AuthCodes are personalized, unique passwords, which work for one specific domain. They ensure that a domain transfer can only be started by the owner of the domain or another authorized person.
Here’s an example of what an AuthCode looks like: Ax7p2/62i