Connect deSEC

The steps#

1. Create a free deSEC account. There is nothing to pay.
2. Open Token management and create a token. Name it LibrePortal and switch on "Can manage tokens", so the app can later make a smaller key. Leave the other settings as they are.
3. Paste the token into the app. It is shown only once, and the app keeps it in your vault.

DNSSEC#

deSEC signs your domain for you. The registrar only has to hold one fingerprint (a DS record) before DNSSEC turns on.

1. Open the domain in the app and find the DNSSEC card.
2. If your registrar is connected and takes it through its API, press Add it for me.
3. Otherwise copy the DS record, add it in your registrar's DNSSEC settings, and press Check now.

The Domains screen shows DNSSEC as On once public DNS carries the fingerprint, which can take a few minutes.

A key for one domain only#

The token you pasted can change every domain in your deSEC account. On a domain's page, A key for this domain only makes a second key that can change just that domain. The app keeps it in your vault and uses it from then on. Once every domain has its own key, you can Forget the account-wide key in the app; delete it on deSEC's token page as well, so it stops working everywhere.

deSEC's own help is in its token documentation.

Back to how domains work.