Giving Keystone access to your domain

To put your new website on your domain, a few DNS records at your registrar have to point to Keystone. There are two ways to get there.

Option 1: connect it yourself

Your Growth Partner sends a link that walks you through the change at your registrar in a couple of clicks (or you can do it from Website → Domain in the console). This works for most registrars and takes a few minutes. The site is live within a couple of hours of the change.

Option 2: give Keystone delegate access

If you would rather we handle it, or the automatic connection does not support your registrar, add Keystone as a delegate or collaborator on your registrar account. Every major registrar has a way to do this without sharing your password, and you can revoke it at any time.

Invite growthpartners@keystone.app, with the role the guide for your provider names:

• GoDaddy: Delegate Access, Domains Only
• Cloudflare: Member, Domain Administrator on the individual domain
• Wix: Collaborator with the Domain Manager billing role
• Squarespace: Contributor, Administrator
• Hostinger: Account sharing, Collaborator on the relevant domain

Not sure where your domain is managed? Look it up at lookup.icann.org. The registrar is where the domain is registered; the nameservers show where DNS is actually managed, which may be a different company (for example Cloudflare, your hosting company, or a previous agency). Tell your Growth Partner both.

What we change, and what we do not

• We only update the website records (A and CNAME) for your domain, plus one record that lets us issue your HTTPS certificate.
• We never touch email records (MX, SPF, DKIM, DMARC). Your email keeps working exactly as before.
• Before changing anything we take a copy of your current records so the change can be reversed.
• We never ask for a password, by email, chat, or on a call. If you cannot grant delegate access, we walk you through the change on a screen share instead.

If a third party manages your DNS

When your nameservers point to an agency or host rather than your registrar, that party controls DNS. We ask what they currently manage for you (just the website, or also email and other services) and coordinate with them: either they add our records in their panel, or the full set of records is recreated at your registrar before the nameservers are switched back. We only request a registrar transfer or unlock code if the registrar account itself is not in your name.