Transferring a domain from one company to another normally involves the use of a unique authorization code, which different companies call an EPP authorization code, a domain password or an AuthInfo code. This code can be used as a security mechanism against unauthorized transfers with all gTLD and with most ccTLD extensions. It can be obtained only by the owner of the given domain name and is issued by the current registrar. It must be given to the new registrar company because the transfer process cannot be started without it. The code is case-sensitive and commonly comprises of digits and special symbols, so as to impede unauthorized individuals from cracking it. Certain registrar companies even change the codes of domain names registered through them after a certain amount of time for even greater safety.