GoDaddy supports DNSSEC for domains using either GoDaddy's nameservers or external DNS providers. This guide covers both scenarios.
Option A: Using GoDaddy's DNS
If your domain uses GoDaddy's default nameservers, DNSSEC can be enabled directly:
Access Domain Settings
Log in to your GoDaddy account. Go to My Products → Domains and click the domain you want to configure.
Navigate to DNS Management
Click "DNS" or "Manage DNS" to access the DNS settings for your domain.
Enable DNSSEC
Scroll to the DNSSEC section and toggle it ON. GoDaddy automatically signs your zone and submits the DS record.
Wait for Activation
DNSSEC activation takes up to 48 hours but typically completes within a few hours.
Option B: Using External DNS (Cloudflare, etc.)
If your domain is registered at GoDaddy but uses external nameservers, you must add the DS record manually:
Enable DNSSEC at DNS Provider
First, enable DNSSEC at your DNS host (e.g., Cloudflare). They will provide DS record values.
Access Domain Manager
In GoDaddy, go to My Products → Domains, then click "DNS" next to your domain.
Add DS Record
In the DNSSEC section, click "Add" and enter the values from your DNS provider: Key Tag, Algorithm, Digest Type, and Digest.
Save and Verify
Save the DS record. Propagation takes 10-60 minutes. Verify using your DNS provider's tools.
DS Record Format for GoDaddy
When adding a DS record to GoDaddy, you'll need these fields:
| Field | Example | Description |
|---|---|---|
| Key Tag | 12345 | 5-digit identifier from DNS provider |
| Algorithm | 13 | ECDSAP256SHA256 (recommended) |
| Digest Type | 2 | SHA-256 (recommended) |
| Digest | A1B2C3... | Hexadecimal hash (64 characters for SHA-256) |
Supported TLDs
GoDaddy supports DNSSEC for most TLDs, including:
- Generic TLDs: .com, .net, .org, .info, .biz
- New gTLDs: .app, .dev, .io, .co, .me, etc.
- Many ccTLDs: .uk, .de, .nl, .se, etc.
Some legacy TLDs may not support DNSSEC at the registry level.
Troubleshooting GoDaddy DNSSEC
DS Record Not Saving
- Ensure all fields are filled correctly
- Remove any spaces or special characters from the digest
- Try a different browser or clear cache
DNSSEC Toggle Not Visible
- The TLD may not support DNSSEC
- Domain must use GoDaddy nameservers for auto-enable
- Contact GoDaddy support for premium domains