Skip to main content

Onchain DNS import

Enable DNSSEC, add the _ens TXT record, then claim the name in the ENS App. You pay gas on Ethereum Mainnet, nothing else.

You can use your existing .com, .net, or .org as a crypto wallet address: people send crypto to yourname.com instead of a long 0x address. You'll need DNSSEC enabled on your domain. There are two ways to do it.

One domain pointing to an IP address and a wallet

Onchain or offchain?

Route

Cost

Where records live

Best if

Onchain (this article)

One gas-only transaction on Ethereum Mainnet

In the ENS App

You want a wrapped NFT, want to manage records and subnames in the ENS App, or want to transfer the name later.

Free

At your DNS provider

You want zero gas. You'll keep managing records in your DNS panel. Quickest to set up.

Good to know

  • You need to already own the DNS domain at a registrar; ENS doesn't sell DNS domains.

  • Your domain must have DNSSEC enabled using RSA/SHA-256 or ECDSA keys. WordPress.com doesn't support DNSSEC; move your DNS to another provider while keeping WordPress for the site.

  • Onchain import needs ETH on Ethereum Mainnet for gas. There's no ENS registration or renewal fee; you only pay your DNS registrar each year.

  • The import is the only transaction. After that, a change to your _ens TXT record is picked up on its own.


Important: DNS controls ENS. Whoever owns the DNS domain can reclaim the ENS version at any time by updating the _ens TXT record and selecting Refresh DNS. If your domain expires or you transfer it, the new owner can take the ENS name. Keep your DNS domain active to keep control.

Steps

Step 1. Enable DNSSEC at your DNS host

Open your registrar's control panel and turn DNSSEC on.

Step 2. Add the _ens TXT record

ENS checks for a specific TXT record on your domain to confirm you own it. In your domain's DNS panel, add:

Field

Value

Notes

Type

TXT

The DNS record type

Name

_ens

The record name

Value

a=0xYourWalletAddress

Use the checksummed address, the one with mixed-case letters. Some registrar UIs normalise to lowercase, so double-check after saving.

TTL

3000

Time-to-live (seconds)

The Add Text Records panel, showing the TXT record to create
A registrar's DNS panel, with the _ens TXT record added

Step 3. Open the ENS App and find your domain

Go to app.ens.domains, connect your wallet, search for your DNS domain and open it.

The Claim your domain panel, with its Claim button

Step 4. Run the DNSSEC check

Select Check. The ENS App reads your DNS records and confirms DNSSEC is set up. If it doesn't detect the changes, wait 10–30 minutes (DNS changes take time to spread) and refresh.

Step 4. Run the DNSSEC check

Step 5. Select Claim and approve in your wallet

Most confirm in 1–2 blocks; busy networks can take longer. After that, your name appears in the ENS App with you as the Owner and you can set records.

The ENS App DNS import 'Claim your domain' step for cthulu.xyz, showing the verified DNS owner and a Claim button
The wallet confirmation popup for importing cthulu.xyz as a DNSSEC name, with the Open Wallet button highlighted
The ENS App success screen confirming cthulu.xyz was imported into ENS, with a View Name button

Troubleshooting

DNSSEC support by hosting provider

Provider

Key support

Setup guide

easyDNS

RSA/SHA-256 & ECDSA

Google Cloud DNS

RSA/SHA-256 & ECDSA

Namecheap

RSA/SHA-256 & ECDSA

Hostinger

RSA/SHA-256 & ECDSA

Check provider docs

Hostgator

RSA/SHA-256 & ECDSA

Check provider docs

Bluehost

RSA/SHA-256 & ECDSA

Check provider docs

For any provider not listed, search "DNSSEC" in their docs. Some major hosts charge extra for it.

What if the DNSSEC check fails?

Wait 10–30 minutes; DNS changes spread slowly. If it's still failing, run a DNSSEC Analyzer to check the DNS side for errors. See Fix DNS import errors for more cases.


Common questions

Can I transfer ownership of a DNS-imported ENS name?

Yes. The _ens TXT record decides who owns the name, so change the address there. You can also send the name in the ENS App, but the owner can always sync it back from the TXT record.

Does changing the DNS TXT record automatically update the ENS record?

Yes, although it takes a little time to get picked up. Anyone can still Refresh DNS to prompt the update, on the name's Ownership tab, to bring ENS in line with the current TXT record.

Can I switch to offchain later?

No. After you've completed the onchain method, it's not possible to revert to offchain.

Can I change the Manager of an imported DNS name?

Yes. You can set a new Manager from the ENS App. The owner can always sync it back to their address.

Do DNS-imported names support Fuses?

No. Imported DNS names can't use the Name Wrapper fuse system. Only .eth names do.

How do I refresh or sync a DNS-imported name?

Open the name in the ENS App, go to the Ownership tab, and select Refresh DNS. It re-reads your _ens TXT record and updates the ENS Owner if it has changed.

Who can run Refresh DNS?

Anyone, not just the current owner: the _ens TXT record is the single source of truth. Keep your DNS domain active and the TXT record pointing at the right address.

Did this answer your question?