Move an existing domain’s DNS to Cloudflare

This changes the service that manages your DNS. Your domain registration, hosting and email subscriptions can stay with their current providers. You’ll need access to the registrar, the current DNS provider and your Cloudflare account.

1. Back up the existing DNS records

Export all records from your current DNS provider if possible, ideally as a BIND zone file. Otherwise, save the full record list, including priorities. Keep the existing nameserver values too. The DNS provider may differ from the company where you registered the domain.

2. Add the domain and import the records

In Cloudflare, choose Domains → Onboard a domain, enter the domain and select the Free plan for this setup. It can remain pending while you prepare the records.

Under DNS → Records → Import and Export, import the zone file if you have one. Leave Proxy imported DNS records unchecked, then compare the full list with the old provider. The automatic scan can miss records.

Check these in particular:

  • Website and subdomain records, such as A, AAAA and CNAME.
  • Email records: MX, SPF, DKIM and DMARC, plus mail-server addresses.
  • Verification records and any other services using the domain.

Keep existing records DNS-only during the move, including scanned or imported ones. Don’t copy the old provider’s apex nameserver records as Cloudflare’s authoritative nameservers. Keep any deliberate subdomain delegations.

3. Check DNSSEC and change nameservers

If DNSSEC is active, disable it at the registrar and wait until the old DS record has been removed before proceeding. Follow Cloudflare’s DNSSEC migration instructions.

Replace the nameservers at your registrar with the exact two assigned by Cloudflare. Leave the current hosting and email services running.

For provider-specific buttons, ask an AI assistant:

How do I export DNS records from [DNS provider] and change nameservers at [registrar] to Cloudflare? Use current official instructions, include DNSSEC steps and preserve the existing website and email service.

Use the values in your own Cloudflare account. Don’t share passwords or API keys. If the instructions don’t match, check with the provider before changing anything.

4. Verify the migration

Once Cloudflare shows Active, test the existing website, important subdomains and incoming/outgoing email. Enable DNSSEC through Cloudflare afterwards, adding its new DS record at the registrar where required.

A DNS migration doesn’t replace the website. Change the website’s records only when the new hosting is ready. If a developer needs to help earlier, you can invite them while the zone is still pending.

Cloudflare’s setup guide · Import DNS records · All setup guides

Search this website