Unlocking a domain & getting the auth code

Before you can transfer a domain to a new registrar, you need to do two things at your current registrar: unlock the domain and get the authorization code (also called the EPP code or auth code). This guide walks you through both steps.

What you'll need

• Login access to your current registrar
• Access to the email address registered to the domain

What is a domain lock?

A domain transfer lock is a security feature that stops your domain being moved to another registrar. Under ICANN's Transfer Policy a registrar may only set the lock when you register the domain or when you later ask for it, and many switch it on at registration — so expect to find it already on. You need to switch it off before starting a transfer.

What is an EPP code?

The EPP code (also called the auth code, authorization code, or transfer code) is a password that is unique to your domain and is issued by your registrar. It identifies you as the registered holder, so the registry can check that whoever asked for the transfer really controls the domain. The new registrar hands the code to the registry, which will not accept the transfer without a valid one.

A few country extensions work differently — GoDaddy, for example, says you don't need an authorization code to move a .uk domain. If your extension isn't a .com-style one, check what your registrar asks for.

How to unlock your domain and get the EPP code

Using the EPP code

Once you have the code:

ICANN's Transfer Policy doesn't set an expiry date for the code itself, but individual registrars may, and some let you regenerate it. What the policy does put a clock on is the authorisation the new registrar takes from you: that normally expires 60 days after it's issued, and the transfer then has to be re-authorised. If your code is refused, ask your current registrar for a fresh one.

Common questions

The EPP code email isn't arriving. What should I do?

Check your spam folder first. If the email address on the domain is old or inaccessible, you'll need to update it at your registrar before requesting the code again. Ask them about the transfer lock before you do: under ICANN's Transfer Policy, changing the registrant email counts as a change of registrant, which means a 60-day lock on transferring the domain unless your registrar lets you opt out of that lock first. Contact your registrar's support if you're stuck.

Can I transfer a domain that's locked?

No. While the lock is on, the domain carries a clientTransferProhibited status, which tells the registry to reject transfer requests. Remove the lock first.

My registrar doesn't show a transfer lock option. Is that normal?

Some registrars don't let you do it yourself. That's allowed, but ICANN's Transfer Policy then requires them to remove the lock and give you the auth code within five calendar days of your request. They also can't make the process harder than changing your contact details or nameservers, and they can't refuse purely because you're in a payment dispute with them. Contact their support and ask.

Is it safe to unlock my domain?

Yes — briefly unlocking to start a transfer is expected, and you can re-lock the domain at any time. Unlocking on its own doesn't hand the domain over: the new registrar has to get confirmation from the registered holder first, and ICANN's Transfer Policy says a transfer must not proceed without it. Confirmation normally means replying from the email address (or phone number) on the registration, which is another reason to keep those contact details current.

Related guides

• How to transfer a domain
• Domain transfer checklist
• How to find where your domain is registered
• Domain privacy protection explained
• Give us access to your domain registrar