How Domain Transfers Work: Auth Codes, the 60-Day Rule, and Timelines

Published October 19, 2026

Domain transfers sound technical, but the process is standardized by ICANN — it works the same everywhere. Here’s what actually happens.

The pieces

Authorization code (EPP code). A password for your domain. Your current registrar generates it; your new registrar needs it to prove you own the domain. Get it from your current registrar’s control panel.

Domain lock. A safety switch that prevents unauthorized transfers. You must turn it off before transferring, then the new registrar turns their own lock on after.

The 60-day rule. ICANN forbids transferring a domain within 60 days of registration or a previous transfer. No exceptions, no workarounds — it’s hardcoded into the system.

The timeline

1. You initiate at the new registrar (domain name + auth code + payment). 5 minutes.
2. You approve via email from the old registrar. 5 minutes — this is the step people skip, and skipping it costs you days.
3. ICANN’s waiting period. Up to 5 days. If you approved in step 2, most registrars release early — often within 24–48 hours.
4. Done. The domain appears at the new registrar. One year is added to your registration.

What it costs

A transfer includes one year of registration. You’re not paying a fee to leave — you’re prepaying next year, usually at a lower price than your old registrar charges. Transferring 10 .com domains from GoDaddy ($20/yr) to Porkbun ($11/yr) saves ~$90/year and the transfer itself is the mechanism.

What can go wrong

• Wrong admin email. Approval emails go to the domain’s admin contact. If it’s an old address, update it first and wait — email changes can trigger their own 60-day lock at some registrars.
• Privacy services. Some transfers fail with WHOIS privacy enabled. Disable it, transfer, re-enable (free at any decent registrar).
• Recently renewed. Renewing doesn’t block transfers, but the 60-day rule counts from registration and previous transfers, not renewals.
• Locked accounts. If your registrar has locked your account (like the Namecheap story), resolve that first — you can’t transfer what you can’t access.

Do you lose anything?

No. Your website, email, and DNS keep working during the transfer — the nameservers don’t change unless you change them. The only thing that moves is which company bills you.