Understanding EPP Codes, WHOIS Updates, and Domain Registrar Locks

Transferring a domain between registrars, updating your contact details in the public WHOIS directory, and understanding registrar locks are essential skills for anyone managing a domain name. This guide explains each concept, how they relate to each other, and how they work within the INNOVATECH GROUP client portal.

Prerequisites

• You own or manage at least one domain name
• You have a basic understanding of what a domain registrar is (the company where your domain is registered)
• You are logged in to the INNOVATECH GROUP client portal if you plan to make changes

What Is an EPP Authorisation Code?

An EPP (Extensible Provisioning Protocol) authorisation code — also called an auth code, transfer key, or auth-info code — is a unique password assigned to a domain. It is required whenever a domain is transferred from one registrar to another.

Key Facts About EPP Codes

• The EPP code is issued by the current (losing) registrar — the registrar where the domain is currently registered.
• The gaining registrar (the one you are transferring to) requires the code to verify that the transfer has been authorised by the domain owner.
• EPP codes are single-use and typically expire after a set period. If your code expires before the transfer completes, you will need to request a new one.
• Not all domain extensions use EPP codes in the same way. Most generic TLDs (.com, .net, .org) and many country-code TLDs (.co.za) require them, but the process can vary.

EPP Codes and the INNOVATECH GROUP Portal

Inbound transfers (transferring a domain to INNOVATECH GROUP): The INNOVATECH GROUP client portal supports inbound domain transfers through the domain registration and cart flow. When you search for a domain to transfer in, the checkout process will prompt you to enter the EPP authorisation code obtained from your current registrar. This code is submitted as part of the transfer order.

Outbound transfers (transferring a domain away from INNOVATECH GROUP): There is currently no self-service option in the portal for retrieving an EPP code for a domain registered with INNOVATECH GROUP. To obtain an EPP code for an outbound transfer, open a support ticket. The support team will verify your identity and provide the code.

What Are Domain Registrar Locks?

A registrar lock (also called a transfer lock or domain lock) is a security feature that prevents unauthorised transfers of your domain to another registrar.

Types of Locks

Registrar Lock (Client-Side Lock) This is the most common lock type. It is set by you or your registrar and prevents the domain from being transferred without explicit authorisation. When a registrar lock is active:

• Transfer requests from other registrars will be automatically denied.
• The lock must be removed before initiating a transfer.
• Most registrars enable this lock by default as a security measure.

Registry Lock (Server-Side Lock) A higher-level lock applied at the domain registry (e.g. the .co.za registry operator, ZACR). Registry locks provide an additional layer of protection and are typically used for high-value or high-profile domains. They require manual intervention by the registry to remove and are not commonly used by small businesses.

Before Transferring a Domain

You must ensure the domain is unlocked at the current registrar before the gaining registrar can process the transfer. If the domain is locked, the transfer will fail or be rejected automatically.

To request an unlock for a domain registered with INNOVATECH GROUP, open a support ticket. There is no self-service toggle for registrar locks in the portal at this time.

The 60-Day Transfer Restriction

ICANN (the Internet Corporation for Assigned Names and Numbers) enforces a 60-day transfer restriction in two situations:

1. After initial registration — a domain cannot be transferred to a different registrar within 60 days of its original registration date.
2. After a registrar change — if a domain has been transferred between registrars, another transfer cannot be initiated for 60 days after the previous transfer completed.

This policy exists to prevent domain hijacking and give registrars time to detect and respond to unauthorised changes.

Practical implication: If you recently registered a domain or recently completed a transfer, you will need to wait until the 60-day period has passed before initiating another transfer.

Updating WHOIS Contact Information

WHOIS is the public directory that stores contact information for domain name registrants. Keeping your WHOIS details accurate is important because:

• Renewal and expiry notices are sent to the email address in your WHOIS record. If this is outdated, you may miss critical renewal reminders.
• Transfer approvals often require confirmation from the registrant email address listed in WHOIS. An outdated email can block a legitimate transfer.
• Legal and regulatory compliance — ICANN and some registries require accurate WHOIS data. Providing false information can be grounds for domain suspension.

Updating WHOIS in the INNOVATECH GROUP Portal

The portal provides a WHOIS contact update form on the domain detail page:

1. Navigate to My Domains in the client portal.
2. Click View Details on the domain you want to update.
3. Locate the WHOIS Information section.
4. Update the applicable fields:
   • First Name
   • Last Name
   • Email
   • Phone
   • Address
   • City
   • State
5. Save your changes.

WHOIS updates processed through the portal are submitted to the registrar. Allow up to 24–48 hours for the public WHOIS directory to reflect the changes.

How EPP Codes, Locks, and WHOIS Work Together

When preparing for a domain transfer, these three elements interact:

1. Unlock the domain — remove the registrar lock at the current registrar so the transfer can proceed.
2. Update WHOIS if needed — ensure the registrant email address is current, because transfer approval emails are sent to this address.
3. Obtain the EPP code — request it from the current registrar.
4. Initiate the transfer at the gaining registrar — provide the EPP code and follow the transfer process.
5. Approve the transfer — respond to any confirmation emails sent to the WHOIS registrant address.

Skipping any of these steps can cause the transfer to fail or be delayed.

Common Mistakes to Avoid

• Starting a transfer without removing the lock — the transfer will be rejected automatically. Always unlock first.
• Using an expired EPP code — if too much time passes between requesting the code and starting the transfer, the code may expire. Request a new one if needed.
• Outdated WHOIS email — if you cannot receive email at the address in your WHOIS record, you will not be able to approve the transfer. Update it before starting the process.
• Attempting a transfer within the 60-day window — check your domain's registration or last transfer date before initiating a new transfer.
• Confusing nameserver changes with domain transfers — changing nameservers redirects traffic without moving the domain registration. A transfer moves the registration to a different registrar. If you only need your domain to point to a different hosting server, a nameserver change is sufficient.

When to Contact Support

Open a support ticket if:

• You need an EPP authorisation code for a domain registered with INNOVATECH GROUP (there is no self-service retrieval option)
• You need to unlock a domain for transfer
• A transfer you initiated is not completing and you need help diagnosing the issue
• You are unsure whether your domain is eligible for transfer (60-day rule, lock status)
• You need help updating WHOIS contact information for a domain not managed through the portal's update form