Help

Transfer a Web2 domain away from us

Written by Patrick Gastaldon | Sep 16, 2025 9:02:18 AM

Overview

You can move your Web2 domain to another registrar at any time, subject to ICANN and registry rules. A transfer out requires that the domain is unlocked, that you obtain the Auth or EPP code, and that your contact email can receive approval messages. Most generic TLDs (e.g., .com, .net, .org) follow a similar process. Some country code TLDs use different methods, such as provider tags or special forms, so always check the gaining registrar’s instructions for your extension.

Before You Start: A Checklist

Check timing – Avoid starting a transfer in the final days before expiration. Transfers usually complete in 5–7 days. Expired names in Redemption or Pending Delete cannot transfer.

Unlock the domain – Turn off the transfer lock in our dashboard; the status clientTransferProhibited must be off.

Get the Auth or EPP code – Request or reveal the code in our dashboard. Copy it exactly, without extra spaces. Some codes expire after a short time.

Verify WHOIS contacts – Make sure your registrant email is accurate and reachable. Approval emails are sent to these contacts.

Handle WHOIS privacy – Either disable privacy temporarily, or confirm that the privacy service forwards approval emails correctly.

Check policy locks – New registrations or registrant changes often trigger a 60-day no transfer window. Some TLDs allow an opt out at the time of change.

Review DNS and nameservers – Decide whether to keep nameservers unchanged or switch later. If changing, prepare the new DNS zone first.

DNSSEC considerations – If DNSSEC is enabled and you plan to change nameservers, disable DNSSEC first, then re-enable with the correct DS record at the new provider.

Tip: If the domain is mission critical, renew it first, then transfer to reduce risks near expiry.

Start the Transfer

• Unlock the domain in our dashboard.

• Request the Auth or EPP code and copy it exactly.

• Start the transfer at the gaining registrar and submit the code.

• Approve confirmation emails. Some registrars require explicit approval; others auto-approve if no objection.

• Monitor status in both dashboards. Most transfers finish in 5–7 days. The registry will show pendingTransfer during this window.

Nameserver Handling and Service Continuity

Keep nameservers unchanged – Safest option. Your website and email continue using the current DNS zone. You can migrate DNS later.

Change nameservers as part of migration – Pre-create all required records (A, AAAA, CNAME, MX, TXT for SPF, DKIM, DMARC, SRV). Lower TTL 24–48h before the switch. Change NS after transfer completes, then restore normal TTL.

DNSSEC sequence – If active and changing NS, disable DNSSEC, switch NS, then re-enable with the correct DS at the new provider. Incorrect DS data can cause immediate failures.

Expiry, Fees, and Timing

Expiry state – Domains in Grace can often transfer. Redemption or Pending Delete cannot transfer.

Transfer duration – Typically 5–7 days. Some losing registrars allow faster manual approval. Some ccTLDs complete in hours.

Renewal handling – For most gTLDs, the gaining registrar adds one year (subject to 10-year max). If we auto-renewed shortly before, the registry may reverse that charge after completion.

Charges – You pay the gaining registrar’s fee. We do not charge an outbound fee. Redemption restores must be completed first.

Special Cases by TLD

Country code TLDs – Some require IPS tags (.uk), provider codes (.de), or registry forms and ID checks.

Eligibility restricted TLDs – Some enforce residency or corporate presence rules. Documentation may be required.

Registry Lock – High-security domains may have a Registry Lock. Submit a support request to remove it before transfer.

Troubleshooting: Quick Fixes

Auth or EPP code rejected – Request a fresh code, copy carefully.

Transfer stuck in pending – Ask if manual approval is possible.

No approval email – Check WHOIS contacts, spam folder, or privacy forwarding. Disable privacy if needed.

60-day lock – Wait until the lock ends. Opt out must be set at the time of change.

Service disruption – If nameservers changed, verify DNS records. If unchanged, confirm old DNS host did not disable the zone.

Transfer rejected – Common reasons: unpaid balance, admin hold, UDRP/legal lock, or explicit reject flag. Resolve and retry.

Frequently Asked Questions

Will my site/email go offline? Usually not if nameservers stay unchanged. If changing, prepare the new zone first.

Can I transfer near expiration? Start early or renew first. Redemption and Pending Delete cannot transfer.

Do I lose time on expiration? Typically no. Gaining registrar adds one year (subject to 10-year cap). Auto-renew reversals may apply.

Can I cancel after starting? Some registrars allow cancellation in the first days. Policies vary.

Is WHOIS privacy required off? Not if forwarding works. If emails fail, disable privacy temporarily.

Glossary

Auth or EPP code – The authorization code required to transfer a domain.

Gaining registrar – The provider you are transferring to.

Losing registrar – The provider you are transferring away from.

clientTransferProhibited – Lock status that prevents transfers; must be off to transfer.

DNSSEC – Security extension that signs DNS and requires a DS record at the registry.

Grace, Redemption, Pending Delete – Post-expiry stages that affect renewal and transfer eligibility.

Summary

To transfer your domain, unlock it, obtain the Auth/EPP code, and verify registrant email. Start the transfer at the gaining registrar. For continuity, keep nameservers unchanged and plan DNS or DNSSEC changes after completion. Transfers usually take 5–7 days and often add one year to expiry. Renew or restore first if the domain is near expiry or in a restricted state.