What Is a Domain Transfer Code (EPP/Auth Code) and How Do You Get It?

A domain transfer code is a private, domain-specific authorisation code that you give to your new registrar when you move a domain name away from your current one. It is also called an EPP code, auth code or AuthInfo code. You get it from the registrar where your domain is registered today, either in your account dashboard or by asking their support team.

This guide shows you how to get the code, what to do if it never arrives, and why a transfer can still be rejected when the code is correct.

What does a transfer code actually do?

The code proves that the transfer request is authorised. Your new registrar submits it to the registry that runs the domain extension, and the registry checks it. If the code is invalid, the request cannot be verified and the transfer will not go through.

The code is not proof of ownership. Ownership is shown in the registrant details of the domain. Think of the code as a one-time permission slip rather than a title deed. Under ICANN’s rules, every code must be unique to its domain and generated securely.

Are an EPP code, auth code and AuthInfo code the same thing?

Yes. They all mean the same code; registrars simply use different names for it. You may see:

• EPP code
• Auth code or authorisation code
• AuthInfo code
• Transfer key, transfer secret or domain password
• TAC (Transfer Authorization Code): the name used in ICANN’s proposed new transfer rules and already adopted by some registries

In this guide we call it the transfer code.

Don’t confuse it with an EPP status code

EPP status codes describe the current state of a domain; they are not another name for the transfer code. Values such as clientTransferProhibited that you see in an RDAP/WHOIS lookup belong to this group. For .com, .net, .org and other generic extensions, registration data is now served through RDAP, which has replaced WHOIS; most lookup tools show both.

Is getting the code the same as removing the transfer lock?

No, they are two separate steps. The transfer lock (registrar lock) is a setting that stops anyone moving your domain without permission. In an RDAP/WHOIS lookup it usually appears as clientTransferProhibited.

If the lock is on, the transfer will be blocked even with the correct code. So switch the lock off first, then get your code. Some registrars combine both into a single “Transfer out” button. Locks that apply because of a legal dispute or the 60-day rules are different: you cannot remove those yourself, and we cover them below.

How is a domain transfer different from similar changes?

This guide covers moving a domain to a different registrar. That is the change that needs a transfer code; the others follow their own processes.

How do you get a domain transfer code?

You get the code from your current registrar; your new registrar cannot create it for you. Menu names vary, but the process usually looks like this:

1. Sign in to your current registrar’s dashboard.
2. Open your domain list and select the domain you want to move.
3. Turn off the transfer lock (often labelled “Registrar lock” or “Domain lock”).
4. Click “Get auth code”, “EPP code” or “Transfer out”.
5. The code appears on screen or is emailed to the registrant’s address.
6. Copy the code and share it only with the registrar you are moving to.

No such option? Open a support ticket and ask for the code. For ICANN-governed extensions such as .com, .net and .org, a registrar that does not offer self-service must provide the code within five calendar days of your request. It must also give you a way to remove any lock you are entitled to remove within the same period. Locks imposed by the 60-day rules or legal proceedings are outside this rule.

When copying the code: codes are usually case-sensitive, so check for spaces at the start or end. How long a code is, how long it stays valid and whether it can be reused all depend on the registrar and the extension.

How do you transfer a domain to Atak Domain?

Once you have your code, you can start the transfer on Atak Domain’s transfer page in a few minutes.

1. Enter your domain on the Domain Transfer page.
2. Paste the transfer code into the field and continue to your basket.
3. Complete payment. For most generic extensions such as .com, .net and .org, the transfer adds one year to your registration. Check the price and renewal terms for your specific extension before you pay.
4. Follow the steps in the verification email you receive. Your current registrar may also email you to say a transfer has started.
5. When the transfer completes, you can manage the domain from your Atak Domain dashboard.

Moving several domains? Use the bulk transfer box: enter one domain per line, followed by a space and its code.

What if your transfer code never arrives?

One common reason is that the email address it was sent to is no longer in use. Check these points in order:

• ☐ Have you checked your spam, junk and promotions folders?
• ☐ Is the registrant email on the domain up to date, and can you still access it?
• ☐ Did you request the code for the right domain?
• ☐ If a reseller, agency or web designer registered the domain for you, did the code go to them?
• ☐ Does your dashboard have an option to display the code on screen?

Still nothing? Ask your current registrar for the code in writing and note the date. For an ICANN-governed extension, if you have not received it within five calendar days, you can file a complaint with ICANN. A billing dispute alone is not a valid reason to withhold the code.

What should you check if the code shows as invalid?

Start with the simplest causes: a copying mistake, a code that has since been reset, or a code for a different domain.

1. Copy the code again from the dashboard and check for spaces and look-alike characters (0 and O, l and I).
2. Check when you generated it. Some registrars reset the code after a set time or each time you request it.
3. Make sure it belongs to this domain; every code is unique to one domain.
4. If it still fails, request a fresh code and restart the transfer with it.

Why can a transfer be rejected even with the right code?

A correct code does not help if the domain itself is not eligible to move. The most common blockers and fixes:

If your current registrar rejects the transfer, it must tell you and the new registrar why. Ask for the reason, and the date any lock ends, in writing.

When does the 60-day transfer lock apply?

The 60-day lock does not apply to every domain; it is triggered by specific events. The rules below come from ICANN’s Transfer Policy and cover generic extensions such as .com, .net and .org.

Planning a transfer? Update your registrant details after the transfer completes, not before, so you don’t trigger an avoidable lock.

ICANN is reviewing these rules, and periods and terms may change when new rules take effect. The information in this section reflects the policy published on the date shown at the end of this guide.

Can you transfer an expired domain?

It depends on which stage the domain has reached.

• Recently expired: expiry alone is not a reason to refuse a transfer. However, unpaid fees for an earlier registration term can affect it. Ask your current registrar, in writing, for the domain’s status and any reason for refusal.
• redemptionPeriod: the domain is in the deletion process and cannot be transferred. It must be restored with your current registrar first, which usually costs extra.
• pendingDelete: the domain is about to be deleted; it can no longer be restored or transferred. Once deleted, it may become available to register again.

How do country-code domains differ?

Country-code extensions (ccTLDs) set their own rules, and ICANN’s 60-day locks do not automatically apply to them. Three examples:

• .uk: currently transferred by changing the domain’s IPS tag to the new registrar’s tag, not with an auth code. Nominet, the .uk registry, plans to replace this with a transfer code that is valid for 14 days; the switch is announced for 9 February 2027. Until then, ask your new registrar for its IPS tag.
• .de: your current provider sets an AuthInfo code at DENIC, the .de registry. The code is valid for 30 days, and once the new provider submits a matching code the domain moves without further delay.
• .tr: since 14 September 2022, .tr domains have been managed through TRABİS via accredited registrars only and can be moved between registrars with a transfer code, without paperwork.

Not sure how your extension works? Enter the domain on our transfer page; the requirements for that extension are shown before you pay.

How long does a domain transfer take?

Transfers to Atak Domain are usually completed within 5–7 days. For ICANN-governed extensions, if your current registrar does not object within five calendar days, the registry completes the transfer automatically.

Don’t mix this up with the five days your registrar has to give you the code. That period runs before the transfer starts; this one runs after it has started.

What affects the timing most:

• How quickly you complete the verification steps
• Whether your current registrar approves the transfer early
• The rules of your domain extension
• Any step that needs manual review or support (the five-day automatic approval counts calendar days, so weekends and holidays only slow down manual steps)

Does it cost anything to get a transfer code?

Getting the code itself is normally free; you pay the registrar you are moving to. For most generic extensions, the transfer adds a year to your registration, up to a maximum of 10 years in total. Some country-code extensions do not add any time.

You can check current transfer prices for each extension on our Domain Transfer page.

How do you keep your website, email and DNS working during a transfer?

As long as your nameservers and DNS records stay the same, your website and email usually keep working throughout the transfer. A transfer changes who manages the domain; it does not move your hosting or email service.

The risk comes when your DNS records live on your old registrar’s free DNS service, which may stop when the domain leaves. Before you start:

• ☐ Note your nameservers using an RDAP/WHOIS lookup.
• ☐ Save a copy or screenshot of your DNS records (A, CNAME, MX, TXT).
• ☐ If your DNS is hosted by your old registrar, copy the records to your new provider or an independent DNS service first.
• ☐ If you use DNSSEC, ask your registrar how to handle it before you transfer.
• ☐ Make sure the domain will not expire while the transfer is in progress.

How do you keep your transfer code safe?

Your transfer code works like a key to your domain, so share it only with the trusted registrar you are moving to.

• Never post the code publicly or share it with anyone who is not authorised. Where possible, enter it yourself in your new registrar’s secure transfer form.
• If someone asks for your code and you have not started a transfer, do not reply.
• If you change your mind, switch the lock back on and, if possible, reset the code.
• Turn on two-factor authentication in your registrar account.

Ready to transfer your domain?

Before you start:

• ☐ Get your transfer code.
• ☐ Switch off any transfer lock you can remove.
• ☐ Save your current DNS settings.

Got your transfer code? Enter your domain to see the transfer price and terms for your extension, then start the transfer in a few minutes.

Start your domain transfer

Code not arriving, or transfer rejected? Sign in and go to Support › New Support Request, and we’ll look into it with you.

Frequently asked questions

Do I need to turn off WHOIS privacy to transfer?

Usually not. Privacy protection does not block a transfer on its own. Some registrars may ask you to switch it off temporarily so their emails reach you. What matters is that you can access the registrant email address.

Does a transfer code expire?

It depends on the registrar and the extension. Some codes stay valid for a long time; others expire after a set period (30 days for .de, for example) or once a transfer completes. The safest approach is to start the transfer soon after you get the code.

I’ve just renewed my domain. Can I still transfer it?

Yes, a normal renewal does not block a transfer. But if the domain was auto-renewed at expiry and you transfer it shortly afterwards, you may lose that renewal year. According to ICANN, when a domain is transferred during the 45-day auto-renew grace period, the auto-renewal year is cancelled and the transfer adds only one year. In other words, you gain one year, not two. This can vary by registry, so check with your current registrar first.

Will I lose the time left on my registration?

Usually not. Your remaining time is kept, and for most generic extensions a year is added on top, up to 10 years in total. A transfer straight after an auto-renewal is the exception (see the previous question).

Can I use the transfer code to give my domain to someone else?

No. The transfer code only changes the registrar that manages the domain. To change who owns it, you need a separate change of registrant.

Can I cancel a transfer after starting it?

Usually yes, as long as it has not completed. Contact your new registrar’s support, or reject the transfer in the notification email from your current registrar.

How do I know the transfer is complete?

You’ll receive a confirmation email when it finishes. You can also run an RDAP/WHOIS lookup and check that the “Registrar” field shows the new registrar.

Last reviewed: 9 October 2026. This guide is based on the rules published on the official ICANN, Nominet, DENIC and TRABİS websites on that date.