Domain Status Codes Explained
The EPP status codes you will find in WHOIS and RDAP lookups, from clientTransferProhibited to redemptionPeriod: what each one means, who sets it and what, if anything, you should do about it.
What are domain status codes?
Every registered domain carries one or more status codes. They tell you what can and cannot be done with the domain (can it be transferred, changed, renewed or deleted?) and where it is in its life cycle. The codes come from EPP, the Extensible Provisioning Protocol that registrars use to manage domains at the registry: RFC 5731 defines the core statuses, and RFC 3915 adds the grace period statuses of the Registry Grace Period extension. This page covers all 23 of them.
A domain often has several statuses at once, and the combination matters more than any single code. client, client and client together, for example, simply mean the registrar has locked the domain.
Client vs. server: registrar or registry?
In EPP, the registrar is the client and the registry is the server. Statuses that start with client are set and removed by the registrar. Statuses that start with server are set by the registry, and a registrar cannot change them. Statuses without either prefix, such as ok, inactive, the pending statuses and the grace periods, are managed by the registry as the domain changes state.
As a domain owner you never set statuses directly. You ask your registrar, which works with the registry when a server status is involved.
EPP names vs. RDAP names
WHOIS output uses the EPP names in camelCase, and gTLD WHOIS servers usually add a link to ICANN's explanation of each code:
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibitedRDAP, the JSON-based successor to WHOIS, lists the same statuses as lowercase words, following the mapping in RFC 8056. clientTransferProhibited becomes client transfer prohibited, and ok becomes active:
"status": [
"client delete prohibited",
"client transfer prohibited",
"client update prohibited"
]Both forms mean exactly the same thing. Read what RDAP is and how RDAP compares with WHOIS to learn more about the two protocols.
Client status codes (set by the registrar)
Statuses that begin with client are set and removed by the domain's registrar. The transfer, update and delete prohibitions make up the usual registrar lock and are nothing to worry about. client and client are rarer and usually point to a problem that needs the registrar's attention.
| Status code | RDAP status | Set by | What it means |
|---|---|---|---|
client | client transfer prohibited | Registrar | The registrar has locked the domain against transfers to another registrar, the standard protection against domain hijacking. |
client | client update prohibited | Registrar | The registrar has locked the domain against changes, so its name servers, contacts and DNSSEC data can't be updated. |
client | client delete prohibited | Registrar | The registrar has locked the domain against deletion, protecting it from being deleted by mistake or by an attacker. |
client | client renew prohibited | Registrar | The registrar has blocked renewals of the domain, an uncommon status usually tied to a legal dispute or a planned deletion. |
client | client hold | Registrar | The registrar has told the registry not to publish the domain in DNS, so the domain does not resolve and its website and email stop working. |
Server status codes (set by the registry)
Statuses that begin with server are set by the registry that runs the TLD, and a registrar cannot remove them on its own. On well-known domains the server transfer, update and delete prohibitions usually mean a registry lock is in place, while server means the registry has suspended the domain.
| Status code | RDAP status | Set by | What it means |
|---|---|---|---|
server | server transfer prohibited | Registry | The registry has locked the domain against transfers to another registrar, often as part of a registry lock or during a dispute. |
server | server update prohibited | Registry | The registry has locked the domain against changes such as new name servers or contacts; only the registry can lift the lock. |
server | server delete prohibited | Registry | The registry has locked the domain against deletion, which is typical of a registry lock and of domains in the redemption period. |
server | server renew prohibited | Registry | The registry won't allow the domain to be renewed, an uncommon status usually linked to a legal dispute or an upcoming deletion. |
server | server hold | Registry | The registry has removed the domain from DNS, so it does not resolve and its website and email stop working until the hold is lifted. |
Lifecycle and pending status codes
These statuses are managed by the registry. ok and inactive describe the domain's overall state; the pending statuses mean a request has been received but not completed yet.
| Status code | RDAP status | Set by | What it means |
|---|---|---|---|
ok | active | Registry (automatic) | The domain has no pending operations and no restrictions, so it can be updated, renewed, transferred or deleted normally. |
inactive | inactive | Registry (automatic) | The domain has no name servers delegated at the registry, so it is not published in DNS and does not resolve. |
pending | pending create | Registry | A request to register the domain has been received but not completed yet, typically during a TLD launch phase or a manual registry review. |
pending | pending delete | Registry | The domain is being deleted. After the redemption period it can't be restored, and gTLD domains are released about 5 days later. |
pending | pending renew | Registry | A request to renew the domain has been received and is being processed, but the renewal has not been completed yet. |
pending | pending restore | Registry | The registrar has asked the registry to restore the domain from its redemption period, and the registry is waiting for the restore report. |
pending | pending transfer | Registry | A transfer of the domain to a new registrar has been requested and is waiting to be approved, rejected or completed automatically. |
pending | pending update | Registry | A request to update the domain, such as a contact or name server change, has been received and is waiting to be completed. |
Grace period status codes (RGP)
The Registry Grace Period (RGP) extension, RFC 3915, marks the days after a domain is registered, renewed, transferred or deleted. The durations below are typical for generic TLDs (gTLDs); country-code registries set their own rules.
| Status code | RDAP status | Set by | What it means |
|---|---|---|---|
add | add period | Registry (grace period) | The domain was registered within the last few days (usually 5 for gTLDs) and is in its add grace period. This status is informational only. |
auto | auto renew period | Registry (grace period) | The domain has expired and the registry renewed it automatically; for gTLDs the registrar has up to 45 days to keep or delete it. |
renew | renew period | Registry (grace period) | The domain was renewed within the last few days (usually 5 for gTLDs) and is in its renew grace period; no action is needed. |
transfer | transfer period | Registry (grace period) | The domain was recently transferred to a new registrar and is in its transfer grace period, usually 5 days for gTLDs; no action is needed. |
redemption | redemption period | Registry (grace period) | The domain was deleted and no longer resolves, but its owner can restore it for a fee during the redemption period (30 days for gTLDs). |
Common status combinations
Here is how to read the combinations you are most likely to see in a lookup:
| Statuses | What it usually means |
|---|---|
| The registrar lock is on. The domain is protected and working normally. | |
| A registry lock, usually on top of the registrar lock. It is typical of high-value domains; look up google.com to see an example. | |
| No locks and no pending operations (shown as active in RDAP). The domain works normally. | |
| Either status means the domain is suspended: it is still registered but does not resolve. | |
| Registered but without name servers, so the domain does not resolve. | |
| The domain has passed its expiration date. The owner can usually still renew it through the registrar. | |
| Deleted and out of DNS, but the previous owner can still restore it for a fee. | |
| Shown alone: the domain can no longer be restored and will soon be released for registration. |
The domain name lifecycle
For gTLDs such as .com, .net and .org, a domain that is not renewed moves through the following stages. The durations are typical for gTLDs; country-code TLDs follow their own policies, and some delete expired domains much sooner.
- Registered. A new domain shows
addfor about 5 days, next toPeriod okor the registrar's locks. Renewals and transfers briefly addreneworPeriod transfer.Period - Expired. On the expiration date the registry renews the domain automatically and it enters
autofor up to 45 days. The owner can still renew it; many registrars stop the domain from resolving or show a parking page during this time.Renew Period - Redemption. If the domain is not renewed, the registrar deletes it and it spends 30 days in
redemption, often together withPeriod pendingDelete. The domain is out of DNS, but the owner can restore it for a fee (pendingis shown while the restore completes).Restore - Pending delete. Once the redemption period ends,
pendingremains on its own for about 5 days. The domain can no longer be restored.Delete - Released. The registry purges the domain and anyone can register it again.
Our domain expiration guide explains each stage in more detail, including how to recover an expired domain and when a dropped domain becomes available.
Check a domain's status
Enter a domain name to see its current status codes, along with its registrar, registration and expiration dates and name servers.
Official references
- ICANN: EPP Status Codes, What Do They Mean, and Why Should I Know?
- RFC 5731: EPP Domain Name Mapping (core status values)
- RFC 3915: Domain Registry Grace Period Mapping for EPP (grace period and restore statuses)
- RFC 8056: EPP and RDAP Status Mapping (RDAP names)
Related guides
- Domain expiration: what happens when a domain is not renewed
- How to find a domain owner when the WHOIS record is redacted
- What is RDAP? The protocol that is replacing WHOIS
- TLD list with the WHOIS and RDAP servers for every top-level domain
- RDAP server list and WHOIS server list