# Enable DNSSEC ON CLOUDFLARE and GODADDY

View the book with "<i class="fa fa-book fa-fw"></i> Book Mode".

DNSSEC
---
DNSSEC creates a secure layer to the domain name system by adding cryptographic signatures to DNS records. By doing so, your request can check that signature to **verify that the record you need comes from the authoritative name server and was not altered along the way**.

STEP BY STEP
---
1. On GoDaddy console, change the NS record to cloudflare nameserver.
1.1. Select your domain name in the list to enter the "Domain Settings" page.
1.2. Scroll to "Other Settings" and click "Manage DNS". 
1.3. Click the "Add" button below the list of existing records . Under the "Type" drop-down menu, click "Name Server".
1.4. Complete the required fields.
1.5. Click "Save" to complete the process.

2. On Cloudflare Console, enable the DNSSEC and you will get the DS value like picture below:

3. On GoDaddy Console, input the above DS record:
3.1. Click on your domain to access the "Domain Settings" page.
3.2. Select " DNSSEC" under " Advanced Features " .
3.3. Click "Add" on the "DS Records" page.
3.4. Enter or select your settings
3.5. Click " Update" to save the changes.

**You need to wait up to 48 hours before the changes will take effect in all environments.**

Confirming DNSSEC
---
When DNSSEC has been successfully applied to your domain, you will see a confirmed status in the DNSSEC card where you first clicked “**Enable**”. You can also confirm by reviewing the WHOIS information for your domain. Domains with DNSSEC will read “**signedDelegation**” in the DNSSEC field.

Sources
---
- https://tw.godaddy.com/help/ns-19212
- [Cloudflare](https://developers.cloudflare.com/registrar/cloudflare-registrar/enabling-dnssec#:~:text=%E2%80%8BEnabling%20DNSSEC&text=To%20start%2C%20navigate%20to%20the,details%20specific%20to%20your%20site.)
- https://tw.godaddy.com/help/ds-23865

###### tags: `information`