An authorisation code (also known as an "auth code") is the domain holder's password for their domain name used to carry out a change of registrar.
The code is generated by the registrar at the domain holder's request. The registrar is required to provide an authorisation code for each domain name it manages. The code must be provided within five (5) working days of receiving the request.
Once used, the code is no longer valid. The code is reset by The Swedish Internet Foundation, and the new registrar can generate a new authorisation code for the domain name if needed.
Information about authorisation codes in EPP can be found in the EPP manual. The EPP documentation is available for download on the registrar website, registry.se.
A common procedure is to allow the domain holder to generate an authorisation code by clicking a button in the registrar's control panel. Providing this functionality through an authenticated control panel helps ensure that only the authorised domain holder can access the code.
Once a registrar transfer has been completed, the authorisation code is reset by Registry Services.
