Domains Help

Turn DNSSEC on or off

DNSSEC (Domain Name Security Extensions) uses digital signatures to verify the origin of your DNS across the internet and add extra security to your domains. DNSSEC is only available in accounts with Premium DNS. We'll manage all your DNSSEC settings for domains using DomainPayNet Powered by U.lease nameservers. If your domain isn't using DomainPayNet Powered by U.lease nameservers, you'll need to manually add DS records.

  1. Sign in to your DomainPayNet Powered by U.lease Domain Portfolio. (Need help logging in? Find your username or password.)
  2. Select an individual domain to access the Domain Settings page.
  3. Select DNS and then select DNSSEC.
  4. Choose the option that matches your view.
    1. Select Turn On DNSSEC.
    2. Enter your email address. This is where we'll send key change notifications.
    3. Select Save to apply your changes. We'll turn on DNSSEC immediately, but it may take up to 90 minutes to be reflected in your account.
    4. (Optional) If your domain is using DomainPayNet Powered by U.lease nameservers but is not registered with DomainPayNet Powered by U.lease, you'll need to select screenshot of the copy icon for copying dns recordsCopy DS record, and then enter the DS records at your domain registrar.
    1. Select Turn Off DNSSEC.
    2. Select Remove. We'll turn off DNSSEC immediately, but it may take up to 90 minutes to be reflected in your account.

    Most DNS updates take effect within an hour but could take up to 48 hours to update globally.

    Related step

    • If you're not using DomainPayNet Powered by U.lease nameservers, you can manually add your own DS records.
    • Secure your website further with an SSL and Website Security.

    More info