On this page

Fixing DNSSEC in GoDaddy

What this fixes

DNSSEC signs your DNS records so resolvers can verify they haven't been tampered with, protecting against DNS spoofing. See Enabling DNSSEC for Your Domain for what it does and why it matters — this guide covers the GoDaddy-specific steps.

This assumes GoDaddy is managing your DNS (not just registration with DNS hosted elsewhere).

How to fix it

  1. Go to your Domain Portfolio → select your domain → Domain Settings → DNS tab.
  2. Find the DNSSEC section.
  3. Click Turn On DNSSEC.
  4. GoDaddy generates the DS record automatically if it's also your DNS host. If your DNS is hosted elsewhere (e.g. Cloudflare) but GoDaddy is your registrar, add the DS record generated by your DNS host here instead.
  5. Save, and allow time for propagation before re-scanning.

Common pitfalls

  • DNSSEC not available for your specific TLD — some country-code registries don't support it through GoDaddy. This is a GoDaddy/registry limitation, not something you can force through the UI. Check with GoDaddy support to confirm before assuming it's misconfigured.
  • Forgetting propagation delay — GoDaddy changes can take longer to propagate than other providers; wait at least a few hours before re-scanning.