A Unique Domain Authentication ID (UDAI) is an 8-character alphanumeric security code required to authorize the transfer of .nz domain names between registrars. Acting as a temporary password generated by the registry, it ensures that only the verified domain holder can approve changes to the domain’s management, preventing unauthorized transfers and hijacking.

In the competitive landscape of the New Zealand domain secondary market, understanding the mechanics of the .nz ecosystem is crucial for investors, business owners, and IT administrators. The UDAI is the linchpin of domain sovereignty in New Zealand. Without it, your digital asset is immovable; with it, ownership can change hands in seconds. Whether you are looking to sell a premium .nz domain or migrate your portfolio to a more cost-effective registrar, mastering the UDAI process is the first step.

What is a Unique Domain Authentication ID (UDAI)?

The Unique Domain Authentication ID, commonly referred to as the UDAI, is essentially the “transfer password” for any domain ending in .nz (including .co.nz, .org.nz, and .net.nz). It is a specific protocol enforced by the Domain Name Commission (DNC) in New Zealand to regulate the Shared Registry System (SRS).

Unlike generic top-level domains (gTLDs) like .com, which often use “Auth-Codes” or “EPP Codes” that might remain static for long periods, the UDAI is designed with stricter validity controls to enhance security. It consists of exactly eight characters, a mix of letters and numbers, generated directly by the registry backend.

The Role of UDAI in Domain Ownership

Possession of the UDAI is interpreted by the registry as proof of authority. If you provide a valid UDAI to a new registrar, the system assumes you are the legal registrant or have the registrant’s explicit permission to move the domain. This makes the UDAI the single most critical piece of data regarding the custody of your online identity.

How Does a UDAI Code Generator Work?

When users search for a “UDAI code generator,” there is often a misconception that a third-party tool or software can create this code. It is vital to clarify that no external tool can generate a valid UDAI. The generation process is strictly server-side, controlled by the .nz registry.

When you request a UDAI, the following process occurs in the background:

1. Request Initiation: You click “Generate UDAI” in your registrar’s portal.
2. API Call: Your registrar sends a secure API request to the .nz Shared Registry System (SRS).
3. Code Generation: The SRS algorithm generates a pseudo-random 8-character string.
4. Association: This string is cryptographically hashed and associated with your specific domain name in the central database.
5. Delivery: The code is sent back to the registrar, who displays it to you.

Therefore, a “UDAI code generator” is effectively a function provided within your domain management dashboard, not a standalone app. Attempting to use third-party websites claiming to generate UDAI codes is a severe security risk and will likely result in phishing attempts.

How to Generate a UDAI From Your Registrar

Generating a UDAI is a straightforward process, though the interface may vary slightly depending on which registrar manages your domain (e.g., Crazy Domains, GoDaddy, 1st Domains, Freeparking). Below is the universal workflow applicable to most accredited .nz registrars.

Step-by-Step Generation Guide

1. Log in to your Control Panel: Access the account where your domain is currently registered.
2. Navigate to Domain Management: Look for sections labeled “My Domains,” “Domain Manager,” or “DNS Settings.”
3. Select the Target Domain: Click on the specific .nz domain you wish to transfer.
4. Locate the UDAI Option: This is often found under headings like “Transfer Domain,” “EPP Code,” or explicitly “UDAI Code.”
5. Click Generate/View: Most systems will have a button to “Generate new UDAI” or “View current UDAI.”

Once generated, copy the code immediately. Some registrars will also email this code to the administrative contact email address on file. Ensure your contact details are up to date before requesting the code.

Can I Generate a UDAI if My Domain is Expired?

Yes, in most cases, you can still generate a UDAI and transfer a domain that is in the “Renewal Grace Period.” However, once a domain enters the “Redemption Period” (usually 90 days after expiry), it becomes significantly harder to manage, and you may need to pay restoration fees before a UDAI can be issued.

Validity Periods and Expiration Rules

One of the most distinct features of the .nz UDAI system is the validity window. Unlike .com auth codes which might last indefinitely until used, a UDAI is temporary.

How long is a UDAI code valid?

A UDAI is valid for exactly 30 days from the moment it is generated. This time limit is a security feature designed to prevent old, forgotten codes from being used by bad actors months or years later.

If you generate a code on March 1st, it will expire on March 31st. If you attempt to use it for a transfer on April 1st, the receiving registrar’s system will reject it as invalid. Furthermore, generating a new UDAI immediately invalidates any previous UDAI for that domain, regardless of whether the 30-day window of the old code has closed.

Troubleshooting: Why is My UDAI Invalid?

It is common for domain owners to encounter an “Invalid UDAI” error when attempting a transfer. This can be frustrating, but the causes are usually specific and fixable.

1. The 30-Day Expiry

As mentioned, if more than 30 days have passed since generation, the code is dead. You must log back into your current registrar and generate a fresh one.

2. The “O” vs. “0” Confusion

The UDAI is an alphanumeric string. A common error occurs when users manually type the code and confuse the letter ‘O’ with the number ‘0’, or the letter ‘I’ with the number ‘1’. Always use copy and paste functions to avoid transcription errors. Do not try to type it manually.

3. Multiple Generations

If you clicked the “Generate” button three times in frustration, you created three different codes. Only the most recent code is valid. If you are trying to use the first code you saw, it was invalidated the moment the second code was created. Always use the latest code generated.

4. Registrar Locks

While less common in the .nz space compared to .com, some registrars may place a lock on the domain that prevents the UDAI from working until the lock is removed via the dashboard.

Security Warning: Never Share UDAI Publicly

In the secondary market, sellers often list domains for sale on platforms like TradeMe or specialized domain brokerages. A critical mistake new sellers make is posting the UDAI in the public listing description to “speed up the sale.”

The Risk of Public Exposure

Never share your UDAI publicly. If you post your UDAI on a public forum or listing site, anyone who sees it can initiate a transfer of your domain to their own registrar account. Once the transfer is complete, they have full control over the domain’s DNS records, website redirection, and email accounts.

Treat the UDAI like your banking PIN. It should only be shared with the specific buyer after funds have been secured, or entered directly into a secure transfer field at your new registrar.

What to do if your UDAI is compromised?

If you suspect someone unauthorized has seen your UDAI:

1. Immediately generate a new UDAI. As noted, this action instantly kills the old code, rendering the compromised information useless.
2. Check your email. Look for any “Transfer Pending” notifications.
3. Contact your registrar. If a transfer has already been initiated without your consent, contact your registrar immediately to try and halt the process.

Frequently Asked Questions