Transfer your domain to Cloudflare
- 1. Add your domain to Cloudflare
- 2. Transfer your registration
  - Unlock your domain
  - Request an authorization code

Transfer your domain to Cloudflare

Last updated Apr 24, 2026 Transferring a domain moves your registration from your current registrar to Cloudflare.

Active work: About 30 minutes.
Total time: Up to 10 days, depending on your registrar.
Cost: Cloudflare domains are at-cost with no markup fees. Most transfers include a one-year extension from your current expiration date. Some country-code domains (such as .uk) have no transfer fee.

Note

Before you can transfer, you must first add your domain to Cloudflare. You cannot enter an authorization code until your domain is active on Cloudflare. If your domain is registered with Shopify, Wix, or a similar platform, you may not be able to change nameservers while the domain is registered there. Refer to Transfer from Shopify, Block, or Wix for the recommended workaround, or Troubleshoot failed domain transfers if you are running into issues.

Note

If your domain recently expired and you renewed it, wait at least 45 days after the original expiration date before transferring. Otherwise, the registry may not add the extra year. For details, refer to Why did my domain's expiration date change?.

Note

If you purchased your domain through Cloudflare Registrar, ICANN ↗︎ requires you to verify your registrant email address. If your email is unverified or if the verification has expired, ICANN places a hold on the domain and replaces your nameservers with parking server nameservers (NS). Once you complete verification, your nameservers are automatically restored.

Before you begin

</summary>

Confirm the following before you start:

You have a <a href="https://developers.cloudflare.com/fundamentals/account/create-account/">Cloudflare account</a> with a <a href="https://developers.cloudflare.com/fundamentals/user-profiles/verify-email-address/">verified email address</a>.
Your Cloudflare account has a valid payment method on file.
Your domain was registered at least 60 days ago and has not been transferred in the last 60 days (ICANN requirement).
You have not changed your registrant name, organization, or email address in the last 60 days. Under ICANN rules, changes to these fields trigger a 60-day transfer lock. Some registrars let you opt out of this lock during the change, but not all do.
Your account at your current registrar is active. If your domain has expired, renew it at your current registrar first.
Your domain uses only standard characters (letters, numbers, hyphens). Cloudflare does not support domains with non-Latin characters (for example, <code>例え.jp</code>).
If you are transferring a <code>.us</code> domain, refer to <a href="https://developers.cloudflare.com/registrar/top-level-domains/us-domains/">Additional requirements for .US domains</a>.
If you are transferring multiple domains, notify your bank to prevent fraud alerts on multiple charges.
Cloudflare Registrar requires your domain to use Cloudflare for <a href="https://developers.cloudflare.com/dns/zone-setups/full-setup/">authoritative DNS</a> (full setup). You cannot use another DNS provider while registered with Cloudflare.

</details>

1. Add your domain to Cloudflare

Before you can transfer your registration, your domain must be active on Cloudflare. This is what allows Cloudflare to protect your site with performance and security features during and after the transfer. You will not be able to enter an authorization code or proceed with the transfer until this step is complete.

Disable DNSSEC

If DNSSEC is enabled at your current registrar, disable it before you change nameservers. DNSSEC validates DNS responses using cryptographic signatures tied to your current provider. When you point nameservers to Cloudflare, those signatures will no longer match, which causes DNS resolution failures and can prevent your domain from becoming active.

At your current registrar:

Check your domain settings for DNSSEC or DS records. If there are none, DNSSEC is not active and you can skip to Add your domain.
Remove or disable DNSSEC (sometimes labeled "DS records").
Wait at least 24 hours for the change to propagate before changing nameservers.

Provider-specific DNSSEC instructions

</summary>

This is not an exhaustive list, but the following links may be helpful:

<a href="https://support.dnsimple.com/articles/cloudflare-ds-record/">DNSimple ↗︎</a>
<a href="https://support.domaindiscount24.com/hc/articles/4409759478161">Domaindiscount24 ↗︎</a>
<a href="https://help.dreamhost.com/hc/en-us/articles/219539467">DreamHost ↗︎</a>
<a href="https://www.dynadot.com/help/question/set-DNSSEC">Dynadot ↗︎</a>
<a href="https://support.enom.com/support/solutions/articles/201000065386">Enom ↗︎</a>
<a href="https://docs.gandi.net/en/domain_names/advanced_users/dnssec.html">Gandi ↗︎</a>
<a href="https://www.godaddy.com/help/add-a-ds-record-23865">GoDaddy ↗︎</a>
<a href="https://www.hostinger.com/support/3667267-how-to-use-dnssec-records-at-hostinger/">Hostinger ↗︎</a>
<a href="https://support.hover.com/support/solutions/articles/201000064716">Hover ↗︎</a>
<a href="https://faq.infomaniak.com/2187">Infomaniak ↗︎</a>
<a href="https://www.inmotionhosting.com/support/edu/cpanel/enable-dnssec-cloudflare/">InMotion Hosting ↗︎</a>
<a href="https://kb.inwx.com/en-us/3-nameserver/131">INWX ↗︎</a>
<a href="https://joker.com/faq/books/jokercom-faq-en/page/dnssec">Joker.com ↗︎</a>
<a href="https://www.name.com/support/articles/205439058-managing-dnssec">Name.com ↗︎</a>
<a href="https://www.namecheap.com/support/knowledgebase/article.aspx/9722/2232/managing-dnssec-for-domains-pointed-to-custom-dns/">Namecheap ↗︎</a>
<a href="https://support.nameisp.com/knowledgebase/dns">NameISP ↗︎</a>
<a href="https://www.namesilo.com/support/v2/articles/domain-manager/ds-records">Namesilo ↗︎</a>
<a href="https://help.ovhcloud.com/csm/en-dns-secure-domain-dnssec?id=kb_article_view&sysparm_article=KB0051637">OVH ↗︎</a>
<a href="https://support.squarespace.com/hc/articles/4404183898125-Nameservers-and-DNSSEC-for-Squarespace-managed-domains#toc-dnssec">Squarespace ↗︎</a>
<a href="https://registro.br/tecnologia/dnssec/?secao=tutoriais-dns">Registro.br ↗︎</a>
<a href="https://kb.porkbun.com/article/93-how-to-install-dnssec">Porkbun ↗︎</a> (do not fill out keyData)
<a href="https://www.transip.eu/knowledgebase/150-secure-domains-custom-nameservers-dnssec/">TransIP ↗︎</a>

</details>

After your transfer completes, you can re-enable DNSSEC through Cloudflare with one click. Refer to Enable DNSSEC.

Add your domain and update your nameservers

Follow the steps in Set up Cloudflare DNS to add your domain, review your DNS records, and get your assigned nameservers. Then update the nameservers at your current registrar to the ones Cloudflare assigned.

Nameserver instructions for popular registrars

</summary>

Each registrar has a different interface for updating nameservers. These links explain the process at popular registrars:

<a href="https://support.enom.com/support/solutions/articles/201000065324-preparing-your-domain-for-transfer">Enom ↗︎</a>
<a href="https://www.godaddy.com/help/transfer-my-domain-away-from-godaddy-3560">GoDaddy ↗︎</a>
<a href="https://www.ionos.com/help/domains/domain-transfers/#acc4514">Ionos by 1&1 ↗︎</a>
<a href="https://www.namecheap.com/support/knowledgebase/article.aspx/258/84/what-should-i-do-to-transfer-a-domain-from-namecheap/">Namecheap ↗︎</a>
<a href="https://www.networksolutions.com/help/article/transfer-out-of-network-solutions">Network Solutions ↗︎</a>
<a href="https://support.squarespace.com/hc/articles/205812338-Transferring-a-domain-away-from-Squarespace">Squarespace ↗︎</a>

</details>

Wait for your domain to become active

In the Cloudflare dashboard:

Wait for your domain status to change from Pending to Active. This usually takes a few minutes but can take up to 24 hours.

Note

You cannot proceed with the transfer until your domain shows Active status. The Transfer Domains page will not let you enter an authorization code while the zone is still Pending.

If your zone has been pending for more than 24 hours, verify that you updated the nameservers correctly at your current registrar and that DNSSEC is disabled.

2. Transfer your registration

Once your domain is active on Cloudflare, you can transfer the registration. This moves your domain record from your current registrar to Cloudflare. You will go back and forth between your current registrar and Cloudflare during this process.

Unlock your domain

At your current registrar:

Remove the lock on your domain so Cloudflare can process the transfer. Most registrars apply a lock by default (sometimes called registrar lock, domain lock, or transfer lock) to prevent unauthorized transfers. In WHOIS, this appears as clientTransferProhibited.

Note

Some registrars have multiple lock types (domain lock, transfer lock, privacy lock) that must each be disabled separately. If your domain still shows as locked after you have disabled one, check for additional lock settings.

Request an authorization code

At your current registrar: