# Transfer a domain to another registrar

> Unlock a domain registered with Coritan and reveal its EPP code so another registrar can take it over.

Source: https://docs.coritan.com/websites/domains/transfer-a-domain-away/

In the dashboard:

- /dashboard/websites/…/settings: https://www.coritan.com/dashboard/websites

Transfer a domain away when you want another registrar to hold it. You turn off the domain's transfer lock, reveal its EPP code on the **Settings** tab, and give the code to the new registrar, which starts the transfer.

## Before you begin

- The registration must be `active` ([Statuses](/websites/domains/#statuses)).
- Decide where the domain's DNS will live. If Coritan hosts its zone, the zone keeps answering after the transfer for as long as the domain's nameservers point at Coritan. To move the DNS too, set up the records at the new provider and [change the nameservers](/websites/domains/change-nameservers/) before you start.

## Get the EPP code

1. In the dashboard, go to [Websites](https://www.coritan.com/dashboard/websites), open the domain and select the **Settings** tab.
2. In the **Domain options** card, turn **Transfer lock** off.
3. In the **EPP code** card, select **Reveal EPP code**.
4. Copy the code. The dashboard shows it once; select **Hide** when you have it.
5. At the new registrar, start the transfer and enter the code.

> [!WARNING]
> Anyone who holds the EPP code of an unlocked domain can transfer it. Give it only to the new registrar. If you do not go ahead with the transfer, turn **Transfer lock** back on.

## Result

The new registrar asks the registry for the domain, and the transfer completes on the registry's schedule. If you lose the code before then, select **Reveal EPP code** again.

## Troubleshooting

`Turn off the transfer lock before revealing the EPP code.`
: The lock is on. Turn **Transfer lock** off in the **Domain options** card, then reveal the code.

`Domain must be unlocked before requesting auth code`
: The API's form of the message above. Send `PUT /api/v1/domains/registrations/{reg_id}/lock` with `{"enabled": false}` first.

`Failed to get auth code: …`
: The registry did not hand over the code. Try again later.

## Related

- [Turn on WHOIS privacy and transfer lock](/websites/domains/whois-privacy-and-transfer-lock/)
- [Transfer a domain to Coritan](/websites/domains/transfer-a-domain-to-coritan/)

## With the API

Unlock the domain, then read the code:

```bash
curl https://api.coritan.com/api/v1/domains/registrations/7/auth-code \
  -H "Authorization: Bearer $CORITAN_TOKEN"
```

```json
{"domain": "example.com", "auth_code": "Xk7#pQ2m9L"}
```

The call answers `409` while the domain is locked, and `404` with `Registration not found` when the registration is not yours or not `active`.

## API

- `GET /api/v1/domains/registrations/{reg_id}/auth-code`: Get the EPP/auth code for domain transfer out (https://docs.coritan.com/api/reference/client/domains/#op-get-api-v1-domains-registrations-reg-id-auth-code)