# How to turn on DNSSEC

> DNSSEC signs your DNS answers so nobody can forge where your website or mail points. Usually one switch at your DNS host plus a DS record at the registrar.

Security · HTML version: https://getreport.app/learn/dnssec

## DNSSEC

Passing looks like: DNSSEC protects the domain's DNS answers.

**Why it matters.** DNSSEC signs your DNS records so resolvers can reject forged answers, the attack behind hijacked websites and intercepted mail. Most registrars turn it on with one switch.

**How to fix it.**

1. Turn on DNSSEC at your DNS host (Cloudflare, most registrars and hosts have a switch) and, if the registrar is separate, add the DS record it gives you there.

Check your own page: https://getreport.app/