To view the nameservers for your domain, do the following:
- Click My domains in the navbar and click the domain name.
- Click the DNS tab .
- Scroll down to Nameservers section to see a list of the nameservers for your domain.
To switch to custom nameservers, do the following:
You must use at least two nameservers. Google recommends that you use at least four. Check with your DNS provider for the number and names of nameservers available to you.
- Under Nameservers select Use custom nameservers.
- Enter a custom nameserver in the Nameserver field.
- Click the + button to add another.
- Click Save to save your nameserver.
- Set up new resource records with your DNS provider. (The Google Domains resource records only work with the Google Domains nameservers.)
Restore Google Domains nameservers
To restore the default Google Domains nameservers:
- Click the Restore default nameservers button.
Note: When you switch to custom nameservers, a warning message will appear at the top of the page. You can also click the Restore defaults button in the warning message to restore the Google Domains nameservers.
More help...Setting Up DNSSEC security for your domain
Domain Name System Security Extensions (DNSSEC) protect your domain from attacks such as DNS cache poison attacks and DNS spoofing.
Using DNSSEC with custom nameservers
If you have used a third-party DNS provider to configure DNSSEC for your domain, you will also need to activate DNSSEC on Google Domains. After you set up DNSSEC with your DNS provider, your configuration will include one or more DNSKEY records for each domain or subdomain you wish to secure. For each DNSKEY record, you need to create at least one DS record in Google Domains in order to complete your DNSSEC setup.
Obtain the following values from your DNS provider and enter them:
- Key tag - A short tag that refers to an existing DNSKEY record. A numerical value between 0 and 65535.
- Algorithm - The encryption algorithm that created the security key in the DNSKEY record. Usually paired with a hash function, as in RSA/SHA1.
- Digest type - The algorithm used to create the digest of DNSKEY record. Also called “digest algorithm”, “digest hash” or “digest hash function".
- Digest - A hashed value of the DNSKEY record that uniquely identifies it without exposing the value of the key. Depending on the digest type, the length is:
- SHA1 - 40 hexadecimal digits
- SHA256 - 64 hexadecimal digits
- SHA384 - 96 hexadecimal digits
Name servers identify the location of your domain on the Internet. Google Domains automatically assigns 4 nameservers to your domain. Alternatively, you can add up to 12 custom nameservers. Do not mix the nameservers; use either the Google Domains nameservers or the custom nameservers.Using Google Domains nameservers
If you use the Google Domains nameservers, you don’t need to "do" anything. Google Domains will manage the nameservers and the NS resource records for you. When you use the Google Domains nameservers you can add up to 100 resource records to your domain (see Resource records for more information).Using custom nameservers
If you use custom nameservers, these servers will be managed by your DNS provider (not Google Domains). If you want to create resource records, do so with your DNS provider. The Google Domains resource records will not work with custom nameservers.
Note: If you use nameservers from another Google product (not Google Domains), like Google Cloud DNS, select custom nameservers in Google Domains.
Please note the following about NS resource records:
- NS resource records that identify your root domain (@ or example.com) – you don't create these records and these records are not displayed under the Custom resource records section on the DNS tab. Instead, these records are managed for you, either by Google Domains if you are using the Google Domains nameservers or by your DNS provider if you are using custom nameservers. Only the nameserver identifier (ns-zdns-dev-1.prod.google.com) is displayed under the Nameservers section on the DNS tab. You can change the identifier (switch from Google Domains nameservers to custom nameservers) but you cannot change the NS records themselves.
- NS resource records that identify your subdomains (info.example.com, support.example.com) – you create these records by selecting NS type under the Custom resource records section on the DNS tab.