How to Enable DNSSEC on Namecheap

Implementation Guide • Updated December 2024

Namecheap supports DNSSEC both for domains using their BasicDNS/PremiumDNS and for domains with external nameservers. This guide covers all scenarios.

Option A: Namecheap PremiumDNS

DNSSEC is included with Namecheap's PremiumDNS service:

Enable PremiumDNS

PremiumDNS is a paid add-on. If not already enabled, purchase it from your domain settings.

Activate DNSSEC

In Domain List → Manage → Advanced DNS, scroll to DNSSEC and click "Enable".

Automatic DS Submission

Namecheap automatically submits the DS record to the registry. No manual steps required.

Note: BasicDNS (Namecheap's free DNS) does not include automatic DNSSEC signing. Use PremiumDNS or an external provider like Cloudflare.

Option B: External DNS with Namecheap Registrar

If using external nameservers (Cloudflare, AWS Route 53, etc.), add the DS record manually:

Get DS Record from DNS Provider

Enable DNSSEC at your DNS host first. They provide the DS record details.

Access Domain Settings

Log in to Namecheap → Domain List → click Manage next to your domain.

Go to Advanced DNS

Click the Advanced DNS tab and scroll to the DNSSEC section.

Add DS Record

Click "Add new DS record" and enter: Key Tag, Algorithm, Digest Type, and Digest. Save changes.

DS Record Fields Explained

When your DNS provider gives you DNSSEC details, map them to Namecheap's fields:

Namecheap Field What to Enter Example
Key Tag The key identifier 2371
Algorithm Select from dropdown 13 - ECDSAP256SHA256
Digest Type Select from dropdown 2 - SHA-256
Digest The hash value 64 hex characters

Namecheap + Cloudflare Setup

This is the most common configuration. Here's the quick process:

  1. Set up your domain on Cloudflare (change nameservers)
  2. In Cloudflare: DNS → Settings → Enable DNSSEC
  3. Copy the DS record values Cloudflare provides
  4. In Namecheap: Advanced DNS → DNSSEC → Add DS record
  5. Paste values and save
  6. Wait 10-60 minutes for propagation

Troubleshooting

DS Record Not Accepted

  • Remove spaces from the digest value
  • Verify algorithm number matches dropdown option
  • Some TLDs may have restrictions; check Namecheap's TLD-specific documentation

DNSSEC Option Missing

  • The TLD may not support DNSSEC (.tk, some ccTLDs)
  • Domain may be locked or pending transfer
  • Try refreshing or clearing browser cache

Related Guides