientTransferProhibited. If the registrar offers no self-service way to remove it, it must remove it within five calendar days of the registrant’s request, and it may not refuse only because of a payment dispute.

As of October 2026, changes to the Transfer Policy have been adopted but are not in force. The ICANN Board ICANN's board of directors, which adopts policies and approves key decisions. Full definition of ICANN Board adopted them on 7 June 2026 (resolution 2026.06.07.04), and no effective date has been announced. They include a mandatory restriction on transfers in the first 720 hours (30 days) after registration. The registrar can confirm which rules apply.

Server locks are uncommon. ICANN names legal disputes, the registrant’s own request and a domain in redemptionPeriod Status code for a deleted domain that its former holder can still recover. Full definition of redemptionPeriod as the usual reasons. Some registries offer a registry lock A registry-level lock that strongly protects a domain against unauthorized changes. Full definition of registry lock service, requested through the registrar, that uses server codes as extra protection.

Hold codes: why a domain stops working

clientHold A registrar status that stops a domain from working in the DNS. Full definition of clientHold and serverHold A registry status that stops a domain from working in the DNS. Full definition of serverHold tell the registry not to publish the domain’s delegation in the DNS Domain Name System The internet's directory that links domain names to computer addresses. Full definition of DNS. The website and email stop working, but the domain stays registered.

clientHold is uncommon. ICANN documents link it to non-payment, legal disputes, pending deletion, unverified contact details and stopping DNS abuse Harmful use of domains, defined in ICANN contracts as five specific threats. Full definition of DNS abuse. serverHold is set by the registry; ICANN’s compliance advice says registries should usually refer abuse cases to the registrar first.

Two other situations look similar:

inactive: no name servers are linked, so the domain does not resolve, but the registration is fine. If it lasts several days, ICANN suggests contacting the registrar; some TLD top-level domain The last part of a domain name, after the final dot. Full definition of TLD require documents first.
Expiry: after expiry, the registrar must stop the domain resolving for part of the time in which the registrant can still renew, where the registry allows it. The domain may show no hold code.

Pending and grace period codes

The pending codes (pendingCreate Status code for a domain whose registration request the registry is still processing. Full definition of pendingCreate, pendingUpdate Status code for a domain with a change request the registry is still processing. Full definition of pendingUpdate, pendingRenew Status code for a domain whose renewal request the registry is still processing. Full definition of pendingRenew, pendingTransfer Status code for a domain with a registrar transfer request awaiting approval or rejection. Full definition of pendingTransfer and pending delete The final days before a deleted domain is released, when it can no longer be saved. Full definition of pending delete) mean a request has been received but not completed. During a sunrise An early phase when trademark owners can register matching names first. Full definition of sunrise period, pendingCreate may mean the name will be allocated when that period ends.

The grace period codes (addPeriod Status code for a domain in the add grace period just after registration. Full definition of addPeriod, renewPeriod Status code for a domain in the grace period after a renewal ordered by the registrar. Full definition of renewPeriod, autoRenewPeriod Status code for a domain in the grace period after the registry renewed it automatically. Full definition of autoRenewPeriod and transferPeriod Status code for a domain in the grace period just after a registrar transfer. Full definition of transferPeriod) are informative. If the registrar deletes the domain during one of them, the registry gives the registrar a credit for the cost of the registration, renewal or transfer. The credit goes to the registrar, not to the registrant. Each registry sets the length of each grace period.

Deletion follows these steps in gTLDs (as of October 2026):

The registrar deletes the domain. The EPP status becomes pendingDelete and the RGP status becomes redemptionPeriod, which lasts 30 days, except in sTLD Sponsored Top-Level Domain A gTLD run with a sponsor for a specific community. Full definition of sTLD. The domain does not resolve and cannot be transferred.
If the registrar requests a restore Bringing a deleted domain back during the redemption grace period. Full definition of restore, the status becomes pendingRestore Status code for a deleted domain being restored while the registry awaits the restore report. Full definition of pendingRestore while the registry waits for a restore report The registrar's written record explaining why a deleted domain was restored. Full definition of restore report, a window ICANN describes as frequently seven days. If the report arrives, the domain returns to ok or to its earlier status. If not, it goes back to redemptionPeriod.
If the domain is not restored, it stays in pendingDelete for five calendar days after redemptionPeriod ends, then is removed from the registry database and becomes available to register.

What to do about an unexpected status

Look the domain up in ICANN Lookup, note whether the code is a client or a server code, and contact the registrar. For server codes, the registrar deals with the registry.
pendingTransfer or pendingUpdate that the registrant did not request: contact the registrar immediately and, for a transfer, ask it to deny the request.
redemptionPeriod: contact the registrar at once to discuss the options.

For a specific case, the registrant should check with the registrar, the registry or a lawyer.

A worked example: ICANN Lookup shows example.com as “client transfer prohibited”, and the registrant wants to change registrar. They remove the lock in their account or ask the registrar to remove it. Once the transfer is requested, the domain shows pendingTransfer; if the current registrar does not respond within five calendar days, the registry completes it. Afterwards the domain may show transferPeriod, which needs no action.

EPP status codes