EPP domain status codes describe what a registry or registrar is allowing to happen to a domain registration. clientTransferProhibited is usually a normal registrar lock. clientHold or serverHold can stop DNS publication. redemptionPeriod means an expired or deleted name may still be restorable, while pendingDelete usually means normal restoration has ended.
A single domain can show several statuses at once. That is not a contradiction: one flag can block transfer, another can block updates, and a grace-period flag can describe where the registration sits in its lifecycle. The useful approach is to read them as a set, identify who applied each code, and separate registration trouble from hosting or DNS trouble.
What is an EPP status code?
Extensible Provisioning Protocol, or EPP, is the protocol registrars use to provision domain objects at many registries. Its standardized status values appear in registration data, traditionally through WHOIS and increasingly through RDAP. ICANN publishes human-readable explanations and action guidance for the common gTLD codes.
A registry-level state or restriction attached to a domain registration, such as active, transfer-locked, on hold, in redemption or pending deletion.
Status wording may appear in camel case, such as clientTransferProhibited, as spaced RDAP text, or as a link beginning https://icann.org/epp#. The meaning is the same family of state, but not every ccTLD uses the standard gTLD lifecycle exactly.
Client vs server: who set the restriction?
In EPP terminology, client means the registrar. A client... code was set through the registrar side, often automatically or through a control in your account. Server means the registry, the wholesale operator of the TLD. A server... status takes precedence and normally cannot be removed by clicking an ordinary registrar toggle.
| Prefix | Set by | First contact | Typical pattern |
|---|---|---|---|
client | Registrar | Your registrar | Account lock, compliance, billing or dispute |
server | Registry | Your registrar, which escalates to registry | Registry policy, legal action, abuse or administrative restriction |
pending | Registry process | Registrar for status and options | An operation is awaiting completion |
| Period status | Registry lifecycle | Registrar if action is needed | Grace window after create, renew, transfer or delete |
Common active and lock statuses
| Status | Meaning | What to do |
|---|---|---|
ok | No pending operation or prohibition is attached | Nothing, unless the site has a separate DNS or hosting issue |
clientTransferProhibited | Registrar transfer lock | Leave it for security; unlock only when intentionally transferring |
clientUpdateProhibited | Registrar blocks domain-object updates | Remove the relevant lock or ask the registrar why it applies |
clientDeleteProhibited | Registrar blocks deletion | Usually protective; contact registrar if deletion is intended |
clientRenewProhibited | Registrar blocks renewal | Investigate promptly, especially near expiration |
inactive | Domain lacks delegated nameservers or is not published | Add valid nameservers or ask why delegation is absent |
The corresponding serverTransferProhibited, serverUpdateProhibited, serverDeleteProhibited and serverRenewProhibited impose the same type of restriction from the registry side. Because your registrar is your contractual interface, contact it first even when the registry set the code.
Hold statuses: why the domain may not resolve
clientHold tells the registry not to activate the name normally in DNS and is set by the registrar. Causes can include failed contact verification, non-payment, abuse investigation, a dispute or another compliance problem. serverHold has a similar DNS effect but is applied by the registry.
Treat any hold as urgent
A hold can interrupt both the website and domain-based email. Log in directly through a known registrar URL, review notices and contact support. Do not follow an unexpected “verification” link until you independently confirm the message is genuine.
Removing a hold does not guarantee an instant-looking recovery everywhere. Once delegation returns, recursive resolvers and client caches may need to refresh. The underlying cause must also be fixed; repeatedly toggling nameservers will not resolve a policy or payment hold.
Pending operations
pendingTransfer: a registrar-to-registrar transfer request is waiting for approval, rejection or timeout. Check both registrar accounts and the registrant email.pendingCreate: the registry is processing creation. It is usually short-lived; ask the registrar if it persists.pendingRenew: a renewal request is being processed.pendingUpdate: a requested domain-object update is awaiting completion.pendingRestore: restoration from redemption has been requested and may require the registrar to submit a restore report within the applicable rules.
A pending code is not permission to repeat the operation at another provider. First determine whether an existing request is legitimately underway. Duplicate or conflicting actions can complicate support.
Grace, redemption and deletion statuses
| Status | Where it appears | Registrant response |
|---|---|---|
addPeriod | Short grace period after initial creation | Usually informational |
autoRenewPeriod | Registry auto-renew grace after expiry | Confirm payment and registrar renewal state |
renewPeriod | Grace period after an explicit renewal | Usually informational |
transferPeriod | Grace period after a successful transfer | Confirm the new registrar account and settings |
redemptionPeriod | Post-deletion restore window in common gTLD lifecycles | Ask the current registrar for an urgent restore and fee quote |
pendingDelete | Deletion is scheduled and ordinary restoration has usually ended | Confirm with registrar; prepare for uncertain public release rather than relying on recovery |
pendingDelete does not promise that a name will become freely available at a precise second. Registries, auctions, backorders and registrar expiration processes can affect acquisition. If the domain is important and still in redemptionPeriod, restoring it is usually safer than trying to catch it later. See the renewal and expiration guide.
How to diagnose a domain problem
- Look up current registration data. Use a reputable RDAP or registry lookup and record every status, registrar and expiry field.
- Check the registrar account directly. Review billing, verification, abuse and transfer notices without relying on links in an unexpected email.
- Separate status from DNS. If the status is healthy, inspect nameserver delegation and DNS records; if a hold appears, resolve it first.
- Identify who set the code. A client status points to the registrar side; a server status needs registrar escalation to the registry.
- Preserve evidence and deadlines. Save support tickets, payment receipts and lookup results, especially during transfer or redemption.
If the only code is clientTransferProhibited and the website is down, the transfer lock is probably not the cause. Check how the domain points to hosting and how resolution works. If you are transferring, you may need both an unlock and the EPP authorization code; the status and the password are different things.
★ Key takeaways
clientcodes come from the registrar;servercodes come from the registry.- A transfer prohibition is usually a healthy lock, while a hold can stop DNS resolution.
- Multiple statuses can apply simultaneously and should be read together.
redemptionPeriodmay still permit paid restoration;pendingDeleteis usually later and more final.- A healthy EPP status does not rule out DNS, hosting, TLS or application failures.
Frequently asked questions
What does clientTransferProhibited mean?
The registrar has applied a transfer lock, so the registry will reject an attempt to move the domain to another registrar. This is a normal security status. If you intend to transfer, unlock the domain in the registrar account and check whether another policy lock still applies.
What is the difference between clientHold and serverHold?
Both prevent the domain from being published normally in DNS. clientHold is set by the registrar; serverHold is set by the registry and generally requires registry-level or registrar-assisted resolution. Contact the registrar promptly and ask for the specific cause.
Does an ok status mean the website works?
Not necessarily. ok means no EPP prohibition or pending operation applies to the registration. The website can still fail because of nameserver, DNS-record, hosting, TLS or application problems.
Can a domain in redemptionPeriod be recovered?
Often yes, through the current registrar, but a restore fee and a strict deadline usually apply. The exact lifecycle depends on the TLD. Contact the registrar immediately rather than waiting for the domain to reach pendingDelete.
Can a pendingDelete domain be renewed?
Usually not through an ordinary renewal. In common gTLD lifecycles, pendingDelete follows the restore window and means the name is scheduled for deletion. Registry rules vary, so confirm with the registrar, but do not assume recovery remains possible.