Free Trial

DS Records for DNSSEC

Anthony Eden's profile picture Anthony Eden on

CloudFlare recently announced DNSSEC support for all CloudFlare customers, a move that will potentially increase the number of DNSSEC-enabled DNS zones on the internet by quite a bit. In order for DNSSEC to work, you must be able to add a DS record for your domain which appears in the DNS records in TLD name servers. Starting today you can now add your DS record for any com, net or info domain registered through the DNSimple web site. We will continue adding support for additional TLDs in the future.

Here's how it works:

Enabling DNSSEC DS Records

First you must enable DNSSEC at your DNS provider. For example, if you are using CloudFlare, then you would need to enable DNSSEC:

Enable DNSSEC at Cloudflare

Once it is enabled, you will see information about the DS record. We have two ways to enter the information, either field-by-field entry or quick entry, which allows you to paste the entire record into a single field. For CloudFlare you can just click the full DS record and it will be copied to your clipboard.

Copy DS Information

From there, log into to your DNSimple account and go to the domain's management page. At the bottom of the Domain tab you will see a card for enabling DS records. Click Configure DS Record.

Enable DS in DNSimple

Finally, either enter the details for the DS record in using the field-by-field method, or click on the Quick Entry tab and paste the entire record in.

Enter the DS Information

DS Records for Anyone

You can use any DNS provider that supports DNSSEC, not just CloudFlare. Each DNS provider will be different, so you'll need to consult their documentation to determine how to turn on DNSSEC. You can also use DNSSEC if you run your own authoritative name server with DNSSEC support.

DNSSEC at DNSimple

DNSSEC is included in all our subscription plans. It can be enabled for free in all DNSimple domains. You can check our guide about DNSSEC for more information.

If you have any questions, get in touch – we're always happy to help. Not using DNSimple yet? Give us a try free for 30 days, and explore everything our automated DNS management has to offer.

Share on Twitter and Facebook

Anthony Eden's profile picture

Anthony Eden

I break things so Simone continues to have plenty to do. I occasionally have useful ideas, like building a domain and DNS provider that doesn't suck.

We think domain management should be easy.
That's why we continue building DNSimple.

Try us free for 30 days
4.5 stars

4.3 out of 5 stars.

Based on and reviews.