Knowledge Base
How to Add and Edit DNS Records in cPanel Zone Editor
TL;DR
Key Takeaways
- cPanel Zone Editor controls authoritative DNS records for domains using Pakish nameservers.
- Add and edit A, CNAME, MX, and TXT records for website routing, email, and authentication.
- Lower TTL before changes and allow time for DNS propagation worldwide.
Summarized by Pakish Group (Pakish.NET) for AI and search citation.
cPanel Zone Editor lets you manage authoritative DNS records for domains that use Pakish nameservers. Open Domains → Zone Editor → Manage, then add or edit A, CNAME, MX, and TXT records for website routing, email delivery, and authentication (SPF, DKIM, DMARC). Always note existing values before changes and allow time for (/blog/dns-propagation-tips-tricks).
New to cPanel? Start with the beginner's guide. Registering domains? See (/blog/register-transfer-domain-to-pakish).
Key Takeaways
- Zone Editor controls DNS only when Pakish nameservers are authoritative
- A = IPv4 address; CNAME = alias to another hostname
- MX routes email; TXT holds SPF, DKIM, DMARC, and verification tokens
- One SPF TXT record per domain — never duplicate
- Lower TTL 24–48 hours before planned changes
- Screenshot records before editing for rollback
Before You Start
| Requirement | Details | |---|---| | Nameservers | Domain must use Pakish NS (check at registrar) | | Current records | Screenshot or export existing zone | | TTL plan | Lower TTL before major migrations |
Create or confirm a usable backup first. Availability and limits may vary by hosting plan or server configuration.
What Zone Editor Controls
Zone Editor manages the DNS zone file for each domain on your account. It answers questions like:
- Which server hosts
example.com? (A / AAAA) - Where does email go? (MX)
- What SPF/DKIM/DMARC policies apply? (TXT)
- Which CA may issue SSL certs? (CAA)
If DNS is managed at Cloudflare, GoDaddy, or another provider, edit records there — not in cPanel Zone Editor.
Record Types Reference
| Type | Purpose | Example |
|---|---|---|
| A | IPv4 address for hostname | example.com → 192.0.2.1 |
| AAAA | IPv6 address | example.com → IPv6 |
| CNAME | Alias to another name | www → example.com |
| MX | Mail server priority + host | 10 mail.example.com |
| TXT | SPF, DKIM, DMARC, verification | v=spf1 ... |
| CAA | Certificate authority restriction | 0 issue "letsencrypt.org" |
TTL (Time To Live)
TTL is seconds DNS resolvers cache a record. Use 300 (5 min) before planned changes; 3600 (1 hour) for stable records.
Add, Edit, and Delete Records
- cPanel → Domains → Zone Editor
- Click Manage next to
example.com - To add: click Add Record, choose type, fill fields, Save
- To edit: click Edit on the row, change values, Save
- To delete: click Delete, confirm only when you understand the impact
Apex vs subdomain
- Apex (
example.com): often@or blank name field — use A record - Subdomain (
blog.example.com): A or CNAME depending on target
Avoid CNAME at apex if your zone requires A/ALIAS per provider rules.
SPF, DKIM, and DMARC
| Record | Purpose | |---|---| | SPF (TXT) | Lists servers allowed to send mail for your domain | | DKIM (TXT) | Cryptographic signature for outbound mail | | DMARC (TXT) | Policy for failed SPF/DKIM alignment |
Use Email Deliverability in cPanel to view recommended values for your domain — do not copy generic SPF/DKIM strings from other domains. For deliverability troubleshooting, see (/blog/fix-email-going-to-spam-cpanel).
Common Record Conflicts
| Conflict | Problem | Fix | |---|---|---| | Duplicate SPF TXT | Email fails SPF checks | Merge into one TXT record | | CNAME + other records on same name | Invalid DNS | Remove conflict; use A record | | Wrong MX priority | Mail routes incorrectly | Set lowest number = highest priority | | A and CNAME on www | Unpredictable resolution | Pick one approach |
Avoiding Email Downtime
- Before changing MX records, note current values
- Add new MX before removing old MX when migrating
- Lower TTL 24–48 hours ahead
- Test with
dig MX example.comor an online DNS checker
Propagation Expectations
After saving Zone Editor changes, resolvers worldwide update on their own schedule. Many users see changes within minutes; full global propagation may take longer depending on TTL and ISP caching. Read (/blog/dns-propagation-tips-tricks) — do not expect instant worldwide updates.
Rollback Procedure
- Re-enter the previous record values from your screenshot
- Save and wait for propagation
- If email broke, restore MX records first
- Contact support if the zone file was corrupted
How to Verify It Worked
- DNS checker shows new A/MX/TXT values from multiple global locations
- Website resolves to correct IP
- Email send/receive works after MX changes
- (/blog/fix-ssl-certificate-errors-cpanel) succeeds if A records point correctly
Common Problems and Fixes
| Problem | Fix | |---|---| | Changes not visible | Wait for propagation; flush local DNS cache | | Site points to wrong server | Correct A record; remove stale CNAME | | Email stopped | Restore MX; verify SPF not duplicated | | SSL validation fails | Confirm A record; check CAA records |
When to Contact Pakish Support
Contact support for DNSSEC setup, custom nameserver glue, zone corruption, or when your domain uses external DNS but you need record guidance. Visit (/domains) or (/support).
Frequently Asked Questions
What is the difference between an A record and a CNAME record?
An A record points a hostname to an IPv4 address. A CNAME record aliases one hostname to another hostname. Use A for apex domains and CNAME for subdomains pointing to another name, not directly to an IP.
Can I have multiple SPF TXT records for one domain?
No. A domain should have only one SPF TXT record. Merge multiple include mechanisms into a single SPF record to avoid deliverability failures.
How long does DNS propagation take after Zone Editor changes?
Propagation depends on TTL values and global DNS caches. Changes often appear within minutes to a few hours but can take up to 48 hours worldwide. See our (/blog/dns-propagation-tips-tricks) for acceleration tips.
Should I edit DNS in Zone Editor or at my domain registrar?
Edit Zone Editor only when your domain uses Pakish authoritative nameservers. If DNS is managed externally, copy records to that provider instead.
What happens if I delete the wrong MX record?
Email delivery stops for your domain until MX records are restored. Always note existing values before editing and keep a screenshot for rollback.
Related Guides
- (/blog/cpanel-wordpress-webmail-beginners-guide)
- (/blog/dns-propagation-tips-tricks)
- (/blog/register-transfer-domain-to-pakish)
- (/blog/fix-ssl-certificate-errors-cpanel)
- (/blog/fix-email-going-to-spam-cpanel)
Need advanced DNS? Explore (/dnspro-managment) or (/domains) with Pakish.
Sources
- (https://docs.cpanel.net/cpanel/domains/zone-editor/)
- (https://docs.cpanel.net/knowledge-base/dns/)
About the Author
Pakish Support Team
The Pakish Support Team provides 24/7 technical assistance, hosting tutorials, and knowledge base articles to help Pakistani businesses manage their web presence with confidence.