If account credentials are compromised or a RAM user gains unauthorized access, an attacker could transfer your domain to another registrar, causing website outages, email disruptions, or the permanent loss of your domain name and its assets.
The transfer lock blocks cross-registrar domain transfers at the registrar level, protecting against credential stuffing, phishing, and human error.
Billing
Free. No fees for enabling or disabling the transfer lock.
Procedure
Step 1: Open the domain security settings
-
Log on to the Alibaba Cloud Domain Names console.
-
On the Domain Names page, find the target domain name and click Manage in the Actions column.
-
In the left-side navigation pane, click Security Settings.
Step 2: Enable or disable the transfer lock
-
Enable: To block transfer-out requests, click Enable in the Actions column.
-
Disable: To allow cross-registrar transfers, click Disable.
Disabling the lock exposes your domain to transfer risks. Only disable it for the duration of the transfer and re-enable it immediately afterward.
Step 3: Complete security verification
In the confirmation dialog box, complete identity verification (for example, enter an email verification code). This ensures that only an authorized administrator performs the operation.
Best practices
-
Enforce multi-factor authentication (MFA): All accounts with domain management permissions must enable MFA to prevent unauthorized access even if transfer lock is enabled and an attacker steals your credentials. For more information, see Step 3: Configure MFA for your account.