Locating and Modifying the Domain (Transfer) Secret/Authorization Code for a Domain Name

Most TLDs (Domain Name Extensions) have a Domain (Transfer) Secret / Authorization Code (known as Unique Domain Authentication ID (UDAI) for .NZ domain names) associated with them. This serves as a password and is required to authenticate domain name Transfers.

Exceptions 

Note

The following TLDs do not support Domain (Transfer) Secret / Authorization Code (Anchor: authcode):

  • .ES

  • .RU

  • .UK

BlueHost China also allows you to modify your Domain (Transfer) Secret for each domain name. You can, thus, have a Domain (Transfer) Secret of your choice for each domain name.

To Set/View a Domain (Transfer) Secret / Authorization Code for .DE domain names

  1. Login to your Control Panel, search for the domain name whose Domain Secret you wish to view/modify and proceed to the Order Information view. See details

  2. Click the Domain Secret link.

  3. Here, you can set/view the Domain (Transfer) Secret / Authorization Code.

    • Setting the Domain (Transfer) Secret / Authorization Code: Provide a new Domain (Transfer) Secret in the textbox and click the Update Domain Secret button to set it.

    • Viewing the Domain (Transfer) Secret / Authorization Code: Once you have set a Domain (Transfer) Secret it will be displayed here until 30 days. After this period expires, you will need to set a new Domain (Transfer) Secret by following the abovementioned process.

    Caveats 

    Note
    • The Domain (Transfer) Secret / Authorization Code for a .DE domain name expires in 30 days after setting it. Thus, this interface will prompt you to set a new Domain (Transfer) Secret / Authorization Code, unless you have generated it.

    • In case of an expired .DE domain name, its Order Information view will display the message -

      Attention

      Your domain has expired. Any Services dependent upon the domain will not work.

      Here, you need to first click the Remind me Later link and then the Domain Secret link.

    • The length of the Domain (Transfer) Secret / Authorization Code of a .DE domain name can be from 8 to 255 characters.

    • A .DE domain name's Domain (Transfer) Secret / Authorization Code can not contain the following characters:

      • I (uppercase i)

      • l (lowercase l)

      • O (uppercase o)

      • o (lowercase o)

      • 0 (zero)

      • 1

    • If you have set a Domain (Transfer) Secret / Authorization Code for your .DE domain name and then within 30 days and prior to Transferring Away your domain name, if you modify the Registrant Contact details of your .DE domain name, the Domain (Transfer) Secret / Authorization Code gets nullified. You need to reset the Domain (Transfer) Secret / Authorization Code if you still intend to Transfer Away your .DE domain name to another Registrar.

To View/Modify a Domain (Transfer) Secret / Authorization Code (except for .DE domain names)

  1. Login to your Control Panel, search for the domain name whose Domain Secret you wish to view/modify and proceed to the Order Information view. See details

  2. Click the Domain Secret link.

    Expired Domain Name Related Information 

    Note

    In case of an expired domain name, its Order Information view will display the message -

    Attention

    Your domain has expired. Any Services dependent upon the domain will not work.

    Here, you need to first click the Remind me Later link and then the Domain Secret link.

  3. Here, the current Domain (Transfer) Secret will be displayed. In order to change it, provide a new Domain (Transfer) Secret in the textbox and click the Update Domain Secret button to set it.

    Domain Name Extension Specific and Other General Conditions 

    Note
    • Domain Secret character limit for different Domain Name Extensions

    • While modifying the Domain Secret of .COM, .NET, .NAME and .JOBS domain names, the following rules apply:

      • The length of the Domain Secret can be from 8 to 32 characters only

      • The Domain Secret must contain 1 alphabet, 1 number as well as 1 special character.

    • The Domain Secret should ideally consist of alphanumeric as well as special characters like the ones mentioned below:

      • A -Z and a - z

      • 0 - 9

      • ! " # $ % & ' ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~

      However, certain TLDs do not support usage of special characters in the Domain Secret:

      • .ME: No special character. Only alphanumeric characters permitted.

      • .UK: No special character. Only alphanumeric characters permitted.

      • .WS: < > & '

    • In case of a .COM, .NET, .WS domain names the Domain Secret field may be blank. In order to set it, provide a new Domain (Transfer) Secret in the textbox and click the Update Domain Secret button.

    • In order to set a new Domain (Transfer) Secret / Authorization Code for a .EU domain name, you need to click the Fetch Latest Token button.

      Note
      • Authorization Code for a .EU domain name will have the format XXXX-AAAA-BBBB-CCCC where XXXX is a plain-text identifier of the current Registrar, and AAAA, BBBB and CCCC are blocks of 4 random characters (letters and digits) separated by dashes.

      • The Authorization Code is generated upon request from the Registrar and is valid for a period of 40 days. Each time the code is requested, a new one will be generated on the spot, replacing the previous one and remaining valid for 40 days.

      • Requests submitted during the first day (24 hours from the moment of first request) of the validity period of the code will not result in a new code being generated. The request will return the same code with the same remaining validity period.

        Example:

        The first request for an Authorization Code is made on 15 Dec 2012 11.00 AM GMT. An Authorization Code will be generated with a validity of 40 days. All further requests for the code within the next 24 hours (16 Dec 2012 11.00 AM GMT) will return the same code with the same remaining validity period. Requests after the initial 24 hours will return a fresh Authorization Code.

      • Authorization Code associated with a .EU domain name will become invalid immediately after use.

    • In order to set a new Domain (Transfer) Secret / Authorization Code for a .NL domain name, you need to click the Fetch Latest Token button.

    • In case of a .NZ domain name, you can not choose a Unique Domain Authentication ID (UDAI) of your own. The Domain Secret page will display a link to modify the Domain (Transfer) Secret. Clicking the same will generate a new Unique Domain Authentication ID (UDAI) automatically.

    • In case of a .SHABAKA domain name, the Domain (Transfer) Secret must be between 8 - 32 printable ASCII characters with at least a punctuation, letter and a digit.

    • Once a domain name having an associated Domain (Transfer) Secret / Unique Domain Authentication ID (UDAI) is Transferred to BlueHost China from another Registrar, a new Domain (Transfer) Secret / Unique Domain Authentication ID (UDAI) is set for such a domain name. This process is implemented from a security perspective.