Registry Lock
A high-security service where the registry freezes a domain so changes need manual out-of-band approval.
- glossary
Registry Lock is a premium security service offered by a registry that places a domain into a state where no modification — including nameserver changes, transfers, or deletions — can be processed through the normal automated EPP channel. Instead, any change requires a manual, out-of-band verification process involving phone calls, cryptographic tokens, or in-person identity checks between the registrar and the registry. This is distinct from the more common transfer lock, which the registrar controls and can toggle through its own systems; registry lock escalates the protection to the registry tier, making unauthorized changes extremely difficult even if an attacker gains full access to the registrar account. It is most commonly used by financial institutions, large brands, and critical-infrastructure operators to protect high-value domains against domain hijacking.
Related keywords
- registry lock
- domain lock
- high-security lock
- domain hijacking prevention
- out-of-band verification
Contributors
Namefi is a collective of engineers, designers, and operators who obsess over building tools that make managing your onchain domain names effortless.
Victor Zhou is a technology founder and standards editor focused on digital identity and trust. He founded Namefi, edits Ethereum Improvement Proposals, and previously led smart-contract architecture work at Google Labs.
His work sits at the intersection of naming, ownership, and the systems people use to establish identity online. That perspective makes him especially interested in the way names move between personal meaning, public recognition, and digital infrastructure.
For Namefi, Victor edits and writes about domains as durable digital identity: how names become ownable onchain assets, how tokenization changes custody and trust, and what naming can learn from the systems people use to establish identity online.