To view the name servers for your domain, do the following:
- Click My domains in the navbar and click the domain name.
- Click the DNS tab .
- Scroll down to Name servers section to see a list of the name servers for your domain.
To switch to custom name servers, do the following:
You must use at least two name servers. Google recommends that you use at least four. Check with your DNS provider for the number and names of name servers available to you.
- Under Name servers select Use custom name servers.
- Enter a custom name server in the Name server field.
- Click the + button to add another.
- Click Save to save your name server.
- Set up new resource records with your DNS provider. (The Google Domains resource records only work with the Google Domains name servers.)
Restore Google Domains name servers
To restore the default Google Domains name servers:
- Click the Restore default name servers button.
Note: When you switch to custom name servers, a warning message will appear at the top of the page. You can also click the Restore defaults button in the warning message to restore the Google Domains name servers.
More help ...Setting Up DNSSEC security for your domain
Domain Name System Security Extensions (DNSSEC) protect your domain from attacks such as DNS cache poison attacks and DNS spoofing.
Using DNSSEC with custom name servers
If you have used a third-party DNS provider to configure DNSSEC for your domain, you will also need to activate DNSSEC on Google Domains. After you set up DNSSEC with your DNS provider, your configuration will include one or more DNSKEY records for each domain or subdomain you wish to secure. For each DNSKEY record, you need to create at least one DS record in Google Domains in order to complete your DNSSEC setup.
Obtain the following values from your DNS provider and enter them:
- Key tag - A short tag that refers to an existing DNSKEY record. A numeric value between 0 and 65535.
- Algorithm - The encryption algorithm that created the security key in the DNSKEY record. Usually paired with a hash function, as in RSA/SHA1.
- Digest type - The algorithm used to create the digest of DNSKEY record. Also called “digest algorithm,” “digest hash,” or “digest hash function".
- Digest - A hashed value of the DNSKEY record that uniquely identifies it without exposing the value of the key. Depending on the digest type, the length is:
- SHA1 - 40 hexadecimal digits
- SHA256 - 64 hexadecimal digits
- SHA384 - 96 hexadecimal digits
Name servers identify the location of your domain on the Internet. Google Domains automatically assigns 4 name servers to your domain. Alternatively, you can add up to 12 custom name servers. Do not mix the name servers; use either the Google Domains name servers or the custom name servers.Using Google Domains name servers
If you use the Google Domains name servers, you don’t need to "do" anything. Google Domains will manage the name servers and the NS resource records for you. When you use the Google Domains name servers you can add up to 100 resource records to your domain (see Resource records for more information).Using custom name servers
If you use custom name servers, these servers will be managed by your DNS provider (not Google Domains). If you want to create resource records, do so with your DNS provider. The Google Domains resource records will not work with custom name servers.
Note: If you use name servers from another Google product (not Google Domains), like Google Cloud DNS, select custom name servers in Google Domains.
Please note the following about NS resource records:
- NS resource records that identify your root domain (@ or example.com) — You don't create these records and these records are not displayed under the Custom resource records section on the DNS tab. Instead, these records are managed for you, either by Google Domains if you are using the Google Domains name servers, or by your DNS provider if you are using custom name servers. Only the name server identifier (ns-zdns-dev-1.prod.google.com) is displayed under the Name servers section on the DNS tab. You can change the identifier (switch from Google Domains name servers to custom name servers) but you cannot change the NS records themselves.
- NS resource records that identify your subdomains (info.example.com, support.example.com) — You create these records by selecting NS type under the Custom resource records section on the DNS tab.