Three switches on the domain's page, all about ownership:
- Registrar lock - blocks transfers away while enabled. Keep it on; turn it off only when you are deliberately transferring out.
- EPP code - the password a transfer needs. Get EPP Code shows yours when you want to move the domain elsewhere. Treat it like a password: whoever has it can start a transfer.
- ID protection - hides your personal details from the public WHOIS directory, which otherwise lists the owner of every domain.
If you are leaving: unlock first, then request the EPP code, and hand it only to the registrar you are moving to.