Protect Your Squarespace Domain with DNSSEC
TL;DR:
- DNSSEC turns on automatically for Squarespace domains that support it
- It blocks DNS spoofing and other attacks targeting your domain
- You can turn DNSSEC on or off through your domains dashboard
- Third-party DNSSEC protection can be added if you need it
- Most DNSSEC problems can be fixed by toggling it off and back on
What DNSSEC Does for Your Squarespace Site
DNSSEC (Domain Name System Security Extensions) stops attackers from hijacking your domain's DNS records. Without it, someone could redirect your visitors to fake websites or intercept their data.
When visitors type your domain name, DNSSEC makes sure they actually reach your site, not a malicious copy. It works by adding cryptographic signatures to your DNS records.
Squarespace enables DNSSEC automatically if your domain extension supports it. Most common extensions like .com, .org, and .net work with DNSSEC.
Managing DNSSEC in Your Dashboard
You can control DNSSEC settings through your Squarespace domains dashboard.
Turning DNSSEC Off
Go to your domain's DNS settings, find the DNSSEC section, and toggle off DNS Security Extensions. You might need to do this if you're using custom nameservers or switching DNS providers.
If you can't see the toggle, your domain extension might not support DNSSEC, or there could be a configuration issue.
When you disable DNSSEC, Squarespace removes it from both your domain and the domain registry. This can take up to 48 hours to fully propagate.
Turning DNSSEC Back On
Just reverse the process. If you switch back to Squarespace's default nameservers after using custom ones, you'll get prompted to re-enable DNSSEC.
Adding Third-Party DNSSEC
If you want to use external DNSSEC protection instead of Squarespace's built-in option:
- Buy DNSSEC from a provider like Cloudflare
- Go to your domain's DNSSEC section in Squarespace
- Select 'Add record'
- Enter the DNSSEC data your provider gave you
You can only add one DNSSEC record per domain. Make sure your provider's DNSSEC is compatible with your domain extension before you start.
Common DNSSEC Problems
"Records are incompatible with DNSSEC" error: Turn off DNSSEC, add your DNS record, then turn DNSSEC back on.
DNSSEC toggle missing: Your domain extension might not support DNSSEC, or you might be using custom nameservers.
Site not loading after enabling DNSSEC: Give it 24-48 hours for DNS changes to spread globally. If problems persist, try disabling and re-enabling DNSSEC.
FAQs
How do I change DNSSEC settings in Squarespace?
Go to your domains dashboard, select your domain, then DNS settings. You'll find the DNSSEC toggle under DNS Security Extensions.
What should I do if I get a 'Records are incompatible with DNSSEC' error?
Turn off DNSSEC, add your DNS record, then turn DNSSEC back on. This usually fixes the compatibility issue.
Can I use third-party DNSSEC with my Squarespace domain?
Yes. Buy DNSSEC from your preferred provider and add their details through your domains dashboard in the DNSSEC section.
Jargon Buster
DNSSEC: Security system that uses digital signatures to verify DNS records haven't been tampered with.
DS Records: Delegation Signer records that help maintain the chain of trust in DNSSEC.
DNSKEY Records: Public cryptographic keys used in DNSSEC to verify digital signatures.
Nameservers: Servers that translate domain names into IP addresses so browsers can find websites.
TLD: Top-Level Domain, the ending part of a domain name like .com or .org.
Wrap-up
DNSSEC protection is mostly hands-off with Squarespace since it enables automatically for supported domains. The main thing to remember is that you can control it through your domains dashboard if you need to make changes.
Most DNSSEC issues resolve themselves within 48 hours, but if you're stuck, try toggling it off and back on. This resets the configuration and often fixes compatibility problems.
Ready to dive deeper into Squarespace domain management? Join Pixelhaze Academy for step-by-step tutorials and expert guidance.