You're trying to transfer your domain to a new registrar and the system asks for an "EPP code" or "authorization code." This requirement isn't a technical obstacle or unnecessary barrier, it's a critical security feature that prevents unauthorized domain transfers. Understanding what EPP codes are, where to find them, and how to use them safely ensures smooth domain transfers while protecting your digital assets from theft.
Defining the EPP Authorization Code
EPP stands for Extensible Provisioning Protocol, but the technical acronym obscures what this code actually represents. Think of your EPP code as your domain's password or transfer key. Just as you need a password to access your email account, you need the EPP code to authorize moving your domain from one registrar to another.
Each domain has its own unique EPP code generated by your current registrar. The code for example.com differs completely from the code for anotherdomain.net, even if you own both domains at the same registrar. This uniqueness prevents someone who obtains one code from gaining access to your entire domain portfolio.
The EPP code serves as proof that you control the domain and have permission to transfer it. When you initiate a transfer at a new registrar, that registrar sends a transfer request to your current registrar's system. The EPP code validates that this transfer request comes from the legitimate domain owner rather than an unauthorized third party attempting to steal the domain.
Without the EPP code, domain transfers would be vulnerable to hijacking. Anyone could claim ownership of any domain and request transfers without proving they actually control those domains. The EPP code requirement creates a security checkpoint that only the current registrar can provide, ensuring transfers happen only with the actual owner's authorization.
Where to Find Your EPP Code
Your current registrar controls access to EPP codes for domains registered through their service. The location and retrieval process varies by registrar, but most provide codes through your account dashboard or domain management panel.
For domains registered at NameSilo, retrieve your EPP code by following these steps:
- Navigate to the Domain Manager page in your account
- Click on the applicable domain name (underlined in black)
- Click the "Send Email" option next to "Authorization Code"
NameSilo sends the EPP code to the Administrative email address associated with your domain. This email delivery method provides a paper trail and ensures the code reaches only someone with access to your registered email account, adding an additional security layer beyond account login.
For expired domains at NameSilo, authorization codes can be retrieved by downloading the CSV file available from the top of the Domain Manager page. This bulk export option helps you manage transfers for multiple expired domains efficiently.
If you're transferring away from a different registrar, look for labels like "Auth Code," "Transfer Key," "EPP Code," or "Authorization Code" in your domain settings. Common locations include domain details pages, transfer settings, or security sections. If you can't locate the code through your account panel, contact your registrar's support team, ICANN regulations require registrars to provide EPP codes to legitimate domain owners upon request.
Code Validity and Technical Requirements
EPP codes follow specific technical requirements that affect how you use them. These codes are case-sensitive, meaning "aBc123XyZ" differs from "abc123xyz." When entering your EPP code during a transfer, type it exactly as provided, matching uppercase and lowercase letters precisely. Copy-paste from the email or display where your registrar provided the code to avoid transcription errors.
Some registrars generate EPP codes that expire after a certain period, typically thirty to sixty days. If you requested a code but delayed initiating your transfer, the code might no longer work. Generate a fresh code immediately before starting your transfer process to ensure validity.
EPP codes typically contain alphanumeric characters, letters and numbers, without special symbols. The length varies by registrar and registry requirements, commonly ranging from eight to sixteen characters. NameSilo's authorization codes conform to specifications required by associated domain registries, ensuring compatibility with receiving registrars' transfer systems.
If a receiving registrar claims your NameSilo-provided code is invalid, verify that you entered the complete code accurately. Email clients sometimes alter codes by adding line breaks, removing characters, or applying unwanted formatting. Check the original code email and ensure you've copied the entire string without modifications. Problems accepting valid codes typically indicate issues with the receiving registrar's system rather than code validity.
EPP Code Security Best Practices
Treat your EPP code with the same security consciousness you apply to passwords or financial account access. Never share your EPP code publicly, post it on forums, or send it to anyone unless you're actively transferring the domain to them or a service provider you trust.
Only provide your EPP code when initiating legitimate domain transfers. If someone contacts you requesting your EPP code, whether claiming to be from your registrar, a domain broker, or technical support, verify their identity through official channels before sharing. Legitimate registrars never request EPP codes via unsolicited emails or phone calls.
Unauthorized access to your EPP code enables domain hijacking. An attacker with your code can initiate a transfer to a different registrar, potentially stealing your domain. Once transferred, recovering the domain requires legal action, proof of ownership, and potentially weeks or months of dispute resolution.
Change your EPP code if you suspect it's been compromised. Most registrars let you regenerate new codes, invalidating the old one. If you shared a code with someone for a transfer that ultimately didn't proceed, generate a new code to ensure the old one can't be used later without your knowledge.
What This Means for You
You cannot transfer a domain without the EPP authorization code, this restriction is absolute. No registrar can process incoming transfers without valid codes, and no legitimate workaround exists. The code requirement protects you by ensuring only authorized transfers proceed.
Plan ahead when transferring domains. Request your EPP code before starting the transfer process rather than during it. Having the code ready eliminates delays when you're prepared to initiate the transfer at your new registrar.
Keep EPP codes secure but accessible. Store codes in a password manager or secure document if you're managing multiple domain transfers. This organized approach prevents confusion about which code belongs to which domain while maintaining security.
Start your transfer at the domain transfer tool once you have your EPP code from your current registrar. The transfer process requires the code as a mandatory field, attempting to proceed without it will fail at the validation step. Moving Forward
EPP codes represent essential domain security infrastructure that protects ownership rights while enabling legitimate transfers. Understanding their purpose, knowing where to retrieve them, and handling them securely ensures smooth transfer experiences without compromising domain security.
The code requirement might seem like an obstacle when you're trying to transfer quickly, but it prevents far worse scenarios where domains could be stolen without authorization. Accept the extra step as valuable protection for assets that often represent significant business or personal value.
Visit the domain transfer page when you're ready to move domains to NameSilo. Have your EPP codes ready, verify your domains are unlocked at your current registrar, and the transfer process typically completes within five to seven days.