The registrar is required to provide the Auth-Code to the domain name owner within five calendar days of the owner's request, and ICANN accepts complaints about registrars that do not.
All Generic top-level domains use an Auth-Code in their transfer process.
[4][5] With the .nz registry update in 2022 the term UDAI was retired, and the passcode is now also referred to as an Auth-Code.
[3] Some registries use a document based approach either in conjunction with or instead of an Auth-Code.
[9] Some other registries use an email template (that may or may not be in part processed automatically) like .lr or .jm.