Transferring a domain from one company to another typically entails the use of a unique authorization code, which different companies call an EPP authorization code, a domain password or an Auth code. This code can be used as a security mechanism against unsanctioned transfer attempts with all gTLD and with most ccTLD extensions. The code can be obtained only by the domain name owner and is issued by the current registrar company. It must be given to the new registrar company because the transfer cannot be started without it. The code is case-sensitive and commonly includes numbers and special characters, so as to hinder unauthenticated persons from hijacking it. Certain domain registrars even reset the codes of domain names registered through them after a given interval of time for even better safety.