# What is a domain transfer auth code (EPP code or TAC)?

Source: https://dijituldns.co.uk/guides/domain-transfer-auth-code/
Updated: 2026-10-18

> An auth code (EPP code, now being renamed the Transfer Authorization Code or TAC) is a password that proves you may move a .com, .org or .net domain to another registrar. Remove the transfer lock, request the code, then start the transfer in the dijitul client portal. .uk domains use an IPS tag instead.

## Key facts

- Auth codes are used for gTLDs such as .com, .org and .net.
- ICANN is renaming the auth code the Transfer Authorization Code (TAC).
- Remove the registrar transfer lock before starting.
- A registrar may refuse a transfer within 60 days of registration or a previous transfer.
- A gTLD transfer usually completes within 5 days and normally adds a year.
- .uk domains move by changing the IPS tag; no auth code is involved.

## What the code is for

When you move a .com, .org or .net domain from one registrar to another, the new registrar has to prove you agreed. The auth code does that. It is a string generated by your current registrar and known only to you. You give it to the new registrar, which passes it to the registry with the transfer request.

You will see it called an auth code, authorisation code, EPP code or transfer key. ICANN is renaming it the **Transfer Authorization Code (TAC)**, so newer registrar screens may use that name. They all mean the same thing. Treat it like a password: anyone with the code and an unlocked domain could request a transfer.

## How to get it and use it

- **Check the details.** Make sure the registrant email address is current, as confirmations go there, and that the domain is not about to expire.
- **Remove the transfer lock** in your current registrar's control panel. It may be called registrar lock, transfer lock or domain lock.
- **Request the auth code.** Some registrars show it on screen, others email it to the registrant.
- **Start the transfer** at the new registrar. With dijitul, you do this in the [dijitul client portal](https://clients.dijitul.uk): search for the domain, choose transfer and enter the code.
- **Approve any confirmation** email from either registrar.
- **Wait.** Most transfers complete within 5 days. A gTLD transfer normally adds one year to the expiry date.

Before you start, note your DNS records. If the DNS is hosted by the old registrar, it may stop when the transfer completes. See [domain transfer](https://dijituldns.co.uk/domain-transfer/).

## The 60-day rule

A registrar may refuse a transfer within 60 days of the domain being registered or last transferred. Many registrars also apply a 60-day lock after a change of registrant, though some let you opt out when you make the change. If you have just bought a domain or moved it, you may need to wait.

ICANN's Board approved revised transfer rules in 2026, which change some of these details, but they are not yet in force. Until they are, the current 60-day rules apply. Check with your registrar if you are close to the limit.

## .uk domains work differently

.uk, .co.uk, .org.uk and other UK domains do not use auth codes. Nominet, the .uk registry, moves domains between registrars by changing the **IPS tag**. You ask your current registrar to set the tag to the receiving registrar's tag, and the domain moves across. Ownership does not change.

Registrars should do this free. If yours will not, you can change the tag yourself through Nominet's online services for a small fee. A tag change does not add a year to the registration, so renew separately if the domain is close to expiry. Our guide on [how to transfer a .co.uk domain](https://dijituldns.co.uk/guides/transfer-co-uk-domain/) has the full steps.

## How dijitul helps

Transfers in, renewals and live prices are all in the [dijitul client portal](https://clients.dijitul.uk). If you would like us to handle it, including checking DNS so nothing breaks, [get in touch](https://dijituldns.co.uk/contact/). One domain registration or renewal a year on common extensions is included free with dijihost Complete Hosting at £1 a day + VAT; premium names and some extensions are excluded.

## FAQs

### Where do I find my domain's auth code?

In your current registrar's control panel, usually in the domain's settings near the transfer lock option. Some registrars show the code on screen; others email it to the registrant address. If you cannot log in, contact the registrar to recover access first.

### Is an EPP code the same as a TAC?

Yes. EPP code, auth code and authorisation code all mean the same thing. ICANN is renaming it the Transfer Authorization Code, or TAC, so you may see that name on newer registrar screens. The way you use it is unchanged.

### Why was my transfer refused?

Common reasons are a transfer lock still on, a wrong or expired code, or the domain being within 60 days of registration, a previous transfer or a registrant change. Fix the cause, request a fresh code if needed and start again.

### Do I need an auth code for a .co.uk domain?

No. UK domains move between registrars by changing the IPS tag at Nominet. Ask your current registrar to change the tag to the new registrar's. If they refuse, you can change it through Nominet's online services for a small fee.

### Will a transfer take my website or email offline?

Not if DNS is handled carefully. The registration moves, but the DNS records may be hosted by the old registrar. Copy them to the new DNS provider, or keep the nameservers unchanged with a provider that will keep serving them, before the transfer completes.

## Prices and contact

Domains are priced live in the client portal. DNS management and 10 mailboxes are included with dijihost Complete Hosting at £1 a day + VAT. On their own, DNS and email set-up is £45 an hour + VAT or a fixed quote. Domain search and registration: https://clients.dijitul.uk. Hosting: https://dijihost.co.uk/ (£1 a day + VAT). Contact: https://dijituldns.co.uk/contact/ · 01623 650333 · info@dijitul.uk