Does DigitalOcean support DNSSEC?

We do not support DNSSEC. This means we do not provide an option to configure DS records in our DNS service. However, if you have already added your domain to our platform, then you need to disable DNSSEC at your domain registrar in order for the domain to receive DNS requests.

If you require DNSSEC functionality on your domain, we recommend switching to a different DNS provider for DNS management. With this approach, you can continue to manage your Droplets and other services through the DigitalOcean Control Panel while entrusting your domain management elsewhere. We recommend Cloudflare as they support DNSSEC.

Related Topics

Why aren't my vanity DNS name servers resolving?

If you use vanity or branded DNS nameservers that delegate to DigitalOcean’s nameservers, you must update to new IP addresses.

How do I fix the DNS error "Primary Name Server Not Listed at Parent"?

Update your registrar to use DigitalOcean’s name servers.

How do I add an A record to my app on App Platform?

Apps do not have static IP addresses so you cannot point an A record at an app.