Skip to content

How to enable DNSSEC from your client area

DNSSEC (DNS Security Extensions) adds a digital signature to your domain’s DNS records. It lets other servers check that an answer really came from your DNS and hasn’t been tampered with, which protects visitors from being sent to fake versions of your site.

DNSSEC is available for .com and .ng domains (including .com.ng and the other .ng extensions) that use Ruachost’s nameservers, nsa.ruachost.com and nsb.ruachost.com.

  1. Log in to the client area.
  2. Go to Domains → Manage DNS.
  3. Click the edit (pencil) icon next to your domain.
  4. Click the three dots next to + Add Record and select DNSSEC.
  5. Click Enable DNSSEC, check the details, and click Confirm.

DNSSEC usually takes effect within a few hours.

Before you change nameservers or move the domain

Section titled “Before you change nameservers or move the domain”

DNSSEC is tied to the DNS provider that signs your records. If you plan to:

  • point the domain to other nameservers (for example, Cloudflare), or
  • transfer the domain to another registrar,

turn DNSSEC off first and wait 24–48 hours before making the change. Otherwise the old signatures won’t match the new DNS, and your website and email can stop working until DNSSEC is removed.

To turn it off, follow the same steps and choose Disable DNSSEC.