---
id: "dnskey-record"
kind: "glossary-term"
title: "DNSKEY record"
language: "en"
category: "DNS and technical foundations"
updated: "2026-10-04T14:01:23Z"
canonical: "https://tldlog.com/glossary/dnskey-record/"
translations:
  es: "https://tldlog.com/es/glosario/registro-dnskey/"
  de: "https://tldlog.com/de/glossar/dnskey-record/"
  fr: "https://tldlog.com/fr/glossaire/enregistrement-dnskey/"
  it: "https://tldlog.com/it/glossario/record-dnskey/"
  pt-BR: "https://tldlog.com/pt/glossario/registro-dnskey/"
  ru: "https://tldlog.com/ru/glossariy/zapis-dnskey/"
  zh-Hans: "https://tldlog.com/zh/cihui/dnskey-jilu/"
---

# DNSKEY record

A DNS record that holds a public key of a DNSSEC-signed zone. Resolvers use it to check the signatures on the zone's other records. A zone usually publishes at least two such keys, one for signing the key set and one for signing everything else.

## related terms

- [DNSSEC](https://tldlog.com/glossary/dnssec/)
- [KSK](https://tldlog.com/glossary/ksk/)
- [ZSK](https://tldlog.com/glossary/zsk/)
- [DS record](https://tldlog.com/glossary/ds-record/)
- [RRSIG](https://tldlog.com/glossary/rrsig/)