DNS tells the internet where your website and e-mail are. When your domain uses our name servers, you edit its records on the DNS page. See Move your domain to us if it does not yet.
What is already there
New domains get the records they need automatically:
| Name | Type | Used for |
|---|---|---|
@ |
A / AAAA | The website |
www, ftp |
CNAME | The same as the domain |
@ |
MX | Where e-mail is delivered |
@ |
TXT v=spf1 … |
SPF: servers allowed to send mail for the domain |
_dmarc |
TXT | DMARC: what to do with mail that fails the checks |
mail, webmail, autodiscover, autoconfig |
CNAME / SRV | Mail and webmail, and automatic setup of mail programs |
@ |
CAA | Only Let's Encrypt may issue certificates |
Leave these as they are unless you know you need to change them.
Add or change a record
- Choose the domain on the DNS page.
- Under Add or change a record, fill in:
- Name: the part before the domain.
@is the domain itself;shopmeansshop.example.dk. - Type: for example A, CNAME, MX or TXT.
- Value: one value per line. Several lines make several records with the same name and type.
- TTL: how many seconds other servers may remember the answer. 3600 (one hour) is fine for most records.
- Name: the part before the domain.
- Choose Save record.
To change an existing record, choose Edit next to it; to remove it, choose Delete. Changes are live on our name servers at once, but servers that remember the old value keep it until the TTL runs out.
Examples
Microsoft 365 or Google Workspace verification: add a TXT record on @ with the value they give you.
A subdomain pointing elsewhere, for example a shop system:
| Name | Type | Value |
|---|---|---|
shop |
CNAME | shops.example-provider.com. |
A different mail service: replace the MX record on @ with the values from that service, and add it to SPF. Mailboxes here then no longer receive mail.
Values that are domain names should end with a dot (example.com.), otherwise the domain is added after them.
DNSSEC
DNSSEC signs your DNS answers so nobody can forge them.
- Choose Switch on DNSSEC.
- The page shows one or more DS records. Give them to your registrar (often under "DNSSEC" in the domain settings).
- When the registrar has them, the domain is protected.
To switch DNSSEC off, first remove the DS record at your registrar, wait a day, and then choose Switch off. If you switch it off here first, the domain stops working.
The name server records (NS) of the zone cannot be changed here; they are managed by us.