Turn DNSSEC on or off
Turn on DNSSEC (Domain Name Security Extensions) to add an extra layer of security to your domains. DNSSEC uses digital signatures to verify the origin of your DNS across the Internet.
Customers using Premium DNS have access to fully managed DNSSEC, where we'll automatically take care of setting up DNSSEC for domains registered with GoDaddy. If your domain is registered somewhere else, we'll set up your DNS zone file for DNSSEC, but you'll need to input the DS records we provide you at your domain registrar.
If you want to use DNSSEC and your domain isn't using GoDaddy nameservers, you'll need to manually add DS records.
- Sign in to your GoDaddy Domain Portfolio. (Need help logging in? Find your username or password.)
- Select Domain Edit Options next to your domain and then select Edit DNS. You may need to scroll down to see Edit DNS.
- Select DNSSEC above your DNS records zone file.
- Turn DNSSEC on by switching the toggle to DNSSEC Active. Turn it off by switching to DNSSEC Inactive.
- Enter the email address where we should send key change notifications.
- Select Save to apply your changes.
Most DNS updates take effect within an hour but could take up to 48 hours to update globally.
- If you're not using GoDaddy nameservers, you can manually add your own DS records.
- Secure your website further with an SSL and Website Security.
- Some domains don't support DNSSEC.
- Turn on auto-renew to continue your domain registration uninterrupted.
- Set up 2-step verification for the best security on your domains and account.