If you have ever paused before clicking Save in your domain dashboard because you were not sure whether to change nameservers or edit DNS records, this guide is for you. The distinction matters: one choice hands DNS control to a different provider, while the other updates settings inside your current DNS zone. Getting it wrong can break a website, stop email delivery, or create confusing partial outages. What follows is a reusable checklist you can return to any time you launch hosting, move email, add a CDN, verify a service, or migrate infrastructure.
Overview
Here is the short version.
Change nameservers when you want a different DNS provider to become authoritative for the domain. This usually happens when a host, platform, DNS specialist, or security service asks you to replace your current nameservers with theirs. Once that change completes, DNS records are no longer managed where they used to be. They must be managed in the new provider’s DNS zone.
Edit DNS records when you are keeping the same nameservers and only need to point services to new destinations. This includes tasks like changing the website IP, adding a CNAME for a subdomain, creating MX records for email, publishing TXT records for verification, or updating SPF, DKIM, and DMARC.
A practical way to think about it:
- Nameservers decide who hosts your DNS.
- DNS records decide where your services point.
That single distinction clears up most confusion.
It also helps explain why these changes behave differently. A nameserver change shifts authority for the entire zone. An individual record change updates only one part of the zone under the same authority. That is why nameserver changes often require more planning, more cross-checking, and more care around timing.
If you manage domains across several registrars, hosting providers, and SaaS tools, this difference is worth documenting internally. Many outages begin with a simple assumption that “DNS is DNS,” when in reality there are two separate control layers involved.
Checklist by scenario
Use this section as a decision guide before you edit anything.
Scenario 1: You bought hosting and the host gave you nameservers
Usually change nameservers if your hosting provider expects to manage the whole DNS zone for you.
Typical signs:
- The host gives you two or more nameservers such as
ns1.examplehost.comandns2.examplehost.com. - The host says to “point your domain to our nameservers.”
- The host’s dashboard includes DNS management only after the domain uses its nameservers.
Before you change nameservers:
- Confirm whether email records, subdomains, and verification records already exist at the old DNS provider.
- Copy every existing record from the current zone.
- Recreate those records at the new DNS provider before or immediately after the nameserver switch.
- Check whether the host supports the record types you need.
When this is the right move: you want a simple domain-and-hosting bundle, or your provider’s support team expects DNS to live inside its platform. If you are still choosing providers, compare the operational tradeoffs as carefully as pricing. Cheap first-year registration is less useful if management is awkward later; our guides on cheap domain registration that stays affordable after year one and domain renewal pricing can help frame that decision.
Scenario 2: Your web host gave you an IP address, not nameservers
Edit DNS records, usually an A record for the root domain and possibly a CNAME for www.
Typical signs:
- You received one IPv4 address or a pair of IP addresses.
- You are told to create an A record for
@. - You are keeping DNS at your registrar or DNS provider.
What to edit:
- A record for the apex or root domain to point to the host’s IP.
- AAAA record if the provider gives an IPv6 address.
- CNAME for
wwwif the provider instructs you to alias it to another hostname.
This is a classic case of do not change nameservers unless you were explicitly told to do so.
Scenario 3: You are moving email to Google Workspace, Microsoft 365, or another mail provider
Edit DNS records.
In most setups, email providers ask you to add or replace:
- MX records for mail routing
- TXT records for domain verification and SPF
- CNAME or TXT records for DKIM and related setup
- TXT record for DMARC policy
Do not change nameservers just because you changed email providers. Email usually requires record updates inside your existing DNS zone, not a transfer of DNS authority.
This is one of the most common sources of avoidable downtime. A domain owner sees new mail instructions, notices DNS terminology, and changes nameservers instead of updating MX and TXT records. The website may go down even though only email was meant to change.
Scenario 4: You are connecting a CDN, proxy, firewall, or performance service
It depends on the service design.
Some providers require you to change nameservers because they become your authoritative DNS provider. Others ask you to edit records or change only specific hostnames.
Use this test:
- If the service gives you replacement nameservers, change nameservers.
- If the service gives you target hostnames, IPs, or record values, edit DNS records.
Important: if a provider becomes authoritative DNS, migrate the entire zone carefully. That includes mail, verification, redirect, and subdomain records, not just the website entry.
Scenario 5: You need to verify a domain with a SaaS tool
Edit DNS records.
Most domain verification workflows use a TXT or CNAME record. Examples include analytics platforms, email delivery tools, helpdesk systems, marketing platforms, and developer tools. In nearly all of these cases, you stay with the same nameservers and publish a new verification record.
Checklist:
- Add the exact host and value provided.
- Do not remove unrelated TXT records unless there is a direct conflict.
- Allow time for propagation before retrying verification.
Scenario 6: You are moving DNS management from your registrar to a dedicated DNS provider
Change nameservers.
This is common when teams want better DNS workflows, faster edits, more access control, or advanced features. Developers and operations teams often separate registrar functions from DNS functions to reduce risk and improve visibility.
Before you switch:
- Export or manually copy the full existing zone.
- Recreate records in the new provider.
- Check TTL values.
- Verify apex,
www, mail, and critical subdomains. - Confirm DNSSEC handling if it is enabled.
If you manage many domains, consistency matters more than speed. Standardizing where DNS lives can reduce errors, especially for teams handling bulk domain management.
Scenario 7: You are transferring the domain to a different registrar
Usually neither, at least not automatically.
A registrar transfer changes where the domain is registered, not necessarily where DNS is hosted. Many domain owners assume a transfer means they must also change nameservers or rebuild records. Often they do not.
What to check:
- Where is DNS hosted right now?
- Will that remain the same after the transfer?
- Does the new registrar offer DNS hosting, and are you planning to use it?
If the nameservers stay the same, your website and email can continue working normally during the registrar transfer. For a deeper process walkthrough, see How to Transfer a Domain Without Website or Email Downtime and Domain Transfer Fees Compared.
Scenario 8: You are launching a new subdomain like shop.example.com or app.example.com
Edit DNS records in most cases.
You typically add:
- An A record to an IP address
- A CNAME to another hostname
- Possibly TXT records for verification or service configuration
Only change nameservers for a subdomain if you intentionally delegate that subdomain to another DNS provider using NS records at the subdomain level. That is an advanced case and should be documented carefully.
What to double-check
Before making any DNS change, run through this short control list. It prevents most mistakes.
1. Who is authoritative for DNS right now?
Look up the current nameservers in your registrar or DNS provider. If you are about to edit records in a dashboard that is no longer authoritative, your changes will not do anything.
This is a surprisingly common issue after platform migrations. Someone edits records at the registrar even though the domain now uses a third-party DNS provider.
2. What services depend on the current zone?
List everything tied to the domain before making changes:
- Main website
www- Subdomains
- CDN or proxy settings
- TXT verification records
- SPF, DKIM, and DMARC
- API endpoints
- Redirects
When changing nameservers, missing even one of these records can create partial failure that is harder to spot than a full outage.
3. Are TTL values reasonable?
TTL controls how long resolvers may cache a DNS answer. If you expect to change a record soon, lowering TTL ahead of time can make the cutover easier. If you are doing a nameserver migration, review TTLs but do not rely on them as a guarantee of instant propagation. Different caches and clients can behave differently.
4. Are you editing the right record type?
Confusion between A, AAAA, CNAME, MX, NS, and TXT causes many problems. A quick mental model:
- A / AAAA: point a name to an IP
- CNAME: alias one hostname to another hostname
- MX: route email
- TXT: verification and mail policy data
- NS: delegate DNS authority
If you need a refresher on one of the most mixed-up record choices, keep “A record vs CNAME” in your regular DNS notes or runbook.
5. Is email protected during the change?
Email problems are often less visible than website problems, but they can be more damaging. If you change nameservers, verify that all mail-related records exist at the new provider before the switch. If you are editing records, confirm the exact priority and values for MX entries and make sure SPF, DKIM, and DMARC remain intact.
6. Are DNSSEC settings involved?
If DNSSEC is enabled, nameserver changes may require extra coordination. Depending on the setup, DS records at the registrar may need to be updated or removed and re-added. If you are unsure, slow down and verify the workflow with your provider documentation before changing authority.
7. Do you have a rollback plan?
Even simple DNS changes deserve a fallback plan:
- Screenshot or export the current zone
- Record the current nameservers
- Note old record values
- Define what “success” looks like
- Set a time limit for validation
For teams managing business-critical domains, pair this with basic DNS monitoring or logging. A practical next step is building an internal habit of spotting anomalies early, similar to the ideas covered in this DNS incident playbook.
Common mistakes
Most DNS issues are not caused by obscure edge cases. They come from a few repeated patterns.
Changing nameservers when only one record needed updating
This is the central mistake this guide is meant to prevent. If your provider gave you an IP address, a target hostname, or a TXT value, you almost certainly need to edit records, not nameservers.
Forgetting that nameserver changes affect the entire zone
A website migration might seem isolated, but the nameserver switch also moves responsibility for mail, subdomains, and verification records. Treat nameserver changes as whole-domain events.
Editing DNS at the registrar when DNS is hosted elsewhere
Your registrar may show a DNS editor even when it is not authoritative. Always confirm where the active zone lives before making changes.
Missing mail records during a DNS migration
Website checks pass, so the move looks successful. Then inbound mail stops or outbound authentication fails. Build an email checklist into every nameserver migration.
Using the wrong hostname format
Some dashboards expect @ for the root domain; others expect a blank host field; others require the full domain. The same applies to subdomains and trailing dots. Read the input format carefully inside the provider UI.
Creating conflicting records
A hostname generally cannot have both a CNAME and other record types at the same label in a standard setup. If a provider asks for a CNAME and you already have A, TXT, or MX records on that exact host, stop and review the design.
Assuming registrar transfer equals DNS change
It does not, unless you also choose to change where DNS is hosted. Separate the registration layer from the DNS layer in your planning.
Not documenting final state
DNS is easy to forget when it works. Six months later, nobody remembers why a TXT record exists or where a nameserver cutover was coordinated. Keep a minimal runbook for each domain, especially if you manage several registrars or evaluate the bundle versus separate-services approach for small business sites.
When to revisit
DNS choices are not set once and forgotten. Revisit this topic whenever the underlying workflow changes.
Return to this checklist when:
- You switch hosting providers
- You move email platforms
- You add a CDN, firewall, or proxy layer
- You transfer domains between registrars
- You consolidate vendors before a busy season or product launch
- You standardize infrastructure for a growing team
- You enable DNSSEC or review security controls
- You inherit a domain with unclear setup history
A simple recurring habit helps:
- List your important domains and where each is registered.
- List the authoritative nameservers for each domain.
- Record where the DNS zone is edited.
- Identify the website host, email provider, and any third-party services using TXT or CNAME verification.
- Review this before seasonal planning cycles or any major migration.
For solo operators and small teams, this can be a one-page document. For larger portfolios, turn it into a shared spreadsheet or internal inventory. The point is not perfect documentation. The point is preventing last-minute guesswork.
If you are still refining your broader setup, it may also help to review related operational decisions: whether WHOIS privacy is included, whether your provider is still cost-effective after introductory pricing, and whether your domain footprint justifies more structured management.
Final action checklist:
- If a provider gave you nameservers, you are probably changing DNS authority.
- If a provider gave you an IP address, hostname, or TXT value, you are probably editing DNS records.
- Before any nameserver change, copy the full zone and recreate all required records.
- Before any record change, confirm you are editing the authoritative DNS provider.
- After any change, validate website,
www, email, and key subdomains.
That is the durable rule: nameservers change who answers for your domain; records change what the domain points to. Once that is clear, most DNS setup for a domain becomes much easier to reason about.