OSIR · The AI-Native Domain Registrar

Help Center / mastery

How Domain Transfers Work

How Domain Transfers Work

Part 9 of 12 in the Domain Mastery series — Previous: Understanding Domain Status Codes

A domain transfer moves your domain from one registrar to another. Whether you're looking for better pricing, improved features, or consolidating your domains, understanding the transfer process helps you avoid delays and ensure everything goes smoothly.

What a Transfer Actually Does

A transfer changes the sponsoring registrar — the company that manages your domain on your behalf. It does not change:

  • Your ownership of the domain
  • Your website content or hosting
  • Your email configuration
  • Your DNS records (though you may need to reconfigure these)

One important benefit: a successful transfer adds one year to your domain's expiration date (with one exception, covered below).

The Transfer Process Step by Step

1. Prepare at Your Current Registrar

Before starting a transfer, you need to:

  • Unlock your domain — Remove the clientTransferProhibited status (usually called "domain lock" in your dashboard)
  • Get your authorization code — Also called "Auth Code," "EPP code," or "transfer code." Your current registrar must provide this within 5 days of your request
  • Verify your contact info — Make sure you can receive emails at the address on file

2. Initiate at the New Registrar

At the registrar you're transferring to:

  • Search for your domain and select "Transfer"
  • Enter the authorization code
  • Pay the transfer fee (usually one year of registration)
  • Confirm the transfer request

3. The Waiting Period

Once initiated, the transfer enters a pending period of up to 5 calendar days:

What Happens Timeframe
New registrar submits transfer request Day 1
Both registrars notified Day 1
Current registrar can approve or reject Days 1-5
If no response, transfer auto-approves Day 6

The current registrar can:

  • Approve — Transfer completes immediately
  • Reject — Transfer is denied (must have a valid reason)
  • Do nothing — Transfer auto-approves after 5 days

4. Transfer Completes

When the transfer is approved (or auto-approved):

  • Your domain moves to the new registrar
  • One year is added to the expiration date
  • A 60-day transfer lock is applied (you can't transfer again for 60 days)
  • A 5-day Transfer Grace Period begins

The Authorization Code

The auth code is the primary security mechanism protecting your domain from unauthorized transfers.

What to know:

  • Each domain has a unique code
  • Codes are typically 8-16 characters (letters, numbers, symbols)
  • Your registrar must provide it within 5 calendar days of your request
  • Treat it like a password — don't share it publicly
  • If compromised, request a new one immediately

When Transfers Are Blocked

Your current registrar must deny a transfer in these situations:

Reason Explanation
Within 60 days of registration New domains have a mandatory lock period
Within 60 days of a previous transfer Can't transfer again too quickly
Pending dispute (UDRP/URS) Legal proceeding in progress
Domain is expired (in Redemption or Pending Delete) Must restore first
Domain is locked clientTransferProhibited is set — you must unlock
Court order or fraud evidence Legal restrictions apply
Registrant expressly objects Written objection from domain owner
Unpaid fees for the current registration period Outstanding balance for the domain itself

Your registrar cannot block a transfer for:

  • Unpaid hosting, email, or other non-domain services
  • The domain being "valuable"
  • No reason at all

If your transfer is wrongly denied, you can escalate to ICANN Compliance.

The 60-Day Transfer Lock

A 60-day transfer lock applies in three situations:

Trigger Lock Duration
New registration 60 days — cannot transfer
Completed transfer 60 days — cannot transfer again
Change of registrant (name, org, or email) 60 days — registrar may offer opt-out

For the "change of registrant" lock, some registrars let you opt out before making the change. Ask your registrar if this option is available.

Transfers and Auto-Renewal: Important Exception

If you transfer a domain during its Auto-Renew Grace Period (the period after expiration when the domain auto-renewed), the transfer works differently:

Event Expiration Date
Original expiration January 25, 2027
Auto-renewal occurs January 25, 2028
Transfer during ARGP January 25, 2028 (not 2029)

The auto-renewal is cancelled, and the transfer adds one year from the original expiration. You don't get two extra years — you get one. This is standard behavior, not an error.

After the Transfer

Once your domain is at the new registrar:

  1. Check your nameservers — They may need to be reconfigured
  2. Verify DNS is working — Your website and email should still function
  3. Confirm your contact information — Update if needed
  4. Re-enable domain lock — Protect against unauthorized transfers
  5. Set up auto-renewal — Ensure your domain doesn't expire

Transfer Disputes

If you believe a transfer was unauthorized:

  1. Contact the new registrar within 6 months
  2. The registrar investigates and may reverse the transfer
  3. If unresolved, submit a dispute through ICANN's Transfer Dispute Resolution Policy

Prevention tips:

  • Always keep your domain locked
  • Use strong, unique passwords for your registrar account
  • Enable two-factor authentication
  • Keep your contact email secure

Typical Timeline

Day What Happens
0 You unlock domain and get auth code
1 You initiate transfer at new registrar
1 Registry notifies both registrars
1-5 Waiting for current registrar response
6 Transfer auto-approves (if no response)
6 Domain moves, +1 year added
6-11 Transfer Grace Period
Day 66+ 60-day transfer lock expires

Key Takeaway

Domain transfers are straightforward when you prepare properly: unlock your domain, get your auth code, and initiate at the new registrar. The process takes about a week in most cases. Keep your domain locked at all other times, and remember that you can't transfer within 60 days of registration or a previous transfer.


Next: WHOIS, RDAP, and Domain Privacy