Free next step

Check your portfolio for stale records

Domain Health & Renewal Calendar. Use the practical next step before deciding whether you need the full product.

Check your portfolio for stale records
Live registry enrichment7-day trial$0 due todayProof: live_rdap

Domain Status Codes (EPP) Explained

Run a WHOIS or RDAP lookup on any domain and you’ll see one or more EPP status codes — terse, camelCased flags like clientTransferProhibited or redemptionPeriod. They are the registry’s ground truth about what can and cannot happen to a domain right now: whether it can transfer, renew, resolve, or whether it is on its way to deletion.

Some codes are healthy defaults, some are routine lifecycle stages, and a few mean you are days from losing the domain. These pages explain each code: who sets it, whether it is good or bad news, and exactly how to respond.

Client Codes (set by your registrar)

clientTransferProhibited
What clientTransferProhibited means in WHOIS: a registrar-set transfer lock. Why it is usually good news, and how to remove it when you want to transfer.
clientUpdateProhibited
clientUpdateProhibited is a registrar-set lock that blocks changes to your domain — nameservers, contacts, DNS delegation. What it protects and how to lift it.
clientDeleteProhibited
clientDeleteProhibited is a registrar-set status that blocks deletion of your domain. Why it exists, why it is usually protective, and how to remove it.
clientRenewProhibited
clientRenewProhibited is an uncommon registrar-set code that blocks renewal of your domain, often during disputes. What it signals and how to resolve it.
clientHold
clientHold means your registrar told the registry not to activate your domain in DNS — your site and email stop working. Common causes and how to fix it fast.

Server Codes (set by the registry)

serverTransferProhibited
serverTransferProhibited is a registry-level transfer lock your registrar toggle cannot clear. Registry lock vs legal dispute — and how to get it lifted.
serverUpdateProhibited
serverUpdateProhibited is a registry-set lock that blocks all changes to your domain. What it means, registry lock vs legal dispute, and the removal process.
serverDeleteProhibited
serverDeleteProhibited is a registry-set status that prevents your domain from being deleted. Why it appears, when it signals a dispute, and how removal works.
serverRenewProhibited
serverRenewProhibited means the registry will not let your registrar renew the domain — usually a dispute or pending deletion. What it signals and how to act.
serverHold
serverHold means the registry removed your domain from DNS — it will not resolve. Why registries do this, how serious it is, and the path to getting it lifted.

Lifecycle Codes

ok
The ok status (shown as "active" in RDAP) means your domain has no pending operations or prohibitions. Why that also means no locks — and what to enable.
inactive
The inactive status means no nameservers are associated with your domain, so it will not resolve. Common causes and how to add delegation to activate it.
addPeriod
addPeriod is the registry grace period right after a new domain registration. What it means, how long it lasts, and why it is nothing to worry about.
autoRenewPeriod
autoRenewPeriod means the registry auto-renewed your expired domain and a grace window is running. What it means for your renewal fee and drop decisions.
renewPeriod
renewPeriod is the grace window after an explicit domain renewal by your registrar. What it means, when to act, and how it differs from autoRenewPeriod.
transferPeriod
transferPeriod is the grace window after a domain transfer between registrars completes. What it means, the extra year, and the red flag to watch for.
redemptionPeriod
redemptionPeriod means your domain was deleted and is in a ~30-day recovery window. How to restore it, what the fee costs, and why every day matters.
pendingDelete
pendingDelete means a domain is days from being purged and released. Why restoration is usually no longer possible, and what former owners can still do.
pendingRestore
pendingRestore means your registrar asked the registry to restore your domain from redemption. What happens next and the seven-day window to watch.
pendingCreate
pendingCreate means a request to register the domain was received and is processing — common in sunrise launches. What it means and when to act on it.
pendingRenew
pendingRenew means a renewal request for your domain is being processed by the registry. When it is routine, and when it signals a renewal you never asked for.
pendingTransfer
pendingTransfer means a registrar transfer request for your domain is in progress. How long it takes, how to speed it up, and how to stop one you never made.
pendingUpdate
pendingUpdate means an update request for your domain is being processed by the registry. When it is routine, and the ICANN-flagged case that needs action.

Practical Guides

How to Unlock a Domain
A domain can be locked by six different EPP status codes, set by your registrar or the registry. How to identify which lock you have and remove each one.
Remove clientHold
Your domain is on clientHold and offline. How to find out which cause applies — email verification, non-payment, abuse, legal — and clear each one fast.
Recover From Redemption
Your domain hit redemptionPeriod after expiring. The exact recovery steps, what restore fees cost ($70-$200 typical), and the deadlines you cannot miss.
Transfer a Locked Domain
Transfer blocked by clientTransferProhibited or a 60-day lock? Which transfer blocks can be removed, which you must wait out, and the exact unlock steps.
serverHold vs clientHold
serverHold and clientHold both take your domain offline, but who set the hold changes everything — cause, severity, and fix. A side-by-side comparison.

Frequently Asked Questions

What are EPP status codes?

EPP (Extensible Provisioning Protocol) status codes are standardized flags set on a domain at the registry. Codes starting with "client" are set by your registrar; codes starting with "server" are set by the registry itself. They appear in WHOIS and RDAP output and control operations like transfers, renewals, updates, and deletion.

Which status codes mean my domain is in danger?

redemptionPeriod and pendingDelete mean the domain has expired and is moving toward release — act immediately. serverHold and clientHold mean the domain has been removed from DNS. Most other codes, like clientTransferProhibited, are routine protections.

Free next step

Check your portfolio for stale records

Domain Health & Renewal Calendar. Use the practical next step before deciding whether you need the full product.

Check your portfolio for stale records
Live registry enrichment7-day trial$0 due todayProof: live_rdap

Email resource

Domain Health & Renewal Calendar

Get the monthly .AI operations and market update. No unrelated promotions.

Free next step

Check your portfolio for stale records

Domain Health & Renewal Calendar. Use the practical next step before deciding whether you need the full product.

Check your portfolio for stale records
Live registry enrichment7-day trial$0 due todayProof: live_rdap
The Sourdough App

Records that keep themselves current

Live registry sync keeps expiry, registrar, nameservers, and status current. Carry cost and cost basis make the annual cull a decision instead of a guess.

Renewal alertsCost basis & P&LEvery registrarCSV import
Start your 7-day free trial →See a live demo

7-day free trial · $0 due today · Cancel anytime

Free .ai Tools

Domain Appraisal
Score any .ai domain across 5 key factors
Portfolio Carry Calculator
Your whole list, total annual carry
Name Generator
Generate .ai ideas from a keyword
Domain Age Checker
Registration date, expiry & history
Also from Sourdough:Daily .ai DropsDomain MonitorSell your .ai domain →