Skip to main content
Call us
Phone numbers and hours
Help Center

Explore our online help resources


Domains Help

Turn DNSSEC on or off

Turn on DNSSEC (Domain Name Security Extensions) to add an extra layer of security to your domains. DNSSEC uses digital signatures to verify the origin of your DNS across the Internet.

Customers using Premium DNS have access to fully managed DNSSEC, where we'll automatically take care of setting up DNSSEC for domains registered with GoDaddy. If your domain is registered somewhere else, we'll set up your DNS zone file for DNSSEC, but you'll need to input the DS records we provide you at your domain registrar.

If you want to use DNSSEC and your domain isn't using GoDaddy nameservers, you'll need to manually add DS records.

  1. Sign in to your GoDaddy Domain Portfolio. (Need help logging in? Find your username or password.)
  2. Select Screenshot showing the three-dot icon to select domain edit options Domain Edit Options next to your domain and then select Edit DNS. You may need to scroll down to see Edit DNS.
    screenshot showing the option for edit dns
  3. Select DNSSEC above your DNS records zone file.
    screenshot of the DNSSEC button highlighted with a red rectangle
  4. Turn DNSSEC on by switching the toggle to DNSSEC Active. Turn it off by switching to DNSSEC Inactive.
  5. Enter the email address where we should send key change notifications.
  6. Select Save to apply your changes.

Most DNS updates take effect within an hour but could take up to 48 hours to update globally.

Related step

  • If you're not using GoDaddy nameservers, you can manually add your own DS records.
  • Secure your website further with an SSL and Website Security.

More info