Turn DNSSEC on or off

DNSSEC (Domain Name Security Extensions) uses digital signatures to verify the origin of your DNS across the internet and add extra security to your domains. You'll get 5 free DNSSEC credits in your 123 Reg account, and you can apply them to domains using 123 Reg nameservers. We'll manage all your DNSSEC settings for domains using 123 Reg nameservers. If your domain isn't using 123 Reg nameservers, you'll need to manually add DS records.

1. Sign in to your 123 Reg Domain Portfolio. (Need help logging in? Find your username or password.)
2. Select an individual domain to access the Domain Settings page.
   
3. Select DNS and then select DNSSEC.
   
4. Choose the option that matches your view.
• Turn On DNSSEC
• Turn Off DNSSEC
PreviousNext
5. Select Turn On DNSSEC.
6. Enter your email address. This is where we'll send key change notifications.
7. Select Save to apply your changes. We'll turn on DNSSEC immediately, but it may take up to 90 minutes to be reflected in your account.
8. (Optional) If your domain is using 123 Reg nameservers but is not registered with 123 Reg, you'll need to select Copy DS record, and then enter the DS records at your domain registrar.
5. Select Turn Off DNSSEC.
6. Select Remove. We'll turn off DNSSEC immediately, but it may take up to 90 minutes to be reflected in your account.

Most DNS updates take effect within an hour but could take up to 48 hours to update globally.

Related step

• If you're not using 123 Reg nameservers, you can manually add your own DS records.

More info

• Some domains don't support DNSSEC.
• Turn on auto-renew to continue your domain registration uninterrupted.
• Set up 2-step verification for the best security on your domains and account.