Nothing is pending and nothing is locked.
ok is the default state of a domain with no pending operations and no prohibitions. The registry sets and removes it automatically as other statuses come and go, and RFC 5731 says it must never appear together with any other status. RDAP servers usually show it as “active”.
- EPP code
- ok
- In RDAP
- active
- Set by
- The registry (server status)
- Defined in
- RFC 5731 §2.3
- How serious
- Nothing wrong
Why it matters
A domain that only says ok works normally, but it also has no lock against an unauthorised transfer, update or deletion.
When you’d see it
You bought a domain years ago at a small registrar that never turned on locks. A lookup shows only ok (RDAP: active). The domain works, but if someone gets into the registrar account they can move it with nothing extra in the way.
How it shows up in a lookup
In a gTLD WHOIS lookup it appears as “Domain Status: ok https://icann.org/epp#ok”; RDAP shows it as “active”. It is managed by the registry as a result of an operation (RFC 5731 §2.3), not a setting you or your registrar toggle directly.
What to do
Nothing is broken. For a domain your business depends on, ask your registrar to turn on clientTransferProhibited (most call it “domain lock”), and consider clientUpdateProhibited and clientDeleteProhibited too.
Combination rules
ok must not be combined with any other status (RFC 5731 §2.3).
Related codes
Sources
Sources
- RFC 5731 §2.3 (EPP Domain Name Mapping) · checked 5 Oct 2026
- ICANN: EPP Status Codes, What do they mean, and why should I know? · checked 5 Oct 2026
- RFC 8056: EPP and RDAP status mapping · checked 5 Oct 2026