DNSSEC protection automatically secures all supported Squarespace-managed domains against DNS spoofing and malicious redirects. This security feature uses public and private keys stored as DS or DNSKEY records in your DNS settings.

How DNSSEC Works

Domain Name System Security Extensions (DNSSEC) verifies that domain data remains unaltered when visitors access your website. The system automatically manages security keys through DNS records, providing seamless protection for your domain.

Managing DNSSEC Settings

To disable DNSSEC:

• Access Domain Dashboard
• Select your domain
• Navigate to DNS > DNSSEC
• Toggle off DNS Security Extensions
• Confirm the action

Note: DNSSEC automatically disables when using custom nameservers.

Using Third-Party DNSSEC Protection

To add external DNSSEC protection:

• Open Domain Dashboard
• Select your domain
• Go to DNS > DNSSEC > Add Record
• Enter provider's information:
  • Key-Tag
  • Algorithm
  • Digest Type
  • Summary
• Save changes

Important: Only one DNSSEC record can be added per domain.

Re-enabling DNSSEC

To re-enable DNSSEC:

• Access Domain Dashboard
• Select your domain
• Go to DNS > DNSSEC
• Toggle on DNS Security Extensions

Troubleshooting Common Issues

Records Not Compatible:

• Disable DNSSEC
• Re-add DNS record

DNSSEC Validation Failed:

• Reset to Squarespace default nameservers
• Enable DNSSEC

These steps ensure proper DNSSEC functionality while maintaining optimal domain security.

Related Articles

Previous Articles