Domain Status Codes Explained

The EPP status codes you will find in WHOIS and RDAP lookups, from clientTransferProhibited to redemptionPeriod: what each one means, who sets it and what, if anything, you should do about it.

What are domain status codes?

Every registered domain carries one or more status codes. They tell you what can and cannot be done with the domain (can it be transferred, changed, renewed or deleted?) and where it is in its life cycle. The codes come from EPP, the Extensible Provisioning Protocol that registrars use to manage domains at the registry: RFC 5731 defines the core statuses, and RFC 3915 adds the grace period statuses of the Registry Grace Period extension. This page covers all 23 of them.

A domain often has several statuses at once, and the combination matters more than any single code. clientTransferProhibited, clientUpdateProhibited and clientDeleteProhibited together, for example, simply mean the registrar has locked the domain.

Client vs. server: registrar or registry?

In EPP, the registrar is the client and the registry is the server. Statuses that start with client are set and removed by the registrar. Statuses that start with server are set by the registry, and a registrar cannot change them. Statuses without either prefix, such as ok, inactive, the pending statuses and the grace periods, are managed by the registry as the domain changes state.

As a domain owner you never set statuses directly. You ask your registrar, which works with the registry when a server status is involved.

EPP names vs. RDAP names

WHOIS output uses the EPP names in camelCase, and gTLD WHOIS servers usually add a link to ICANN's explanation of each code:

Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited

RDAP, the JSON-based successor to WHOIS, lists the same statuses as lowercase words, following the mapping in RFC 8056. clientTransferProhibited becomes client transfer prohibited, and ok becomes active:

"status": [
  "client delete prohibited",
  "client transfer prohibited",
  "client update prohibited"
]

Both forms mean exactly the same thing. Read what RDAP is and how RDAP compares with WHOIS to learn more about the two protocols.

Client status codes (set by the registrar)

Statuses that begin with client are set and removed by the domain's registrar. The transfer, update and delete prohibitions make up the usual registrar lock and are nothing to worry about. clientHold and clientRenewProhibited are rarer and usually point to a problem that needs the registrar's attention.

Status codeRDAP statusSet byWhat it means
clientTransferProhibitedclient transfer prohibitedRegistrarThe registrar has locked the domain against transfers to another registrar, the standard protection against domain hijacking.
clientUpdateProhibitedclient update prohibitedRegistrarThe registrar has locked the domain against changes, so its name servers, contacts and DNSSEC data can't be updated.
clientDeleteProhibitedclient delete prohibitedRegistrarThe registrar has locked the domain against deletion, protecting it from being deleted by mistake or by an attacker.
clientRenewProhibitedclient renew prohibitedRegistrarThe registrar has blocked renewals of the domain, an uncommon status usually tied to a legal dispute or a planned deletion.
clientHoldclient holdRegistrarThe registrar has told the registry not to publish the domain in DNS, so the domain does not resolve and its website and email stop working.

Server status codes (set by the registry)

Statuses that begin with server are set by the registry that runs the TLD, and a registrar cannot remove them on its own. On well-known domains the server transfer, update and delete prohibitions usually mean a registry lock is in place, while serverHold means the registry has suspended the domain.

Status codeRDAP statusSet byWhat it means
serverTransferProhibitedserver transfer prohibitedRegistryThe registry has locked the domain against transfers to another registrar, often as part of a registry lock or during a dispute.
serverUpdateProhibitedserver update prohibitedRegistryThe registry has locked the domain against changes such as new name servers or contacts; only the registry can lift the lock.
serverDeleteProhibitedserver delete prohibitedRegistryThe registry has locked the domain against deletion, which is typical of a registry lock and of domains in the redemption period.
serverRenewProhibitedserver renew prohibitedRegistryThe registry won't allow the domain to be renewed, an uncommon status usually linked to a legal dispute or an upcoming deletion.
serverHoldserver holdRegistryThe registry has removed the domain from DNS, so it does not resolve and its website and email stop working until the hold is lifted.

Lifecycle and pending status codes

These statuses are managed by the registry. ok and inactive describe the domain's overall state; the pending statuses mean a request has been received but not completed yet.

Status codeRDAP statusSet byWhat it means
okactiveRegistry (automatic)The domain has no pending operations and no restrictions, so it can be updated, renewed, transferred or deleted normally.
inactiveinactiveRegistry (automatic)The domain has no name servers delegated at the registry, so it is not published in DNS and does not resolve.
pendingCreatepending createRegistryA request to register the domain has been received but not completed yet, typically during a TLD launch phase or a manual registry review.
pendingDeletepending deleteRegistryThe domain is being deleted. After the redemption period it can't be restored, and gTLD domains are released about 5 days later.
pendingRenewpending renewRegistryA request to renew the domain has been received and is being processed, but the renewal has not been completed yet.
pendingRestorepending restoreRegistryThe registrar has asked the registry to restore the domain from its redemption period, and the registry is waiting for the restore report.
pendingTransferpending transferRegistryA transfer of the domain to a new registrar has been requested and is waiting to be approved, rejected or completed automatically.
pendingUpdatepending updateRegistryA request to update the domain, such as a contact or name server change, has been received and is waiting to be completed.

Grace period status codes (RGP)

The Registry Grace Period (RGP) extension, RFC 3915, marks the days after a domain is registered, renewed, transferred or deleted. The durations below are typical for generic TLDs (gTLDs); country-code registries set their own rules.

Status codeRDAP statusSet byWhat it means
addPeriodadd periodRegistry (grace period)The domain was registered within the last few days (usually 5 for gTLDs) and is in its add grace period. This status is informational only.
autoRenewPeriodauto renew periodRegistry (grace period)The domain has expired and the registry renewed it automatically; for gTLDs the registrar has up to 45 days to keep or delete it.
renewPeriodrenew periodRegistry (grace period)The domain was renewed within the last few days (usually 5 for gTLDs) and is in its renew grace period; no action is needed.
transferPeriodtransfer periodRegistry (grace period)The domain was recently transferred to a new registrar and is in its transfer grace period, usually 5 days for gTLDs; no action is needed.
redemptionPeriodredemption periodRegistry (grace period)The domain was deleted and no longer resolves, but its owner can restore it for a fee during the redemption period (30 days for gTLDs).

Common status combinations

Here is how to read the combinations you are most likely to see in a lookup:

StatusesWhat it usually means
The registrar lock is on. The domain is protected and working normally.
A registry lock, usually on top of the registrar lock. It is typical of high-value domains; look up google.com to see an example.
No locks and no pending operations (shown as active in RDAP). The domain works normally.
Either status means the domain is suspended: it is still registered but does not resolve.
Registered but without name servers, so the domain does not resolve.
The domain has passed its expiration date. The owner can usually still renew it through the registrar.
Deleted and out of DNS, but the previous owner can still restore it for a fee.
Shown alone: the domain can no longer be restored and will soon be released for registration.

The domain name lifecycle

For gTLDs such as .com, .net and .org, a domain that is not renewed moves through the following stages. The durations are typical for gTLDs; country-code TLDs follow their own policies, and some delete expired domains much sooner.

  1. Registered. A new domain shows addPeriod for about 5 days, next to ok or the registrar's locks. Renewals and transfers briefly add renewPeriod or transferPeriod.
  2. Expired. On the expiration date the registry renews the domain automatically and it enters autoRenewPeriod for up to 45 days. The owner can still renew it; many registrars stop the domain from resolving or show a parking page during this time.
  3. Redemption. If the domain is not renewed, the registrar deletes it and it spends 30 days in redemptionPeriod, often together with pendingDelete. The domain is out of DNS, but the owner can restore it for a fee (pendingRestore is shown while the restore completes).
  4. Pending delete. Once the redemption period ends, pendingDelete remains on its own for about 5 days. The domain can no longer be restored.
  5. Released. The registry purges the domain and anyone can register it again.

Our domain expiration guide explains each stage in more detail, including how to recover an expired domain and when a dropped domain becomes available.

Check a domain's status

Enter a domain name to see its current status codes, along with its registrar, registration and expiration dates and name servers.

Official references