What is an EPP code?

An EPP code — also called an authorisation code, auth code or transfer key — is a password the registry holds for your domain. Handing it to a new registrar is how you prove you are entitled to move the name.

It exists for one reason: to stop somebody else moving your domain away from you. Without it, a transfer request would be nothing more than a form anyone could fill in.

Always at your current registrar, never the new one. The wording varies:

• "Auth code", "EPP code", "Transfer key" or "Authorisation code"
• Usually under the domain’s settings, near a "Transfer out" or "Unlock" option
• Sometimes emailed to the registrant address rather than shown on screen

You will normally have to unlock the domain first. Registrar lock is a protection that blocks transfers, and most registrars hide the code until it is off.

It varies by registry. Some codes are permanent until regenerated; others expire after a few days. If a transfer fails and the code is old, generate a fresh one rather than retrying the same one.

A code is also invalidated if the domain is locked again, or if the registrar regenerates it. If you are not sure, get a new one — it costs nothing.

They are generally obliged to, and stalling is a known tactic. What actually works:

• Ask in writing, through a support ticket rather than chat, so there is a record
• Check the domain is older than 60 days. Registries block transfers within 60 days of registration or a previous transfer, and that is a rule, not the registrar being difficult
• Check the registrant email is current. Approval goes there, and if it is an address you lost access to the transfer cannot complete
• Escalate to the registry if they keep refusing. For .ke that is KeNIC; for .com it is ICANN’s transfer dispute process

Send us the domain and we will tell you which of those applies.