TL;DR: Nameservers are the servers that hold the authoritative answers for your domain's DNS — they're what the internet asks for your records. The confusing part is which service to log into to edit records: it's whoever runs your nameservers (your DNS host), which may or may not be your registrar or web host. Scan your domain free to see what your records currently say.
What a nameserver does
When someone looks up your domain, their resolver finds your NS (nameserver) records — for example
ns1.cloudflare.com — and asks those servers for your actual A, MX and TXT records. Whoever controls your
nameservers controls your DNS, so it's a high-value, security-critical setting.
Registrar vs DNS host vs web host
These three are often confused because they can be the same company — or three different ones:
| Role | What it does |
|---|---|
| Registrar | Where you bought the domain (e.g. your domain provider). |
| DNS host | Runs your nameservers and stores your records — this is where you edit DNS. |
| Web host | Runs the actual website/server your records point to. |
If you can't find where to add an SPF or DMARC record, you're probably logged into the wrong one — check which nameservers your domain uses, then edit DNS there.
How to find your nameservers
- Look up your domain's NS records (a lookup tool or free scan shows them).
- The hostnames tell you who your DNS host is (e.g.
*.cloudflare.com, your registrar, or your host). - Log into that provider to manage your records.
The security angle
Your registrar and DNS host accounts are prime targets — taking them over means hijacking your whole domain. Protect them with a strong password and 2FA, and turn on registrar lock. Consider DNSSEC to stop tampering with the answers your nameservers give.
FAQ
Where do I edit my DNS records?
At your DNS host — whoever runs the nameservers in your NS records — not necessarily where you bought the domain.
Should I change my nameservers?
Only if you're moving DNS providers. It's a big switch — update records at the new host first, then point the nameservers.
How long do nameserver changes take?
They can take longer than normal record changes — up to a day or two — because of registry-level caching.
Not sure where your DNS lives or whether it's set up safely? Scan your domain, then reply to your report — we're developers and we'll help you sort it.