Domains · 2 min read
Turn Off DNSSEC Before Transferring a Domain
DNSSEC is a security layer that signs your DNS records so visitors can't be sent to a fake copy of your site. The signatures are tied to your current registrar, so a new registrar can't take over the domain while DNSSEC is on. Turning it off is a required step before you transfer a domain into FunnelStreams, and forgetting it is one of the most common reasons transfers fail.
Once your domain has transferred, FunnelStreams handles DNS security for you.
General steps
The exact menus differ by registrar, but the pattern is the same:
- Sign in to your registrar.
- Open the domain's DNS settings or domain settings.
- Find DNSSEC and turn it off.
- Save.
- Wait before you start the transfer.
Most registrars update within 15 to 30 minutes, but it can take up to 48 hours. If FunnelStreams still says DNSSEC is on, wait and check eligibility again.
GoDaddy
- Sign in to your GoDaddy Domain Portfolio.
- Select the domain to open its Domain Settings.
- Select DNS, then DNSSEC.
- Turn DNSSEC off and confirm.
Namecheap
- Sign in to Namecheap and go to Domain List.
- Click Manage next to the domain.
- Open the Advanced DNS tab and scroll to DNSSEC.
- Turn DNSSEC off, or remove any DS records listed there.
- Save.
Cloudflare
These steps are for domains registered with Cloudflare, not just using Cloudflare for DNS.
- Sign in to the Cloudflare dashboard.
- Go to Manage Domains.
- Find the domain and click Manage.
- Select Configuration, then Disable DNSSEC, and confirm.
Cloudflare can take 24 to 48 hours to pass the change to the registry.
Squarespace
Squarespace turns DNSSEC on automatically for domains that support it.
- Open your Squarespace Domains dashboard.
- Click the domain.
- Click DNS, then DNSSEC.
- Switch off DNS Security Extensions.
- Click Confirm.
If you don't see the toggle, DNSSEC may already be off, for example if you switched to custom nameservers. You can go ahead with the transfer.
FAQs
Will turning off DNSSEC take my site or email down? No. It only removes the extra signature layer. Your website and email keep working.
My registrar isn't listed. What do I do? Look for a DNSSEC section in the domain's DNS or domain settings. If you can't find it, ask your registrar's support to turn it off.
Do I need to turn DNSSEC back on after the transfer? No. FunnelStreams takes care of DNS security once the transfer is done.
I turned off DNSSEC but the transfer still fails. Make sure the domain is unlocked and your authorization code is current. See "Transfer a Domain Into FunnelStreams" for the full checklist.