Transferring a domain from one registrar company to another normally entails the use of a unique domain authorization code, which different companies refer to as an EPP key, a domain password or an Auth-Info code. This code can be used as a security measure against unapproved transfer attempts with all gTLD and with most ccTLD extensions. The code can be obtained only by the domain owner and is issued by the current domain name registrar company. It must be given to the new registrar company because the transfer cannot be initiated without it. The code is case-sensitive and typically includes numbers and special characters, so as to hinder unauthorized people from hijacking it. Some domain registrars even change the codes of domains registered through them once in a while for even greater security.