ok Domain Status: What It Means (and One Thing to Check)
ok is the baseline EPP status. Per ICANN, it's the standard status for a domain, meaning it has no pending operations or prohibitions. In RDAP output it maps to "active."
It sounds like the status you want. It's actually slightly weaker than that — read on.
What ok means
Every domain carries at least one status code, and ok is what you see when nothing else applies: no locks, no holds, no pending transfers or deletions, no grace periods. The domain resolves (assuming nameservers are set), renews normally, and can be freely updated or transferred.
ok is exclusive by nature — the moment any prohibition or pending operation is added, ok is replaced by those codes. So a domain showing only ok is telling you something specific: it has no protections enabled.
Is it good or bad news?
Mostly good — nothing is wrong. But ICANN's own guidance on the ok status is worth taking literally: asking your registrar to enact status restrictions like clientTransferProhibited, clientDeleteProhibited, and clientUpdateProhibited can help prevent unauthorized transfers, deletions, or updates.
In other words, a valuable domain sitting at bare ok is an unlocked door. Most reputable registrars apply clientTransferProhibited by default, so bare ok often indicates either an older registration, a registrar with weak defaults, or a lock someone turned off and forgot to restore.
What to do about it
- •For any domain you care about, enable your registrar's domain lock — that sets clientTransferProhibited (and usually update/delete prohibitions too).
- •Audit your portfolio for names showing bare ok: those are your least-protected assets. Sourdough's RDAP enrichment surfaces every domain's status codes in one view — with a 7-day free trial — so unlocked names stand out.
- •If you're about to transfer or restructure a domain, ok is the state you want it in temporarily; just re-lock afterward.
Frequently Asked Questions
Is "ok" the same as "active" in RDAP?
Yes. The EPP code ok maps to the RDAP status "active." Both mean the domain has no pending operations and no prohibitions set.
Is the ok status bad?
Nothing is wrong with the domain, but ok also means no transfer, update, or delete locks are enabled. ICANN suggests asking your registrar to enable those restrictions to prevent unauthorized changes — for most domains, locked is the healthier resting state.