To add a record, perform the following steps:
Click Manage next to the domain that you wish to modify.
Click the arrow next to Add Record to select a record type:
Add A Record — This record maps hostnames to IP addresses. A records allow DNS servers to identify and locate your website and its various services on the Internet. Without appropriate A records, your visitors cannot access your website, FTP site, or email accounts.
The system configures your DNS records so that visitors can resolve your website and its services, such as FTP and email. Only add A records when you add a service that cPanel & WHM or your service provider does not provide.
Add AAAA Record — This record maps hostnames to IPv6 addresses.
Add CAA Record — This record allows you to specify which certificate authority (CA) will issue an SSL certificate for a domain.
Add CNAME Record — This record creates an alias for another domain name, which DNS looks up. This is useful, for example, if you point multiple CNAME records to a single A record in order to simplify DNS maintenance.
You cannot point a CNAME record at an IP address.
Add DMARC Record — This record indicates the action for a mail server to take when it receives mail from this domain, but that message fails SPF and DKIM checks. If you select this option, the system creates a TXT record with a default DMARC record. The system also displays a form that allows you to specify the domain's DMARC policy (None, Quarantine, or Reject), as well as the following optional parameters:
Add MX Record — This record allows you to route a domain's incoming mail to a specific server. Changes that you make to a domain's MX (Mail Exchanger) control where the system delivers email for a domain.
Add SRV Record — This record provides information about available services on specific ports on your server.
Add TXT Record — This record contains text information for various services to read. For example, TXT records can specify data for the SPF, DKIM, or DMARC email authentication systems.
Click the links below to view examples of each TXT record:
The TXT record text box accepts invalid data and does not issue a warning.
|v=spf1 +a +mx +ip4:10.215.218.151 ~all|
v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14CK7pzW3Q4NHyJv/NIUG2vxuW8cDLnrQyjnpf0XQCHkFMnBdampzVG/T15U4P7W3YKImR6aF+QhM6WRZdXaOQqdkkkGc+VdYnH415ZikqSvfwSQ+n2fdIEVHvOkLyl/qSQkNhijtz48qb874keiYimo9Gsdg7mlhURImqPlL9zsGFcBpogmW00bnwmeiyeFbBY+d0QJRAelECpIbdWQfiCq1tUMm1pMGI5GHmnJVs3ToPvRoH2J4SQpOO91smkwaQPEEdLVXTMpLuKcvOOjotwzeVX5A4RBfuAaKjk7z0xdkTnsDivFJSqqNBLtT0v8cv6JjDgWZ8pYKBC65mdWxwIDAQAB;
Use cPanel's Authentication interface (cPanel >> Home >> Email >> Authentication) to manage SPF and DKIM records.
To edit a record, perform the following steps:
If this account owns more than one domain, click Manage next to the domain you want to modify.
To delete a record, perform the following steps:
Click Manage next to the domain you want to modify.
To reset your DNS zone files to the defaults that your hosting provider specifies, perform the following steps:
This feature only appears if your system administrator disables DNS clustering and installs PowerDNS in either of the following interfaces:
DNS Security Extensions (DNSSEC) add a layer of security to your domains' DNS records. DNSSEC uses digital signatures and cryptographic keys to authenticate DNS responses. These digital signatures protect clients from various forms of attack, such as Spoofing or a Man-in-the-Middle attack.
To enable DNSSEC for a domain, perform the following steps:
If this account owns more than one domain, click DNSSEC next to the domain you want to modify.
Click Enable. The system will generate a new DNSSEC key, and a new line will appear that contains the following information:
|Key Tag||An integer value that identifies the domain's DNSSEC record.|
|Algorithm||The record's encrypted signature.|
|Digest Type||The algorithm type that constructs the digest. Select the digest type that your registrar supports.|
|Digest||An alpha-numeric string that the algorithm generates.|
After you generate the domain's DNSSEC key, you must configure a Domain Server (DS) record with your domain registrar. Click the links below for DS record instructions with some of the most popular domain registrars.
To disable DNSSEC for a domain, perform the following steps:
After you disable DNSSEC, you must delete the DS record with your domain registrar. Click the links below for DS record instructions with some of the most popular domain registrars.