To help your customers understand the difference between a standard lock and high-end security, this article explains the "Server-Side" mechanics. Its perfect for the Enterprise Domain Protection category on nixzoehost.com.

What is a Registry Lock?

If a standard domain lock is like a deadbolt on your front door, a Registry Lock is like a security guard stationed at the gate of the entire neighborhood.

It is the most advanced security status a domain can have, moving the "lock" away from your hosting account and placing it directly with the central Registry (such as Verisign for .com or CIRA for .ca).

How it Works: The "Server" Status

Every domain has a status code (called an EPP code) that tells the internet what can or cannot be done with that domain. You can see these codes by performing a "WHOIS" lookup.

• Standard Lock: Displays clientTransferProhibited. This is set by us (the Registrar) and can be toggled off instantly in your dashboard.

• Registry Lock: Displays serverTransferProhibited and serverUpdateProhibited. These can only be changed by the central Registry.

The "Out-of-Band" Verification Process

The reason a Registry Lock is so secure is that it removes the "Single Point of Failure." Even if a hacker steals your Nixzoehost password, they cannot unlock the domain.

To make any changes to a Registry-Locked domain, a manual process occurs:

1. Request: You contact our Enterprise Security team.

2. Verification: We perform a manual identity check (often involving a secure PIN or a phone call to a pre-authorized contact).

3. Registry Contact: Only after we are 100% certain of your identity do we contact the Registry to temporarily "thaw" the domain.

4. Action: The DNS or transfer is updated.

5. Relock: The domain is immediately placed back under Registry Lock.

Registry Lock vs. Registrar Lock

Who is this for?

Because of the manual labor involved and the fees charged by the registries, this service is usually a premium add-on. We recommend it for:

• Financial Institutions: Where a DNS hijack could lead to phishing.

• Major E-commerce Brands: Where "Domain Theft" would be a catastrophic business loss.

• High-Value Domains: Any domain valued at $5,000+ should be under Registry Lock.

Commonly Supported Extensions

Registry Lock is currently available for most major extensions, including:

• Generic: .com, .net, .org, .io

• Specialty: .security, .protection, .bank

• Country Codes: .ca, .uk (Rules vary by country)

Nixzoehost Security Tip: If you see the status serverTransferProhibited in your WHOIS records and you didn't request a lock, contact us immediately. This status is also used by registries during legal disputes or if there is a problem with the domain's registration.