How to turn on DNSSEC
Security1 min readFixes check dnssec-enabled
DNSSEC signs your DNS answers so nobody can forge where your website or mail points. Usually one switch at your DNS host plus a DS record at the registrar.
Check your own domain
Our Email & DNS health tool runs this check and writes the record to add, free, in seconds.
What a passing site looks like
- DNSSEC protects the domain's DNS answerswarning · −3 ptseffort M
DNSSEC is not enabled for the domain
Why it matters. DNSSEC signs your DNS records so resolvers can reject forged answers, the attack behind hijacked websites and intercepted mail. Most registrars turn it on with one switch.
How to fix it.
- Turn on DNSSEC at your DNS host (Cloudflare, most registrars and hosts have a switch) and, if the registrar is separate, add the DS record it gives you there.