Domains Help

Turn DNSSEC on or off

DNSSEC (Domain Name Security Extensions) uses digital signatures to verify the origin of your DNS across the internet and add extra security to your domains. DNSSEC is only available in accounts with Premium DNS. We'll manage all your DNSSEC settings for domains using VirSync nameservers. If your domain isn't using VirSync nameservers, you'll need to manually add DS records.

  1. Sign in to your VirSync Domain Portfolio. (Need help logging in? Find your username or password.)
  2. Select an individual domain to access the Domain Settings page.
  3. Select DNS and then select DNSSEC.
  4. Choose the option that matches your view.
    1. Select Turn On DNSSEC.
    2. Enter your email address. This is where we'll send key change notifications.
    3. Select Save to apply your changes. We'll turn on DNSSEC immediately, but it may take up to 90 minutes to be reflected in your account.
    4. (Optional) If your domain is using VirSync nameservers but is not registered with VirSync, you'll need to select screenshot of the copy icon for copying dns recordsCopy DS record, and then enter the DS records at your domain registrar.
    1. Select Turn Off DNSSEC.
    2. Select Remove. We'll turn off DNSSEC immediately, but it may take up to 90 minutes to be reflected in your account.

    Most DNS updates take effect within an hour but could take up to 48 hours to update globally.

    Related step

    • If you're not using VirSync nameservers, you can manually add your own DS records.
    • Secure your website further with an SSL and Website Security.

    More info