- Blocks changes to DNS servers
- Blocks transfer of the domain name
- Blocks changes to contacts
- Blocks deletion of the domain name
These changes will require triple authentication. If a request is made for a domain locked by the registry, an authorized person from the registrar must submit the request to the registry in order to unlock the domain name. The registry then contacts the requester by phone, and the latter must provide a personalized security phrase in order for the domain to be unlocked. This step is in addition to the usual process and provides greatly improved security for strategic domains.