--- title: "Domain Transfer Process: Auth Codes, Locks, Push vs Transfer" description: "The domain transfer process step by step: auth codes, the 60-day transfer lock, push vs registrar transfer, timing, and ICANN's coming 30-day lock." url: https://gritbrokerage.preview.multisites.ai/guides/domain-transfer-process publisher: Grit Brokerage contact: https://gritbrokerage.preview.multisites.ai/contact offer: https://gritbrokerage.preview.multisites.ai/inquiry --- # How Domain Transfers Work: Auth Codes, Transfer Locks, and Push vs Transfer A domain transfer moves a name to a new registrar, or to a new owner, using an auth code and a domain with the registrar lock off. A registrar transfer usually finishes in 5 to 7 days. A push between accounts at one registrar is usually faster. A 60-day lock can block registrar transfers after some changes. For owners and buyersUpdated October 14, 202612 min read 01 ## Two different moves A registrar transfer moves the name between companies. A push moves it between accounts at the same company. Most sales use one or the other. 02 ## Auth code plus lock off You need the auth code and the registrar lock off. Registrars must give you the code within five calendar days if you cannot generate it yourself. 03 ## The 60-day lock is real A new registration, a recent transfer, or a recent owner change can block a registrar transfer. A push avoids the registrar-to-registrar part. 04 ## Rules are changing, slowly ICANN's Board adopted changes on June 7, 2026 that replace the 60-day lock with a 30-day lock on new names. No effective date has been published. ## What is the domain transfer process? The domain transfer process moves a domain name from one registrar to another, or from one owner to another. For a registrar transfer, you remove the registrar lock, get an auth code, and give the code to the new registrar. For an owner change at the same company, you usually push the name to the new owner’s account. People use the word “transfer” for three different actions. Mixing them up is the main cause of delays in domain sales. Action What moves Typical use Needs auth code? Registrar transfer The domain, between two registrars Changing providers, or a buyer who wants a specific registrar Yes Push (account change) The domain, between two accounts at one registrar Fast hand-off in a sale No Change of registrant The owner details on the record Updating the legal owner at the same registrar No, but may trigger a lock This guide covers all three. It also explains the lock rules that cause most of the confusion, and what ICANN has approved to change them. If the transfer is part of a sale, read [how domain escrow works](https://gritbrokerage.preview.multisites.ai/guides/domain-escrow) alongside this page. ## What is an auth code and where do I get it? An auth code is a secret code your current registrar issues to prove you control the domain. It is also called an EPP code, an authorization code, or a transfer code. The new registrar asks for it, and the transfer does not start without it. ICANN’s registrant FAQ describes it as a code created by a registrar to help identify the domain holder and prevent unauthorized transfers. Where you find it depends on the registrar. - Many registrars let you generate and copy it in your account. GoDaddy’s help page tells you to select the option to see the authorization code, and says it also sends the code to the registrant email address. - Namecheap sends the code to the registrant email address from its Transfer Out section. - Cloudflare generates the code in the dashboard after you remove the lock. - If your registrar has no self-service tool, you must ask support. ICANN’s Transfer Policy says that if the registrar does not provide tools to generate the code and remove the transfer lock, it must give you the code and remove the lock within five calendar days of your request. Treat the auth code like a password. Anyone who has the code while the lock is off can try to move the domain. Send it only through the escrow platform or to the new registrar’s transfer form. See [auth code](https://gritbrokerage.preview.multisites.ai/glossary/auth-code) and EPP in the glossary. ## Why can I not transfer my domain for 60 days? Because ICANN’s rules allow or require a 60-day block in several situations. There are really three different 60-day rules, and they are easy to confuse. Rule What triggers it Can the registrar block the transfer? New registration The domain was registered in the last 60 days May deny Recent inter-registrar transfer The domain moved to its current registrar in the last 60 days May deny Change of registrant lock The registrant name, organization, or email changed in the last 60 days Policy allows a 60-day lock; registrars can offer an opt-out The first two are optional for the registrar, according to ICANN’s registrant FAQ. The change-of-registrant lock is the one that traps buyers and sellers. ICANN’s Transfer Policy text says the registrar may impose a 60-day inter-registrar lock after a change of registrant, and that it may let the registrant opt out before the change is requested. How registrars apply it differs. GoDaddy’s help page says a domain cannot be transferred within 60 days of a contact info change if the current registrant opted to apply the 60-day lock when approving the change. That is a hint to check your registrar’s wording before you edit the owner details. ICANN adds a practical tip: if your goal is to transfer the domain, finish the transfer before you change the contact information. For a sale, that means the seller should not update the registrant details just before the transfer. See [60-day transfer lock](https://gritbrokerage.preview.multisites.ai/glossary/60-day-transfer-lock) and change of registrant in the glossary. Bundled domains have another rule. GoDaddy says domains that are part of a bundle cannot be transferred within 120 days of new registration. Check for bundle terms when you buy a name that was recently registered with hosting. ## What is the difference between a push and a registrar transfer? A push moves the domain between accounts at the same registrar, so it never leaves the company. A registrar transfer moves it to a different company. Push is usually faster, and it can finish a sale even when a 60-day lock blocks a registrar transfer. Escrow.com says this directly. A buyer and seller can complete the transfer at the current registrar with a push, which is common when the domain is under an ICANN 60-day lock that stops a move to another registrar. Push (account change) Registrar transfer Registrar changes? No Yes Auth code needed? No Yes Typical speed Faster once the recipient accepts (GoDaddy gives 10 days to accept) GoDaddy says typically 5 to 7 days Blocked by a 60-day lock? Escrow.com says a push is used when a lock blocks a registrar move Yes, if a lock applies What the buyer needs An account at the seller’s registrar An account at the new registrar Fees Ask the registrar Registrar may charge a fee After the sale Buyer can transfer out later, once any lock ends Domain is at the buyer’s chosen registrar Registrars set the details. For example, GoDaddy’s account-to-account page lists these points: 1. In the seller’s domain portfolio, choose the domain and then “Transfer to another GoDaddy account”. 2. Enter the new owner’s email address, and optionally their customer number. 3. Choose whether to copy the current contact info to the new account. 4. Send the transfer request. 5. The recipient must accept within 10 days, or the request expires. GoDaddy also says domains are not eligible if a contact update approval is pending, if they are within a day of expiration, if they are expired, or if another transfer is already pending. A [push](https://gritbrokerage.preview.multisites.ai/glossary/push) at another registrar has its own rules, so ask the seller’s registrar before you plan around it. In practice, a seller at GoDaddy and a buyer who creates a free GoDaddy account can finish fast. The buyer can transfer the name to a preferred registrar later. This two-step approach is common in domain sales, and it is why we tell buyers to create an account at the seller’s registrar early. ## How do I transfer a domain to a new registrar, step by step? Follow this sequence. The steps are the same across registrars, with small differences in labels. 1. **Check eligibility.** Confirm the domain is more than 60 days old, has not moved registrars in the last 60 days, and has had no recent registrant change. Cloudflare’s docs list the same triggers, including a WHOIS registrant change in the last 60 days. 2. **Update contact details first.** Make sure the registrant email is one you can read. The auth code and approval emails go there. Fix it before you start, not during, since a change can trigger a lock. 3. **Turn off the registrar lock.** Registrars call it Domain Lock, Transfer Lock, or the clientTransferProhibited status. ICANN says registrars must give you a readily accessible way to remove it. See [registrar lock](https://gritbrokerage.preview.multisites.ai/glossary/registrar-lock). 4. **Check privacy settings.** ICANN’s FAQ says that since May 2018, a gaining registrar that cannot access the registration data does not have to obtain the Form of Authorization. Your registrar may still ask you to confirm by email. 5. **Get the auth code.** Generate it in the account or request it from support. 6. **Start the transfer at the new registrar.** Enter the domain and the auth code. Pay any transfer fee. Ask whether the transfer adds a renewal year, since registrars differ. 7. **Approve the transfer.** The current registrar will email the registrant. Approving speeds things up. If you do nothing, the registry’s default approval happens after five calendar days. ICANN’s Transfer Policy says a registrar that does not respond within five calendar days to the registry’s notice is treated as approving. Cloudflare says an unapproved transfer auto-approves on the fifth day. 8. **Wait for completion, then verify.** Log in at the new registrar, confirm you are the registrant, and set the lock back on. The ICANN registrant FAQ also says the registrar may charge a transfer fee, but cannot deny a transfer because you did not pay that fee. See inter-registrar transfer for the definition. ## How long does a domain transfer take? A registrar transfer typically takes 5 to 7 days. GoDaddy’s transfer-away page says transfers typically take 5 to 7 days, and that approving the transfer helps. A push inside one registrar is usually faster. Escrow.com says domain transfers in escrow can take from a few minutes to up to six weeks. Path Typical time What drives the time Push, same registrar Usually faster than a registrar transfer How fast the buyer accepts Registrar transfer, approved by owner A few days Both registrars and the registry Registrar transfer, not approved Up to 5 days, then auto-approval The five-day response window Transfer with a lock or hold Delayed until the lock ends The 60-day rules Transfer in escrow Minutes to six weeks (Escrow.com) Registrar speed and parties’ replies Namecheap says it has five days to release a domain under ICANN’s Transfer Policy, which matches the default five-day window. Plan for a full week when you compare timing against a closing date. ## What happens to DNS and email during a transfer? A well-run transfer does not interrupt your website or email, because the DNS records stay the same unless you change them. The nameservers are part of the domain record, and a registrar transfer does not change them by itself. DNS is separate from who holds the registration. Problems usually come from preventable steps. - **Registrar-hosted DNS.** If your DNS zone is at the old registrar, moving the domain can leave you without DNS. Copy the records or move the DNS to a neutral provider first. - **Email on the domain.** Make a list of MX, SPF, DKIM, and DMARC records before you start. Confirm they are in the new zone. - **Registrant email.** If the contact email is on the domain you are moving, a mistake can lock you out of the approval emails. Use an address on another domain. - **Cutover timing.** Avoid the week of a product launch or an email campaign. ICANN notes you may avoid the transfer lock entirely by changing web hosts or nameservers instead of registrars. If your goal is only to change hosting, you may not need to transfer at all. See DNS propagation for why changes can look slow. For a sale, the buyer should receive the domain with its DNS settings documented, or point the nameservers to a new host right after the transfer completes. Do not rely on the seller’s DNS after the domain changes hands. ## What changes under ICANN’s new Transfer Policy? ICANN’s Board adopted the Transfer Policy Review recommendations on June 7, 2026, and industry reporting says they replace the 60-day change-of-registrant lock with a 30-day lock on new and newly transferred domains. No effective date has been published. Until ICANN publishes one, the current 60-day rules apply. Here is what we can say and what we cannot, based on the sources we opened. Question Answer Source Did the Board act? Yes. Resolution 2026.06.07.04 adopts the recommendations on June 7, 2026 ICANN Board resolution Is there a start date? Not published. The Board directs implementation “subject to prioritization” ICANN Board resolution What happens next? ICANN org can now start the Implementation Review Team and write updated policy language Enom’s ICANN86 recap What does the new lock look like? Removes the change-of-registrant lock and adds a mandatory 720-hour (30-day) lock on newly created or newly transferred domains Domain Incite, March 2025 How long will it take? The same reporter estimated at least 18 months in March 2025. That was an estimate, not an ICANN date Domain Incite Two cautions. First, the 720-hour detail comes from trade press on the working group’s report in 2025, not from the Board resolution text we read. Second, the final language will come out of the implementation team and may differ. What this means for deals today: nothing changes yet. Plan around the 60-day rules. When ICANN publishes an effective date, expect registrars to announce it. We cover the change in more detail in our post on the [transfer policy changes](https://gritbrokerage.preview.multisites.ai/post/icann-transfer-policy-changes-60-day-lock). ## Can a registrar refuse to transfer my domain? Yes, but only for a limited list of reasons. ICANN’s registrant FAQ separates reasons a registrar may deny a transfer from reasons it must deny one. A registrar may deny A registrar must deny Evidence of fraud The domain is in a UDRP proceeding Reasonable dispute over who authorized the transfer A court order applies Payment owed for a previous registration period A Transfer Dispute Resolution Policy proceeding is open Written objection from the domain holder A URS proceeding or suspension applies Domain is in “Lock” status A 60-day change-of-registrant lock applies Within 60 days of initial registration Within 60 days of a previous transfer A few useful points follow from this list. - A registrar cannot deny a transfer because the domain expired or was not renewed, unless a previous period is unpaid. If the domain is already in the redemption grace period, the current registrar must restore it first, which can cost a redemption fee. See redemption grace period. - A registrar cannot deny a transfer for non-payment of its own transfer fee. - A registrar must give a reason when it denies a request, except where required not to. If you think a registrar broke the rules, file a transfer complaint with ICANN. Disputes between registrars over fraudulent transfers go through the Transfer Dispute Resolution Policy, which registrars file, not owners. If a UDRP is the reason for the hold, read our guide on [trademark and UDRP risk](https://gritbrokerage.preview.multisites.ai/guides/domain-trademark-udrp-risk). ## How should buyers and sellers plan a transfer in a sale? Plan the transfer before you agree on a closing date. Most delays in a sale come from an unexpected lock, a missing auth code, or a registrar that needs days to respond. **Sellers** 1. Check the domain’s age and registrar history. Look up the registrar and status in ICANN Lookup. 2. Do not change the registrant details just before the sale. 3. Tell the buyer which registrar you use, so they can open an account there. 4. Have the auth code ready, or know how to generate it. 5. Keep the registrant email working so you receive approval messages. **Buyers** 1. Ask the registrar and any locks before you agree on a date. 2. Open an account at the seller’s registrar if a push is likely. 3. Decide where you want the domain long term, and plan a second transfer if needed. 4. Set up the DNS and email you need at the new home before the switch. 5. After the transfer, log in, update the registrant details, and turn on the lock and two-factor sign-in. In an escrow deal, the escrow agent confirms the move before it pays the seller. Escrow.com’s concierge service can organize the transfer step. Our guide on [how to buy a domain that is taken](https://gritbrokerage.preview.multisites.ai/guides/how-to-buy-a-domain-that-is-taken) shows where the transfer sits in the full buying timeline, and [how to sell a domain name](https://gritbrokerage.preview.multisites.ai/guides/how-to-sell-a-domain-name) does the same for sellers. ## Next step If you want a broker to handle the transfer details and the escrow, [talk to Grit Brokerage about selling](https://gritbrokerage.preview.multisites.ai/contact?interest=sell). If you are buying, see our buying domains page, or contact us with questions about a specific name. ## Frequently asked questions ### What is an auth code and where do I get it? An auth code, also called an EPP or transfer code, is a secret code from your current registrar that proves you control the domain. Generate it in your registrar account or ask support. If you cannot generate it yourself, ICANN's policy says the registrar must provide it within five calendar days of your request. ### Why can I not transfer my domain for 60 days? ICANN's rules let a registrar block a transfer within 60 days of a new registration or a previous registrar transfer. A separate 60-day lock can follow a change of registrant, such as a new owner name or email. Some registrars let you opt out of that lock before you make the change. ### What is the difference between a push and a registrar transfer? A push moves the domain to another account at the same registrar. A registrar transfer moves it to a different company and needs an auth code, the lock removed, and approval. A push is usually faster and can sidestep a 60-day lock, but both buyer and seller need accounts at that registrar. ### How long does a domain transfer take? GoDaddy says transfers typically take 5 to 7 days. If the owner does not approve, Cloudflare says the transfer auto-approves on the fifth day. A push inside one registrar is often much faster once the buyer accepts. Escrow.com says domain transfers in escrow range from a few minutes to six weeks. ### What will change under ICANN's new Transfer Policy? ICANN's Board adopted the Transfer Policy Review recommendations on June 7, 2026. Industry reporting says the 60-day change-of-registrant lock will be removed and a 30-day (720-hour) lock added on new and newly transferred names. Implementation is subject to prioritization, and the current rules still apply. ### Can a registrar refuse to transfer my domain? Yes, but only for limited reasons. ICANN lists fraud evidence, a dispute over who authorized it, unpaid fees for a previous period, a lock status, and the 60-day windows as allowed reasons. A registrar must refuse during a UDRP, a court order, or a 60-day change-of-registrant lock. You can file a transfer complaint with ICANN. ## Terms on this page - [Transfer Dispute Resolution Policy](https://gritbrokerage.preview.multisites.ai/glossary/transfer-dispute-resolution-policy) - [Extensible Provisioning Protocol](https://gritbrokerage.preview.multisites.ai/glossary/epp) - [Inter-registrar transfer](https://gritbrokerage.preview.multisites.ai/glossary/inter-registrar-transfer) - [Uniform Rapid Suspension](https://gritbrokerage.preview.multisites.ai/glossary/urs) - [Redemption grace period](https://gritbrokerage.preview.multisites.ai/glossary/redemption-grace-period) - [Form of Authorization](https://gritbrokerage.preview.multisites.ai/glossary/form-of-authorization) - [60-day transfer lock](https://gritbrokerage.preview.multisites.ai/glossary/60-day-transfer-lock) - [Change of registrant](https://gritbrokerage.preview.multisites.ai/glossary/change-of-registrant) - [Domain Name System](https://gritbrokerage.preview.multisites.ai/glossary/dns) - [EPP status codes](https://gritbrokerage.preview.multisites.ai/glossary/epp-status-codes) ## Sources 1. [ICANN: FAQs for Registrants, Transferring Your Domain Name](https://www.icann.org/resources/pages/name-holder-faqs-2017-10-10-en) 2. [ICANN: Transfer Policy](https://www.icann.org/en/contracted-parties/accredited-registrars/resources/domain-name-transfers/policy) 3. [ICANN Board: Approved Resolutions, Regular Meeting, 7 June 2026](https://www.icann.org/en/board-activities-and-meetings/materials/approved-resolutions-regular-meeting-of-the-icann-board-07-06-2026-en) 4. [Domain Incite: ICANN to kill off 60-day domain transfer lock](https://domainincite.com/30891-icann-to-kill-off-60-day-domain-transfer-lock) 5. [Enom: ICANN86 Policy Recap](https://www.enom.com/blog/icann86-policy-recap/) 6. [GoDaddy Help: Transfer my domain to another GoDaddy account](https://www.godaddy.com/help/transfer-my-domain-to-another-godaddy-account-822) 7. [GoDaddy Help: Transfer my domain away from GoDaddy](https://www.godaddy.com/help/transfer-my-domain-away-from-godaddy-3560) 8. [Escrow.com: Is the Seller required to transfer the domain to the Buyer's registrar?](https://www.escrow.com/support/faqs/is-the-seller-required-to-transfer-the-domain-to-the-buyers-registrar) Written by the Grit Brokerage team and checked against the sources above on October 14, 2026. Registry rules, fees and prices change. This guide is general information, not legal or tax advice. ## Keep reading - [ICANN Is Replacing the 60-Day Transfer Lock: What ChangesICANN's Board adopted the Transfer Policy recommendations on June 7, 2026. They remove the 60-day lock after a change of registrant and add a 30-day (720-hour) lock on new and newly transferred names. As of September 29, 2026, no effective date is published, so the 60-day rule still applies.](https://gritbrokerage.preview.multisites.ai/post/icann-transfer-policy-changes-60-day-lock) - [How Domain Escrow Works (and Why Every Deal Should Use It)Domain escrow means a neutral third party holds the buyer's money until the domain is transferred to the buyer. The buyer pays the escrow agent, the seller moves the domain, the buyer confirms, and then the agent pays the seller. Neither side has to trust the other with money or the name.](https://gritbrokerage.preview.multisites.ai/guides/domain-escrow) - [Domain Names and Trademarks: UDRP, Cybersquatting, and How to Buy SafelyThe UDRP is a fast, low-cost ICANN process that lets a trademark owner ask a panel to transfer a domain name. The owner must prove three things: the name is confusingly similar to its mark, you have no legitimate interest, and you registered and used it in bad faith. Owning a brand word alone is not enough.](https://gritbrokerage.preview.multisites.ai/guides/domain-trademark-udrp-risk) - [How to Buy a Domain Name That Someone Already OwnsYou buy a taken domain from its current owner, not from a registrar. Check if it is listed for sale, find the owner or their broker, make a short offer, agree on a price, and close through third-party escrow. A buy-side broker can do the outreach quietly for you.](https://gritbrokerage.preview.multisites.ai/guides/how-to-buy-a-domain-that-is-taken) - [How to Sell a Domain Name: A Broker's Step-by-Step GuideTo sell a domain name, set a realistic price from comparable sales, then reach buyers through a marketplace, a broker, or direct outreach. Agree on a price, close through a third-party escrow service, transfer the name to the buyer's registrar account, and collect payment once the transfer is verified.](https://gritbrokerage.preview.multisites.ai/guides/how-to-sell-a-domain-name) - [Domain Broker Fees and Commissions: What You Will Actually PayDomain brokers usually charge a commission on the sale price, often in the range of 10% to 30% depending on the model. Some add an upfront fee, such as GoDaddy's $99.99 for buyers. Escrow adds a separate fee. Each broker sets its own terms, so ask for them in writing.](https://gritbrokerage.preview.multisites.ai/guides/domain-broker-fees) ## Buying or selling a domain? Call, text or email. Responsiveness is our trademark, and a broker answers, not a form robot. [Talk to a broker](https://gritbrokerage.preview.multisites.ai/contact) [Call (442) 500-GRIT](tel:+1-442-500-4748)