What is DNSSEC?
DNSSEC (Domain Name System Security Extensions) adds an extra layer of protection to your domain. It uses a cryptographic key to verify that your DNS records haven’t been tampered with. This helps prevent users from being redirected to fake or harmful websites. DNSSEC records can’t be edited; they can only be added or deleted.
Note: To add a DNSSEC record, you must first enable DNSSEC with your hosting provider. This will generate a DS (Delegation Signer) record containing the values needed to set up DNSSEC for your domain.
How to add a DNSSEC record
Before adding or deleting a DNSSEC record, log in to your account.
Follow these steps to log in to your account:
1. Open your browser and navigate to the website or platform where you purchased your domain
2. Locate and click the Login button, typically found in the top-right corner or in the menu
3. Enter your email address (used for registration) and password
4. Click Log in or Sign in (depending on the platform)
5. Once logged in, click Account or My Account (depending on the platform), usually in the top-right corner or in the menu
You have successfully logged in.
Follow these steps to add a DNSSEC record:
1. Find your domain under Your domains and click the Manage button (you can also search for your domain using the Search icon)
2. Click the DNS tab
3. Select DNSSEC under the DNS tab
4. Click the Add new record button
5. Enter the DNSSEC values provided by your hosting provider (from the DS record):
a. Key tag: Enter the unique identifier for this DNSSEC key.
b. Algorithm: Select the cryptographic algorithm used for creating the DNSSEC key.
c. Digest type: Select the algorithm type used to create the digest.
d. Digest: Enter the hash value generated by the chosen digest algorithm (usually 40–64 characters long).
6. Click Save
Follow these steps to delete a DNSSEC record:
1. Find your domain under Your domains and click the Manage button (you can also search for your domain using the Search icon)
2. Click the DNS tab
3. Select DNSSEC under the DNS tab
4. Click the delete icon
5. Click Delete record to confirm
Note: It may take up to 24 hours for the changes to take effect due to DNS propagation. For more details, you can refer to our article on How Long Does DNS Propagation Take.