Transfer locks and authorization (EPP) codes, by registrar

To transfer a domain to another registrar, you need two things from the registrar it's at now: the domain unlocked, and its authorization code (also called an EPP code, auth code or transfer code). You then give the code to the new registrar. This article shows where both live at common registrars. For the whole transfer, see Transfer a domain to another registrar.

What the lock and the code are for

A transfer lock (sometimes called a registrar lock or domain lock) stops your domain being moved to another registrar. Keep it on unless you're transferring.

The authorization code proves you have the right to move the domain. Treat it like a password: don't post it or email it around, and don't put it in a support ticket.

Before you start

• Check the 60-day rule. Registrars may refuse a transfer within 60 days of registration or of a previous transfer, and nearly all do. A change to the registrant's name, organization or email can also start a 60-day transfer lock unless you opted out before making it. These are currently 60 days at most registrars.
• Check the domain isn't about to expire. Renew first if it's close, or ask the new registrar how it handles expiring domains.
• Make sure you can read the registrant email. Several registrars send the code or an approval request there.
• Check DNSSEC. Squarespace asks you to remove it before a transfer, and other registrars may too. See DNSSEC basics.

Steps in general

1. Sign in to your current registrar and open the domain.
2. Turn the transfer lock off.
3. Request or reveal the authorization code.
4. Copy the code exactly, or wait for the email that contains it.
5. Start the transfer at the new registrar and enter the code.

GoDaddy

1. In your Domain Portfolio, open the domain's Domain Settings.
2. Under the transfer setting, switch the Transfer toggle off to unlock the domain. GoDaddy says this can take up to 90 minutes.
3. Select Transfer to Another Registrar, then Continue with transfer.
4. Select Click here to see Authorization Code and copy it.

Official guides: unlock a domain and get an authorization code.

Namecheap

1. Open Domain List and select Manage next to the domain.
2. Open the Sharing & Transfer tab.
3. In Transfer Out, unlock the domain.
4. Request the Auth Code. Namecheap emails it to the registrant email address.

Official guide: Namecheap: transfer a domain away.

Squarespace Domains

1. Open the Domains dashboard and select the domain.
2. Turn off Domain Lock.
3. Select Request transfer code.
4. Wait for the email. Squarespace says it arrives within 24 hours. If you request more than one, only the newest code works.

Remove DNSSEC before the transfer. Official guide: Squarespace: transferring a domain away.

Porkbun

1. Open ACCOUNT, then Domain Management.
2. Select the lock icon next to the domain to unlock it.
3. Open Details and select Get Authorization Code.

Official guide: Porkbun: transfer a domain away.

Dynadot

1. Open the domain in your account and find its Authorization Code.
2. If the account is locked, select Unlock Account, then Unlock.
3. Copy the code.

Dynadot re-locks the account within an hour, so have the transfer ready to start. Official guide: Dynadot: find your EPP code.

Name.com

1. Open My Domains and select the domain.
2. Under Quick Actions, switch the Domain Locked toggle off.
3. Select Show Transfer Authorization Code.

In the first 60 days after registration the code shows as Unavailable. Official guide: Name.com: get your authorization code.

Cloudflare Registrar

1. In the Cloudflare dashboard, open Manage Domains, then Manage next to the domain.
2. Open Configuration and select Unlock.
3. Select Confirm and Unlock.
4. Copy the authorization code shown.

Official guide: Cloudflare: transfer out.

You'll know it worked when

Your registrar shows the domain as unlocked and you have the code. You can confirm the lock status from anywhere: look the domain up at ICANN Lookup. A locked domain shows a status such as clientTransferProhibited; once unlocked, that status disappears (allow a little time for it to update).

Troubleshooting

• The code shows as unavailable or the transfer is refused. You're probably inside a 60-day window after registration, a previous transfer or a registrant change. Wait it out.
• The code didn't arrive by email. Check spam, and check which address is the registrant email at your registrar. Squarespace can take up to 24 hours.
• The new registrar says the code is wrong. Copy it again with no spaces. At Squarespace, only the newest code works. Some codes are case-sensitive.
• The domain locked itself again. Dynadot re-locks within an hour; unlock again when you're ready.
• The domain is expired or in redemption. Renew or restore it at the current registrar first.

Next steps

• Transfer a domain to another registrar
• WHOIS, RDAP and domain privacy