ok Domain Status: What It Means (and One Thing to Check)

What ok means

Every domain carries at least one status code, and ok is what you see when nothing else applies: no locks, no holds, no pending transfers or deletions, no grace periods. The domain resolves (assuming nameservers are set), renews normally, and can be freely updated or transferred.

ok is exclusive by nature — the moment any prohibition or pending operation is added, ok is replaced by those codes. So a domain showing only ok is telling you something specific: it has no protections enabled.

Is it good or bad news?

Mostly good — nothing is wrong. But ICANN's own guidance on the ok status is worth taking literally: asking your registrar to enact status restrictions like clientTransferProhibited, clientDeleteProhibited, and clientUpdateProhibited can help prevent unauthorized transfers, deletions, or updates.

In other words, a valuable domain sitting at bare ok is an unlocked door. Most reputable registrars apply clientTransferProhibited by default, so bare ok often indicates either an older registration, a registrar with weak defaults, or a lock someone turned off and forgot to restore.

What to do about it

• •For any domain you care about, enable your registrar's domain lock — that sets clientTransferProhibited (and usually update/delete prohibitions too).
• •Audit your portfolio for names showing bare ok: those are your least-protected assets. Sourdough's RDAP enrichment surfaces every domain's status codes in one view — with a 7-day free trial — so unlocked names stand out.
• •If you're about to transfer or restructure a domain, ok is the state you want it in temporarily; just re-lock afterward.