Domain Transfer Security: Understanding Locks, Auth Codes, and Readiness
A comprehensive guide to domain transfer locks, Authorization Codes (EPP Codes), and essential steps to ensure your domain is ready for a secure transfer.
Transferring a domain name involves moving it from one registrar to another, a process safeguarded by several security measures to protect ownership. Understanding these mechanisms is crucial for a smooth and secure transfer.
- Domain Transfer Lock (Registrar Lock): This is a primary security feature designed to prevent unauthorized domain transfers. When a domain is "locked," any transfer request will be automatically denied. Before initiating a transfer, the domain owner must log into their current registrar account and manually disable this lock. This is the first critical step to ensure domain security.
- Authorization Code (EPP Code / Transfer Key): The Authorization Code is a unique password generated by the current registrar, used to verify the domain owner's identity and authorize the transfer. Each domain has a distinct EPP code, typically a string of 6 to 16 letters, numbers, and special characters. The gaining registrar will require this code during the transfer process. It is essential to keep this code secure and confidential.
- Transfer Readiness: A domain must meet specific criteria to be eligible for transfer. These typically include:
* The domain must have been registered or previously transferred for at least 60 days.
* The domain must not be in any legal dispute or frozen status.
* The WHOIS contact information, especially the administrative email address, must be up-to-date, as transfer confirmation emails are sent to this address.
Before commencing the transfer process, ensure your domain is unlocked, you have obtained the Authorization Code, and all transfer eligibility conditions are met to avoid unnecessary delays or failures.