What's New

On iPhone and iPad, tapping a delete button (or any other action that asks for confirmation) could leave the button spinning forever without ever showing the confirmation prompt. This happened after navigating back to a page, and only a reload would fix it. The culprit was a Safari quirk that silently blocks the browser's built-in prompts after a back swipe. Confirmations now appear as a regular dialog on the page itself, which is immune to the quirk, and the button spinner no longer starts until you have confirmed. As a bonus, cancelling a confirmation no longer leaves a stuck spinner on any platform.

Entries in your personal activity feed (RSS) now use the same friendly event names as the dashboard, such as "DNS Synced", instead of raw internal event codes. Failed DNS syncs also no longer show technical error details in the feed or on the activity page.

You can now enable DNSSEC on any custom domain from its page. DNSSEC cryptographically signs your DNS answers so resolvers can verify they have not been tampered with in transit. Turning it on signs the zone on our side and shows you the DS record to add at your registrar to complete activation. To move or remove a signed domain safely, disable DNSSEC first — remove the DS at your registrar and wait for it to expire — so the domain never ends up signed with a broken chain of trust.

The email security wizard now has a "this domain's own mail server" option and keeps everything your SPF record already authorized. Before, picking a provider (e.g. Google or Hetzner) would overwrite the whole record and quietly drop the entry for a mail server you host yourself, which could start sending your outgoing mail to spam. The wizard now preserves those entries and pre-selects your own server when it sees one.

The domain page had grown crowded: records, email security, DNSSEC and the activity log all shared one long scroll. Each domain now has four focused tabs instead: Records (the default), Security for email security and DNSSEC, Activity for the change log, and Settings. A compact status strip at the top shows sync, email security and DNSSEC state on every tab, so nothing important is ever out of sight. The record list itself got a matching refresh: cleaner group headers you can operate from the keyboard, and calmer styling throughout.

Records that a domain inherits from a template used to show as a read-only "Inherited" row with nothing you could do to them. Your templates are yours too, so each inherited record now has an "Edit in template" button that takes you straight to it. Editing there updates every domain that uses the template.

After enabling DNSSEC, the DNSSEC panel now has a "Verify signing on all nameservers" button. It confirms every one of your nameservers is actually serving the signatures before you add the DS record at your registrar, so you never publish a DS while a nameserver is still catching up. We also keep an eye on signed domains automatically and alert us if one stops serving signatures.

When you add a dynamic DNS record, the IP field is now prefilled with the address you are connecting from, so the hostname resolves right away instead of pointing nowhere until your first update. You can still change or clear it if the client that keeps the record updated runs on a different machine.

If you added a record and removed it again before deploying (or a record was already provided by a template), a domain could get stuck showing "Changes Pending" while the deploy preview said there was nothing to deploy — with no way to clear it. The preview now offers a "Clear Pending Flag" action in that case, so the domain returns to a clean state.

Uptime monitoring is no longer limited to dynamic hosts: any A or AAAA record on a domain hosted with us can now be probed, alongside your free hostnames and DYNAMIC records.