Decode EPP domain status codes, see which party set them, and know what action to take.

EPP (Extensible Provisioning Protocol) status codes are standardized status indicators defined by ICANN that show the current operational and lifecycle state of a domain name. To check a domain's active status codes, run the domain through Domain WHOIS, then click or paste any returned status code into the guide above to see its exact meaning, severity level, and recommended next steps.

Although there are nearly two dozen official EPP status codes, four baseline rules let you diagnose any domain record in seconds:

• "Client" vs. "Server" Prefix (Which Party Holds the Key): Every status starting with client (such as clientTransferProhibited or clientHold) is set by the domain's registrar and can usually be toggled inside your registrar account or via registrar support. Every status starting with server (such as serverHold or serverDeleteProhibited) is enforced at the TLD registry level (typically for registry lock services, UDRP legal disputes, or court orders), and your registrar cannot override it alone.
• "Prohibited" Locks Are Usually Good News: New domain owners often worry when they see clientTransferProhibited, clientUpdateProhibited, or clientDeleteProhibited. In normal operations, these are standard security locks enabled by default to prevent unauthorized domain hijacking or accidental deletion. Simply unlock them in your registrar dashboard when you legitimately need to transfer or edit the domain.
• "Hold" Means the Website Is Offline (clientHold / serverHold): While "Prohibited" codes only block administrative changes, clientHold and serverHold remove the domain's nameservers from the TLD zone file entirely. If your domain shows a Hold status, its website and email will stop resolving globally until the underlying issue (unverified WHOIS contact email, expired billing, or abuse suspension) is resolved.
• The Expiration Countdown (autoRenewPeriod → redemptionPeriod → pendingDelete): When a domain expires, it moves through a strict status sequence. autoRenewPeriod (usually 1 to 45 days) means the owner can still renew at standard cost. redemptionPeriod (typically 30 days) means the domain has been stripped from the zone and requires an expensive redemption fee to recover. Once it enters pendingDelete (5 days), the domain can no longer be rescued by the prior owner and will drop for public registration.

Because Hold statuses stop your domain from resolving in DNS, act immediately based on the prefix:

• For clientHold: Log in to your registrar account first. The three most common causes are an unclicked ICANN WHOIS verification email after registration/transfer, an overdue renewal invoice, or a terms-of-service compliance ticket. If you need to contact the registrar's compliance team, find their official contact record using Registrar Check.
• For serverHold: The restriction was placed by the registry operator, often due to a registry-level abuse report or legal dispute. Contact your registrar for the registry case reference number, and inspect the domain via Safety Check to see if it was flagged on security blocklists.

If you are monitoring an expiring domain for acquisition, status codes tell you exactly where it sits in the drop pipeline. Instead of checking individual domains one by one, use Expired Domains Search to filter domains across grace period, redemption, and pending delete stages, or browse Deleted Domains Search once the 5-day pendingDelete window completes and the name drops back to standard registration pricing.