Helm

How do I transfer a domain to someone else?

A domain plate passing between two hands with an authorisation token and a lock opening
Two separate changes. Most people only do one.

The short answer

Two different things get called a transfer. Moving a domain to a different registrar needs an unlock and an authorisation code. Moving it to a different person or business is a change of registrant, which is often a separate step. Do both if the domain is genuinely changing hands, or you can end up with the domain in a new account but still legally registered to the old owner.

On this page

Two things called "transfer"

Registrar transfer. The domain moves from one company that manages domains to another. The owner stays the same.

Change of registrant. The registered owner changes — from a developer to a client, from one business to another. The registrar may stay the same.

When a domain genuinely changes hands you usually need both, and doing only the first is the most common mistake. The domain sits in the new person's account while the registration record still names the old owner — which is exactly the situation that causes trouble years later.

The registrar transfer, step by step

1. Unlock the domain. Domains carry a transfer lock by default. The current owner turns it off in the registrar's control panel.

2. Get the authorisation code. Sometimes called an EPP code or auth code. The current registrar provides it, occasionally after a short delay.

3. Disable privacy protection temporarily, if it is on. Some registrars need the contact email visible to send the confirmation.

4. Start the transfer at the new registrar with the domain and the code.

5. Approve the confirmation email. Sent to the registered contact address. This is where transfers stall — if that address is an old inbox nobody reads, the transfer times out silently.

6. Wait. Usually five to seven days. It cannot be rushed.

The change of registrant

Handled in the registrar's contact settings — updating the registrant name, organisation and email to the new owner.

Two things to know:

It may require confirmation from both parties, by email, and both need working addresses.

It can trigger a sixty-day transfer lock. Changing the registrant often prevents moving the domain to another registrar for sixty days.

That second point determines the order.

The order that avoids the sixty-day trap

If the domain is both changing hands and moving registrar:

Transfer the registrar first, then change the registrant.

Do it the other way and the registrant change locks the domain, and you wait two months to complete the move. The lock is a security measure and it does not care that the change was authorised.

The blockers

The domain was registered or renewed within the last sixty days. New registrations cannot be transferred for sixty days. Renewals can trigger the same lock at some registrars.

The contact email is dead. The most common failure. Update the contact address before starting anything.

Unpaid balance or a dispute. Registrars will refuse.

The domain is expiring soon. Renew first. Transfers do not complete on an expired domain, and an expired domain can be lost entirely.

For a business receiving a domain

Once it is yours, spend five minutes:

  • Confirm the registrant is your business, not just the account holder — check the actual record
  • Turn auto-renew on, with a card that will not expire first
  • Turn the registrar lock back on
  • Use a role-based email like [email protected] rather than one person's inbox
  • Note the renewal date somewhere that is not one person's calendar

That last one matters more than it sounds. The most common way businesses lose a domain is not a dispute — it is a renewal notice sent to somebody who left.

When the registrant is your website supplier

There is a version of this that has nothing to do with selling a business: your website supplier registered the domain, and it is in their name. Technically the fix is a change of registrant, and everything above applies unchanged.

The better outcome is not needing the fix. A supplier managing your DNS is normal and fine; a supplier being the registrant is not. Those are different things, and the second is what turns a routine parting of ways into a negotiation.

It is a fair thing to ask about before you commit to anyone. Helm registers the domain in the client's business name as a matter of course, for exactly the reason this article exists — so it stays a process you can read about rather than one you have to run.