How to Transfer a Domain Safely: EPP Code, 60-Day Lock, DNS Propagation

Transferring a domain between registrars is a straightforward process that takes 5–7 days to complete. The risks are low if you follow the correct sequence. The most common mistakes are initiating a transfer at the wrong time (during the ICANN 60-day lock) or changing nameservers before the transfer completes.

Before you start: the ICANN 60-day lock check

ICANN requires a 60-day transfer lock after:

A domain is first registered
A domain is transferred to a new registrar
Certain WHOIS contact information changes

If your domain was registered or transferred within the last 60 days, you cannot transfer it to a new registrar. Check your registration date in your registrar’s control panel.

Practical implication: Do not register a domain at a registrar you intend to leave immediately. Wait 60 days from registration before initiating a transfer.

Step-by-step transfer process

Step 1: Set up your destination registrar account

Create an account at the registrar you’re moving to (Namecheap, Porkbun, Cloudflare, etc.) before you start. You’ll need this to initiate the transfer.

Step 2: Verify and update WHOIS contact information

The transfer confirmation is sent to the email address registered in WHOIS for the domain. Before initiating a transfer:

Log into your current registrar
Check the registrant email address on your domain
If it’s an old email address, update it to one you can currently access
Note: Updating WHOIS contact information can trigger a 60-day lock at some registrars verify your registrar’s policy before changing contact details

Step 3: Unlock the domain at your current registrar

Most registrars lock domains by default to prevent unauthorised transfers. To initiate a transfer, you must unlock the domain:

Log into your current registrar’s control panel
Find your domain’s settings
Look for “Transfer Lock,” “Domain Lock,” or “Registrar Lock”
Set it to “Unlocked” or “Disabled”

The lock can be re-enabled after the transfer completes if you change your mind.

Step 4: Request the EPP code (auth code)

The EPP code (also called auth code, authorisation code, or transfer code) is a password-like string that proves you are authorised to transfer the domain. Without it, the transfer cannot proceed.

How to get it:

In your current registrar’s control panel, look for “Get EPP Code,” “Auth Code,” or “Transfer Away”
The code is emailed to the registrant email address (the WHOIS email) OR displayed in the control panel
EPP codes typically expire in 7–30 days (varies by registrar) use it promptly

What an EPP code looks like: A random string of letters, numbers, and sometimes symbols, e.g., G7$kP2!mXq3nT8.

Step 5: Initiate the transfer at the destination registrar

At the destination registrar (e.g., Namecheap):

Go to “Domain Transfer” or “Transfer In” section
Enter your domain name
Enter the EPP code when prompted
Pay the transfer fee (typically one year’s registration at the new registrar’s rate)
Submit the transfer request

The transfer adds one year to the domain’s expiry date. So a domain expiring in 6 months, after transfer, will expire in 18 months.

Step 6: Approve the transfer

After the transfer is initiated, you’ll receive an email at your registrant email address (WHOIS email). This email contains a link to approve or reject the transfer.

Approve the transfer immediately don’t wait. Transfers have a 5-day window for the registrant to approve. If you don’t approve in 5 days, the transfer is automatically approved anyway (ICANN rule), but approving promptly speeds the process.

Some registrars also email the losing registrar, giving them an opportunity to approve or deny they must approve all legitimate transfer requests.

Step 7: Wait for completion

After approval, the transfer typically completes in 5–7 days. During this time:

Do not change your nameservers leave your DNS pointing wherever it currently points
Your website continues to function normally throughout the transfer
Email continues to function normally throughout the transfer
At no point is the domain “down” during a transfer

Step 8: Verify the transfer is complete

Log into your new registrar and confirm the domain appears in your account. Verify:

Domain status shows “Active”
Expiry date is correct (old expiry + 1 year)
WHOIS shows the new registrar
Privacy protection is enabled (if your new registrar includes it free)

Common transfer problems and solutions

“Domain is locked”: You didn’t unlock the domain at the current registrar, or the 60-day lock is active. Check both.

“Invalid EPP code”: EPP codes are case-sensitive and expire. Request a new code and use it within 48 hours.

“Transfer cannot be completed”: May indicate a domain with an active dispute, a .uk domain (which uses a different transfer process via Nominet), or a registrar hold. Contact both registrars.

Note on .co.uk and .uk transfers: Nominet (the .uk registry) uses a different transfer process. The gaining registrar submits a transfer request to Nominet directly. An EPP code is not required. The transfer completes within 24–48 hours. The current registrar receives a notification but cannot block the transfer.

DNS propagation after the transfer

Once the transfer is complete, your nameservers and DNS settings carry over to the new registrar. You do not need to update nameservers after a registrar transfer unless you intentionally want to change hosting.

If you do update nameservers after transfer, DNS propagation takes 24–48 hours globally. During propagation, some users will see the old site and some will see the new site depending on which DNS servers their internet provider uses.