Enable domain lock (registrar lock) to prevent unauthorized transfers

Domain lock, also called registrar lock, provides genuine protection against unauthorized domain transfer attempts — this setting prevents your domain from being transferred to a different registrar without additional verification, closing off a specific, documented attack vector where an attacker who's gained some level of unauthorized access attempts to transfer your domain away from your legitimate control.

The genuine severity of a successful unauthorized transfer deserves real understanding — losing control of your domain through this kind of attack can result in complete loss of your website, email, and any other services depending on that domain, representing one of the more severe possible outcomes among the various risks discussed throughout this broader security work.

This protection typically requires minimal ongoing effort once enabled — most domain registrars provide this as a straightforward setting within your domain management interface, and enabling it provides genuine, persistent protection against this specific attack vector without requiring ongoing maintenance beyond the initial configuration.

This represents a genuinely low-effort, high-value protection given the severity of what it prevents — the modest effort required to verify and enable this setting is disproportionately small relative to the severe potential consequences of an unauthorized domain transfer succeeding due to this protection being absent.