Disabling DNSSEC
If you’re new to DNSSEC, see What Is DNSSEC? to understand what DNSSEC is. For a comprehensive overview of DNSSEC at DNSimple, see DNSSEC at DNSimple.
If your domain is registered with another registrar, you must remove the DS record from that registrar before you disable zone signing in DNSimple. If the DS record is not removed within 48 hours, your domain will experience DNSSEC validation failures and cease to resolve for DNSSEC-aware resolvers, making your domain unreachable. For step-by-step instructions on removing DS records, see Adding and Removing DS Records. To learn more about DS records, see What Are DS Records?.
- Select the correct account in the account switcher at the top right.
- From your Domain Names list, click the name of the domain you want to disable DNSSEC on.
- Click the DNSSEC tab on the left side.
- On the Disable DNSSEC card, click Disable DNSSEC.
- Enter the domain to verify, and click Disable DNSSEC again to remove the zone signing (and the DS record if it is present in DNSimple).
- When you click Disable DNSSEC for a domain that is registered with another domain registrar, you will see a reminder message to remove the DS record within 48 hours to prevent DNSSEC validation failures.
To learn how to disable DNSSEC with the API, check out our developer documentation.
Troubleshooting
If you encounter issues after disabling DNSSEC, see Troubleshooting DNSSEC Configurations for comprehensive guidance. For information about managing DS records when changing DNS providers, see Managing DS Records When Changing DNS.
Have more questions?
If you have any questions or need assistance disabling your DNSSEC, contact support, and we’ll be happy to help.