EPP codes come standard as a security method for all domain names. Each domain you manage will have its own unique auth code, and any registrar that receives a request to transfer in your domain will need the code to verify ownership of a domain in order to start the transfer.