Enable DNSSEC for a Domain

GUIDE-7.14 · 1 min · Updated September 2026

DNSSEC adds a cryptographic signature to your domain's DNS records, so resolvers can verify the records they receive weren't altered in transit. NameBright supports it two ways, depending on where your domain's DNS is hosted.

  1. Log in to your NameBright account.

  2. Go to Domain Manager and select a domain.

  3. Under the DNS section, select Manage DNS Records .

  4. If your domain uses NameBright's nameservers, select the DNSSEC tab and turn DNSSEC on. NameBright signs the records it already serves for your domain — there's nothing to generate or publish yourself.

  5. If your domain uses nameservers outside NameBright, select the DS Records tab instead. Add a DS record with the Key Tag, Algorithm, Digest Type, and Digest values your DNS provider gives you. NameBright publishes the DS record to the registry on your behalf once you save.

The Manage DNS screen with the DNSSEC tab selected, for a domain using NameBright's nameservers
The Manage DNS screen with the DS Records tab selected, showing the Key Tag, Algorithm, Digest Type, and Digest fields

Related