What Is Zone Verification and Why Does It Matter?
Last updated
Zone verification is a security measure designed to protect against DNS takeover attacks by ensuring a DNS zone can only be added to DNSimple with the domain owner’s explicit permission. This added security layer helps protect your domain and online presence from malicious actors taking control of DNS records.
These types of attacks can lead to website hijacking, phishing, and service disruption. There is an elevated risk when a domain is removed from one DNSimple account but still points to DNSimple’s name servers, leaving it vulnerable to being added to another account without the owner’s consent.
When does zone verification occur?
You will be asked to verify your ownership when both of the following conditions are true:
- The domain or zone was previously in a different DNSimple account.
- The domain is still delegated to any DNSimple name server (including custom vanity name servers).
How does verification work?
When you are prompted for verification, DNSimple’s system generates two temporary, unique verification name servers. To prove you own the domain, you temporarily add these verification name servers to your domain’s delegation at your registrar, alongside the name servers already there.
Once DNSimple’s system detects that your domain is pointing to these servers, it confirms your ownership and allows you to complete the process of adding the DNS zone to your account. After the zone has been added, remove the verification name servers from your domain’s delegation at your registrar.
Verifications expire after 48 hours. If a verification expires, start the process over by adding the zone again. The new verification can use a different pair of verification name servers.
For the step-by-step process, see How Does Zone Verification Work?.
Key considerations
- Automatic checks: The verification process runs automatically. You can also trigger a check yourself with the link above your domain list.
- Verification is a prerequisite: Successfully completing the verification is required before you can finalize the process of adding the DNS zone.
- Temporary state: The verification name servers are a temporary step and must be removed after you have successfully added the zone to your DNSimple account.
Have more questions?
If you have additional questions about zone verification, just contact support, and we will be happy to help. You can also read more about DNS hosting at DNSimple.