A domain lock (also called a registrar lock or transfer lock) is a status your registrar sets on your domain to stop it from being moved to a different registrar without your permission. If you've tried to start a domain transfer and been told the domain is "locked," this is what's blocking it, and it's simple to fix once you know where to look.
What a Domain Lock Actually Does
The lock only affects transfers. It does not stop your website, email, or DNS records from working normally. You can keep using your domain exactly as before while it's locked; the lock simply prevents anyone (including you, until you unlock it) from moving the domain to another registrar.
Why It's Turned On by Default
Registrars enable this status automatically to protect you from domain theft. Without it, someone who gained brief access to your account or email could initiate an unauthorized transfer and take control of your domain before you noticed. Leaving the lock on whenever you're not actively transferring is good practice, not an inconvenience.
When You Need to Unlock It
- You're moving the domain to a new registrar and need to request an EPP/authorization code.
- A receiving registrar has told you the transfer failed or is stuck because the domain shows as locked.
- You're consolidating several domains under one account and one of them won't budge until it's unlocked.
You do not need to unlock a domain just to point it to a new host, update its DNS records, or renew it. Unlocking only matters when the domain itself is changing registrars.
How to Check and Unlock Your Domain
- Log in to your ZIPROF Client Area.
- Go to Domains, then select the domain you want to transfer.
- Look for the Registrar Lock (sometimes shown as Domain Lock) toggle on the domain's management page.
- Switch it to Unlocked and save.
- Give it a few minutes to update before you request your EPP code or ask the new registrar to start the transfer.
For .co.ke and Other Local Domains
.co.ke domains are managed through the Kenya Network Information Centre (KENIC) registry, and not every local registrar exposes a self-service lock toggle the same way generic domains (.com, .net, and similar) do. If you don't see a lock option on your .co.ke domain, open a support ticket with your registrar and ask them to unlock it on your behalf before you request your authorization code.
Some domain extensions apply a short lock automatically right after registration or after certain changes, such as updating WHOIS contact details. If your domain looks locked and you haven't touched the toggle yourself, this is usually why, and it clears on its own after a set number of days.
After You Unlock the Domain
Once the lock is off, you can request your EPP/authorization code and give it to the registrar you're moving to. If you're not sure how that code works or where to get it, see What Is an EPP/Authorization Code and How Do You Get One?.
If the transfer doesn't go through right away, that's normal: most transfers take a few days to complete. For the full process, see How to Transfer a Domain to a New Registrar.
Once your transfer is finished (or if you decide not to go through with it), turn the lock back on. There's no reason to leave a domain unlocked longer than it takes to complete the move.