What are the Different Types of Domain Locks?

Domain locks protect a domain name from unauthorized transfers and modifications. It prevents any changes to a domain's registration details, including transfers to another registrar or updates to contact information.

Discover the different types of domain locks, including Legal Locks, Transfer Locks, OCRA Locks, and COR Locks. These locks are designed to secure your domain name online. Learn more about each type.

In this article, we will discuss:

• What is Legal Lock?
• What is a Transfer Lock?
  • How to Check the Domain Lock Status
• What is an OCRA Lock?
  • Affected Domain Extensions
• What is a COR Lock?
• Why Are Domain Locks Used?
• Best Practices for Domain Security
• Review

What is a Legal Lock?

Domain Legal Locks are designed to enhance your safety and security. Domains are often locked due to suspicious activity to avoid fraudulent transfers, dispute resolutions, and more. A brief investigation will be necessary to unlock it for your safety. You will then be contacted within 1-2 business days. Investigations and lock release may require additional time and will be communicated on a case-by-case basis.

What is a Transfer Lock?

Transfer Lock, also known as Domain Lock, is applied by the Registrar to prevent accidental or unwanted changes to a domain.

One of the benefits of a domain transfer lock is that it protects a domain name from being transferred out of your account by an unauthorized user. Moreover, this lock is an added layer of protection to keep your domain names registered to you or your business even if someone obtains your unique authorization code.

How to Check the Domain Lock Status

Check your domain lock status and learn how to enable a domain lock or disable it:

1. Log in to your Account Manager. Go to https://www.web.com/my-account/login and enter your User ID and Password.
2. Once logged in, click Domains on the left navigation menu.
3. Go to the Transfer or Move Domain section, then turn on or off the Domain Locked toggle switch to enable or disable the transfer lock.
   
   
   Your domain will show as locked under the Domain Overview if you enable transfer lock.
   

If your Account Manager shows as the image below, follow the below steps:

1. Click the Domains tile.
2. In the Domains list, click the domain in which you want to edit the transfer lock.
3. On the Domain Overview page, you can toggle Transfer Lock on or off.
   

What is an OCRA Lock?

A lock status will be placed on the domain when certain changes are made to your account to ensure you receive the highest security protection when registering a domain name with us.

The OCRA Lock is placed when you update the following information in conjunction with a password reset:

• The Primary Contact name has been changed.
• The Primary Contact email address has been changed.
• The WHOIS Admin Contact email address has been changed.
• The WHOIS Admin Contact has been replaced.
• The User IDs are merged in the account manager.
• The Primary Contact has been changed.

Affected Domain Extensions

A 30-day OCRA Lock (Outbound Change of Registrant) will be placed on the following domain extensions when certain account changes have occurred within the last 30 days:

• .biz
• .cc
• .cn
• .com
• .info
• .mobi
• .name
• .net
• .org
• .tv
• .us

An email will notify you that a change has occurred on your account, resulting in an outbound Transfer lock being applied.

The OCRA Lock is set on the domain the same day the change is made. The lock date is reset if any subsequent changes occur in the account after that time.

When certain changes are made to an account in coordination with a password reset, all eligible domains currently residing in that account will be placed on an OCRA Lock. If a new domain name is purchased or moved to the account, this will not affect the new domain(s).

What is a COR Lock?

COR (Change of Registrant) Locks are applied by ICANN to prevent domain hijacking with a lock. It increases the security of a domain to prevent hijacking or other potential hazards. If you are the Registrant or Primary Account Holder, updates made to your contact information that involve changes to the Registrant's name, email address, or organization name will result in a 60-day COR Lock on all domain names associated with your account.

COR Locks are triggered by a few things:

1. When there are certain changes to the Registrant's information, this includes an internal transfer (also known as an RNCA or Registrant Name Change Agreement) or any changes to the Registrant's name, email address, or organization name.
2. It can also be triggered by a change of Administrative email address if no Registrant email address is displayed in the WHOIS database.
3. The lock is triggered when the domain transfers from one party to another.

Depending on the change, you will be required to verify the requested updates via a confirmation email. You can still manage, renew, and transfer your domains internally (moving domains between accounts) while on the 60-day lock. However, you cannot transfer domains to another registrar until the lock has been lifted.

Why Are Domain Locks Used?

Domain locks protect a domain from various security risks. Without these locks, unauthorized individuals could easily switch your domain to another registrar or alter its registration details without your permission. This coud lead to domain hijacking, where a hacker takes over your domain and redirects your visitors to harmful websites, sends spam emails using your domain, or even demands a ransom for its return. 

Similarly, the lack of domain locks might result in accidental changes or transfers caused by human error, further jeopardizing the security and credibility of your online presence. Domain locks keep a domain safe from these dangers.

Best Practices for Domain Security

See the articles below for best practices to protect your domain:

• Domain Privacy + Protection
• Protect Your Small Business Online
• Protecting Yourself from Domain Hijacking

Review

Learn more about the various types of domain locks, namely Legal Locks, Transfer Locks, OCRA Locks, and COR Locks, to safeguard your domain name online. This article also touches on the benefits of Domain Privacy + Protection for enhanced domain security.

You can check and modify your domain's transfer lock status through your Account Manager. Understanding these domain locks is crucial for protecting your domain from unauthorized access and ensuring its security.