What is an authorization code for domain transfer?

Updated October 2026 · How we answer

Short answerAn authorization code (also called EPP code or transfer secret) is a unique string provided by your current registrar to authorize a domain transfer. It proves you own the domain and must be given to the new registrar.

Purpose and Format

The authorization code is a security measure required by ICANN to prevent unauthorized transfers. It's typically a random string of letters, numbers, and sometimes special characters, unique to each domain. You can request it from your current registrar's control panel or support.

The code is valid for a limited time and may change if you request it multiple times. Once you initiate a transfer at the new registrar, you'll need to enter this code. If the code is incorrect, the transfer will be rejected.

  • Also known as EPP code, transfer key, or auth code.
  • Provided by the current registrar upon request.
  • Required for most domain transfers (except some country-code TLDs).
  • Usually sent to the domain's admin email for security.
  • Can be regenerated if lost or compromised.

How to Get and Use It

Log in to your current registrar and look for a 'Transfer' or 'Authorization Code' section. If you can't find it, contact support. Once you have the code, provide it to the new registrar when initiating the transfer.

Keep the code secure; anyone with it can potentially transfer your domain. If you suspect it's been compromised, regenerate it immediately at your current registrar.

Common mistakes

  • Confusing the authorization code with the domain's login password; they are different.
  • Sharing the code publicly, which could lead to domain theft.
  • Assuming all domain extensions require an auth code; some country-code TLDs have different procedures.
From our shopsPhoneCasesForAll: 50,000+ aesthetic cases — Y2K, coquette, cottagecore and more.