Site Logo
Help CenterDomain TransfersUnderstanding Auth Codes
schedule4 min readLast updated: December 15, 2025

Understanding Auth Codes

Authorization codes, also known as EPP codes or auth codes, are essential for domain transfers. This guide explains what they are, how they work, and why they're important for securing your domain.

What is an Auth Code?

An authorization code (auth code) is a unique, randomly generated password that proves you have the right to transfer a domain. It's also commonly called:

  • check_circleEPP code (Extensible Provisioning Protocol code)
  • check_circleTransfer code
  • check_circleDomain secret
  • check_circleAuth-Info code

How Auth Codes Work

Auth codes function as a security mechanism in the domain transfer process:

  1. 1

    The current registrar generates a unique auth code for the domain

  2. 2

    The domain owner (you) receives the auth code securely

  3. 3

    You provide the auth code to your new registrar when initiating a transfer

  4. 4

    The new registrar verifies the code with the domain registry

  5. 5

    If the code matches, the transfer is authorized to proceed

info

Auth codes are case-sensitive and must be entered exactly as provided. Even a small typo will cause the transfer to fail.

Security Purpose

Auth codes serve a critical security function in preventing unauthorized domain transfers:

  • check_circleOnly the domain owner or authorized admin can request the auth code
  • check_circleThe code proves legitimate ownership and transfer authorization
  • check_circleWithout the correct code, no registrar can take control of your domain
  • check_circleCodes are single-use and often expire after a set period
  • check_circleThis system prevents domain hijacking and theft
warning

Never share your auth code with anyone except your intended new registrar. Treat it like a password - anyone with this code could potentially transfer your domain.

What Does an Auth Code Look Like?

Auth codes vary in format depending on the registry, but typically:

  • check_circleContain 6-32 characters
  • check_circleInclude a mix of letters, numbers, and sometimes special characters
  • check_circleAre case-sensitive
  • check_circleLook something like: "Xy7#mK9pL2" or "8fG4hJ6kL3mN"

Receiving Your Auth Code from Markforge

When you purchase a domain from Markforge, here's how you'll receive your auth code:

  1. 1

    Complete your domain purchase on Markforge

  2. 2

    We unlock the domain and generate the auth code

  3. 3

    You'll receive the auth code via email within 24 hours

  4. 4

    The email will include the code and instructions for use

Common Auth Code Issues

If your transfer fails due to an auth code issue, check these common problems:

  • check_circleTypo or incorrect case - copy and paste the code exactly
  • check_circleExpired code - request a new one if too much time has passed
  • check_circleDomain still locked - ensure the domain is unlocked before transfer
  • check_circleExtra spaces - make sure no spaces were added when copying

Need a New Auth Code?

If your auth code has expired or isn't working, contact us via live chat, our contact form, or email at support@markforge.xyz, and we'll generate a new one for you.

Was this article helpful?

Still Need Help?

Can't find what you're looking for? Our support team is ready to assist you.

support_agentContact Support
Understanding Auth Codes | Markforge Help Center | Markforge