EPP Code Explained: What It Is and Why You Need It for a Domain Transfer

Moving a domain from one registrar to another is a common task for website owners, but it involves a few important security steps. One of the most critical is obtaining the EPP code. Without this unique code, a domain transfer cannot be completed. Understanding what the EPP code is, how it works, and how to use it helps ensure the process goes smoothly and keeps your domain protected.
What Is an EPP Code?
EPP stands for Extensible Provisioning Protocol. The EPP code—also known as an authorization code, auth code, or transfer key—is a unique string of letters, numbers, and sometimes symbols assigned to a domain name. It functions like a password that proves you have the right to transfer the domain.
Registrars generate and store this code. When you request a transfer to a new provider, the gaining registrar asks for the EPP code to confirm that the request is legitimate and authorized by the current domain owner. This extra layer of verification helps prevent unauthorized transfers.
Why the EPP Code Matters
Domain names are valuable digital assets. Without proper safeguards, they could be moved without the owner’s permission. The EPP code acts as a security checkpoint. Even if someone gains access to your account or tries to initiate a transfer, they still need this specific code to proceed in most cases.
The code also protects registrars and the broader domain system by ensuring transfers follow a clear, verifiable process. For domain owners, it provides peace of mind that control remains in their hands until they deliberately choose to move the domain.
When You Need an EPP Code
You will need the EPP code whenever you transfer a domain between registrars.
Common situations include:
- Switching to a new hosting or domain provider for better pricing or features
- Consolidating multiple domains under one account
- Moving a domain after changing web hosts
- Responding to a registrar’s service changes or account issues
Note that transfers between accounts at the same registrar usually follow a different process and may not require an EPP code. The code is specifically used for registrar-to-registrar transfers.
How to Obtain Your EPP Code
Most registrars make the EPP code available in your account dashboard.
Typical steps include:
- Log in to your current registrar account.
- Locate the domain you want to transfer.
- Look for options labeled “Transfer,” “Authorization Code,” “EPP Code,” or “Auth Code.”
- Request or reveal the code. Some providers display it immediately; others email it for security.
If you cannot find the code, contact the registrar’s support team. They can usually retrieve or reset it after verifying your identity. Make sure your domain’s contact email is up to date, as many codes are delivered there.

Steps for Using the EPP Code in a Transfer
Once you have the code, the general transfer process looks like this:
- Unlock the domain at your current registrar (domains are often locked by default to prevent accidental transfers).
- Disable any privacy protection temporarily if required, since some transfers need accurate WHOIS contact details.
- Start the transfer at the new registrar and enter the EPP code when prompted.
- Confirm the transfer via email links sent to the domain’s administrative contact.
- Wait for the transfer to complete. This often takes five to seven days, though timing varies.
During this period, your website and email should continue working normally if everything is configured correctly. Avoid making major DNS changes until the transfer finishes. Bluehost provides clear domain management tools that help customers locate authorization codes and complete transfers with straightforward guidance.
Common Issues and How to Avoid Them
Transfers sometimes stall because the domain is still locked, the EPP code is incorrect or expired, or the WHOIS information is outdated. Codes can also expire after a set period, so it is best to use them promptly once generated.
Another frequent issue is attempting to transfer a domain that is too new. Many domains cannot be transferred within the first 60 days after registration or a previous transfer. Checking eligibility beforehand saves time. Always keep a record of your EPP code in a secure place during the process, and never share it publicly or with untrusted parties.
Final Tips for a Successful Transfer
Prepare in advance by confirming that your domain is unlocked, your contact details are current, and you have the correct EPP code. Choose a reputable new registrar and follow their transfer instructions carefully. After the transfer completes, update nameservers if needed, re-enable privacy protection, and set up any renewal preferences at the new provider.
The EPP code is a small but essential piece of the domain transfer process. By understanding its role and handling it carefully, you can move your domain securely and maintain full control over one of your most important online assets.