Pre-transfer checklist for domain transfers

Pre-transfer checklist (Complete all items)

1. ☐ Verify registrant email access

   Confirm that you can receive email at the registrant email address, as it will receive the domain transfer authorization email.

   Important

   If you cannot access the current registrant email address, update the email address for the registrant contact with your current registrar and wait 60 days before transferring.

2. ☐ Unlock domain

   Access your current registrar domain settings and disable the "Domain Lock" or "Transfer Lock" protection, if enabled.

   Note

   After disabling the lock, allow a few minutes for the change to take effect before starting your transfer.

3. ☐ Obtain authorization code

   Request an authorization code (auth code) from your current registrar and maintain its confidentiality. You'll enter this code in the Route 53 console later in the transfer process.

4. ☐ Verify domain age and eligibility

   Confirm your domain meets ICANN transfer requirements:

   • The domain must be at least 60 days old since initial registration.

   • If the domain registration expired and was restored, it must have been restored at least 60 days ago.

   Tip

   ICANN rules may temporarily block transfers if registrant contact details were updated recently (for example, changing your name or email). Some registrars let you opt out of this hold — check with your current registrar if you're unsure.

5. ☐ Prepare payment method

   Ensure your Amazon account has a valid payment method. When you transfer a domain to Route 53, the transfer fee that we apply to your Amazon account varies by top-level domain.

   For current pricing, see Route 53 Pricing.

   Note

   You cannot use Amazon credits to pay for domain transfers. Route 53 charges the transfer fee before starting the process and provides an immediate refund if the transfer fails.

6. ☐ Disable DNSSEC (if enabled)

   If DNSSEC is currently enabled with your current registrar, temporarily disable it before starting the transfer. This ensures the transfer can complete without DNS validation issues.

   Why this matters:

   When you transfer a domain, the DNSSEC keys (KSK/ZSK) and DS records stored at your current registrar are not automatically transferred to Route 53. If you re-enable DNSSEC without reconfiguring these keys in Route 53, your domain may fail DNS validation.

   Safe approach (recommended):

   1. Disable DNSSEC at your current registrar before initiating the transfer.

   2. Complete the domain transfer and create your Route 53 hosted zone (if not already created).

   3. Verify that all DNS records are resolving correctly without DNSSEC enabled.

   4. Configure DNSSEC in Route 53 using your hosted zone's new KSK/ZSK values.

   5. Re-enable DNSSEC by publishing the new DS record with your TLD registrar (now Route 53).

   Tip

   If you are transferring your domain along with creating a new hosted zone in Route 53, disable DNSSEC before transferring, then wait until the hosted zone setup is verified and DNS resolution works correctly. Once confirmed, you can safely enable DNSSEC again from Route 53's console. Always verify your DNS configuration in Route 53 before re-enabling DNSSEC. For more information about DNSSEC with Route 53, see Configuring DNSSEC for a domain.