Choose a plan

DNS zone editor: A, CNAME, MX and TXT

When and how to edit your domain's DNS in Enhance, under DNS records: subdomains for other services, email at Google or Microsoft, verifications.

  • Updated
guide · domains and dns
Steps
20
Reading time
7min
Sections
8
Start the guide

The DNS zone is the list that tells the internet where each part of your domain goes: the website, email, subdomains. Enhance fills it in automatically when the website is created, so most of the time you don't need to touch it. If you are just getting a domain, extensions and prices are on the .ro and .com domains page.

When you need it

  • you connect an external service: a store on another platform, a booking app, a page built elsewhere;
  • you move your email to Google Workspace or Microsoft 365;
  • a service asks you to “verify your domain” with a TXT record (Google, Facebook, Microsoft and others);
  • you add a subdomain hosted on another server.

The editor only matters if your domain uses our nameservers (ns1.nbt-host.ro and ns2.nbt-host.ro). If your DNS is at Cloudflare or at your registrar, changes made in Enhance have no effect: make them there. See How to point your domain to NBT Host.

What you'll get

The records you need, added or corrected directly from Enhance, without waiting for us.

Before you start

  • Log in to Enhance: https://server.nbt-host.com, with the email address and password from your welcome message.
  • Keep the exact values given by the external service at hand. Copy and paste them; don't retype them.
  • The Enhance names below are in English, exactly as they appear on screen. If the panel opens in another language (it follows your browser language), switch it to English from the account menu, top right: “My account” » “Language”.

Record types at a glance

TypeWhat it doesExample
Apoints a name to an IP addressshop → 203.0.113.10
CNAMEpoints a name to another nameprogramari → nume.serviciu-extern.com.
MXtells where the domain's email is delivered@ → 0 mail.domeniul-tau.ro. (as Enhance sets it)
TXTtext read by other services: SPF, DKIM, DMARC, verificationsv=spf1 a mx ~all

The editor also has other types (AAAA, SRV, NS, CAA, DS and more), but you will rarely need them.

Two rules of the Enhance editor:

  • Write the name in short form. In “Hostname” you only write the front part (shop, not shop.domeniul-tau.ro). For the domain itself, write @.
  • Names outside your domain get a trailing dot. When a CNAME or an MX points to another domain, write the value with a dot at the end: nume.serviciu-extern.com.. Without it, the name is read as being inside your domain, and Enhance shows the warning “This record looks like a fully qualified (external) domain. You probably want to add a . to the end.”

Steps

Open the DNS records

  1. In Enhance, open “Websites” from the left-hand menu and click the site.
  2. In the website's top bar, click “Domains”. On a narrower screen, the buttons that don't fit are in the “Advanced” menu in the same bar.
  3. Click the domain (or “⋯” on its row » “Manage”).
  4. Scroll down to the “DNS records” section (you can also find it in the menu on the left of the page). You will see the table with the columns “TYPE”, “HOST”, “VALUE” and “TTL”.

A subdomain doesn't have its own section: the records for blog.domeniul-tau.ro are in the zone of domeniul-tau.ro, on the rows named blog.

Add a record

  1. Click “Add record”.
  2. In “Type”, choose the type (A, CNAME, MX, TXT…).
  3. In “Hostname”, write the name: for example shop, _dmarc or @ for the main domain.
  4. Fill in the value. The field changes depending on the type:
    • for A: “IPv4 address”;
    • for CNAME: “Is an alias of” — the name you point to, with a trailing dot;
    • for MX: “Priority” (the lower number takes priority) and “Target domain” (the mail server, with a trailing dot);
    • for TXT: “Value” — paste the text without quotation marks.
  5. In “TTL”, leave “Use zone default” checked.
  6. Click “Create”. Enhance confirms that the record has been added (“record added”).

Edit or delete a record

  1. Find the row: type the name or the value in the search field above the table, or sort by “TYPE” or “HOST”.
  2. Click “⋯” at the end of the row » “Edit”, change the value and click “Save”.
  3. To delete it, choose “Delete” from the same menu and confirm with “Delete”.

Common examples

Email at Google Workspace or Microsoft 365

  1. On the domain page, under “Mail routing settings”, choose “Remote mail”. It is saved instantly (“Mail routing settings updated”). Without this step, messages sent to your domain from the website or from other addresses in the account stay on our server.
  2. Under “DNS records”, delete the existing MX (@ → 0 mail.domeniul-tau.ro.) and add the MX records given by Google or Microsoft, exactly as they appear in their guide, with a trailing dot. For Google you can also use the Gmail button in “Auto configuration”, below the table: after you confirm with “Add records”, put the Google MX records (the version with ASPMX.L.GOOGLE.COM) in place of the existing ones.
  3. Update the SPF record (see below) with the part they require.

A single SPF. A domain may have only one TXT record that starts with v=spf1. Enhance sets v=spf1 a mx ~all. If a service asks you to “add SPF”, don't create a new one: put its part (usually include:…) into the existing one, before ~all. For example:

v=spf1 a mx include:domeniul-dat-de-serviciu ~all

Domain verification. Add the TXT record exactly as the service gives it to you, on the name it specifies (usually @, meaning the main domain). Paste the value without quotation marks.

Good to know

  • TTL. Records use the zone TTL, shown next to “Use zone default”: with us, 1400 seconds, which is about 23 minutes. The change is active immediately on our servers, but some visitors may only see it after the old value expires from their network's cache.
  • Don't delete what you don't recognize: the NS records and those for mail, smtp, imap, pop, ftp, mysql, hostingcp._domainkey (DKIM) and _dmarc. Enhance added them, and your email and SSL certificate depend on them. The “Advanced records” toggle shows the zone's SOA record; don't change anything there.
  • “DNSSEC” — the section at the end of the domain page. Don't turn it on unless you know why you need it. Once it is on, Enhance shows you the DS record (“DS record:”), which must be added at your registrar. If you ever move the domain, turn DNSSEC off at the registrar first and only then in Enhance; otherwise the domain stops responding.

If something doesn't work

  • The change doesn't show. First check that the domain uses our nameservers (Google Admin Toolbox – Dig, type NS). If it does, wait at most the TTL (about 23 minutes by default) and check again.
  • A CNAME or an MX points to the wrong place. Most often the trailing dot is missing, and the name has become nume.serviciu-extern.com.domeniul-tau.ro. Open the record with “Edit”, add the dot and save.
  • Enhance doesn't save the record (an error message with the reason, for example “'CNAME' record failed to add: …”; in “English (UK)” it says “failed to update”, even when adding). For a CNAME: the name already has another record, or it is @ itself. A name with a CNAME can't have any other record, and a CNAME can't be set on the main domain. Delete the overlapping record or use an A record instead of a CNAME.
  • Email stopped working after you changed the MX. Compare the values with those given by your provider and check “Mail routing settings” and the SPF record. If your email should stay with us, the MX must be 0 mail.domeniul-tau.ro., and “Mail routing settings” must be set to “Local mail”.
  • Google, Facebook or Microsoft verification fails. Usually the TXT record is on a different name than the one required, has quotation marks or extra spaces, or was cut off when copied. Correct it and wait a few minutes before trying again.
  • You deleted something by mistake. Write to us as soon as possible and we will restore the zone.
Support

Stuck? We'll do it together.

Tell us which step isn't working and, if you can, send a screenshot. We reply during business hours.

Phone and WhatsApp+40 775 396 021
HoursMonday–Friday, 9:00–18:00 Romanian time (EET/EEST)

Never send us your password on WhatsApp or by email. What information helps us solve it on the first try: how to ask for help.