# How to enable DNSSEC from your client area

> Protect your .com or .ng domain from DNS spoofing by turning on DNSSEC in the Ruachost DNS Manager.

Source: https://helpcenter.ruachost.com/domains/dns/how-to-enable-dnssec-from-your-client-area/

**DNSSEC** (DNS Security Extensions) adds a digital signature to your domain's DNS records. It lets other servers check that an answer really came from your DNS and hasn't been tampered with, which protects visitors from being sent to fake versions of your site.

DNSSEC is available for `.com` and `.ng` domains (including `.com.ng` and the other `.ng` extensions) that use Ruachost's nameservers, `nsa.ruachost.com` and `nsb.ruachost.com`.

## Turn on DNSSEC

1. Log in to the [client area](https://dashboard.ruachost.com).
2. Go to **Domains → Manage DNS**.
3. Click the **edit (pencil) icon** next to your domain.
4. Click the **three dots** next to **+ Add Record** and select **DNSSEC**.
5. Click **Enable DNSSEC**, check the details, and click **Confirm**.

DNSSEC usually takes effect within a few hours.

## Before you change nameservers or move the domain

DNSSEC is tied to the DNS provider that signs your records. If you plan to:

- **point the domain to other nameservers** (for example, Cloudflare), or
- **transfer the domain** to another registrar,

**turn DNSSEC off first** and wait 24–48 hours before making the change. Otherwise the old signatures won't match the new DNS, and your website and email can stop working until DNSSEC is removed.

To turn it off, follow the same steps and choose **Disable DNSSEC**.

## Related articles

- [Using the DNS Manager in your client area](https://helpcenter.ruachost.com/domains/dns/using-dns-manager-to-manage-your-domain/)
- [What is Premium DNS?](https://helpcenter.ruachost.com/domains/dns/what-is-premium-dns/)