Every cPanel account you create gets a DNS zone on the server. When your customers' domains use your nameservers, the records in that zone decide where the website, email and verification records point. WHM's Zone Manager lets you edit any of your customers' zones from one place.
Before you start
- WHM access on your reseller plan (see logging in to WHM).
- The domain must use the server's nameservers or your private nameservers. If the domain uses Cloudflare or registrar DNS, edit records there instead.
- The record values you need, for example an IP address from an external service or a TXT verification string.
Open Zone Manager
- Log in to WHM.
- Go to WHM → DNS Functions → Zone Manager.
- Find the domain and click Manage.
You see a table with every record in the zone: the domain's A record, www CNAME, mail, ftp, MX, SPF and DKIM TXT records, and service records used by cPanel.
Add a record
- Click Add Record (or the arrow next to it to choose a type).
- Enter the Name, for example
shop.example.com.. A trailing dot means the full name; without it the domain is appended automatically. - Set the TTL. 14400 seconds (4 hours) is the default; use 300 before a planned change.
- Choose the Type and enter the Record value.
- Click Save Record.
Common records
| Type | Typical use | Example value |
|---|---|---|
| A | Point a name to an IPv4 address | 203.0.113.10 |
| CNAME | Alias one name to another | shops.myshopify.com |
| MX | Where email for the domain is delivered | Priority 0, example.com |
| TXT | SPF, DKIM, DMARC, site verification | v=spf1 +a +mx ~all |
| CAA | Which authorities may issue SSL certificates | 0 issue "sectigo.com" |
Warning: If you add MX records for an external provider such as Google Workspace or Microsoft 365, also set the domain's Email Routing to Remote Mail Exchanger in the customer's cPanel (Email → Email Routing). Otherwise the server keeps delivering mail locally.
Edit or delete a record
- In Zone Manager, click Edit on the record row.
- Change the value and click Save Record, or click Delete and confirm.
Do not delete the NS and SOA records; the zone stops working without them.
Reset a broken zone
If a zone has been badly edited, WHM → DNS Functions → Reset a DNS Zone rebuilds it from the account's defaults. Custom records such as Google verification or external MX are removed, so note them first and add them back afterwards.
Check your changes
- Use an online DNS lookup or run
dig +short A shop.example.comfrom a terminal. - Remember resolvers cache old records for the previous TTL.
- Look up ownership details with the WHOIS checker if you are unsure which nameservers a domain uses.
Troubleshooting
Changes have no effect
The domain probably uses other nameservers. Check the NS records at the registrar; the zone in WHM is only used when the domain points to it.
"Zone not found"
Addon and parked domains have their own zones, but subdomains live inside the parent domain's zone. Search for the main domain.
Email stopped after editing MX
Check the MX target has an A record and that Email Routing matches the provider.
Frequently asked questions
Can customers edit DNS themselves?
Yes, if the Zone Editor feature is in their feature list. They use cPanel → Domains → Zone Editor, which edits the same zone.
Can I add DNS zones for domains without an account?
Resellers can only manage zones for domains on their own accounts. Create a cPanel account or add the domain to an existing account first.
What TTL should I use?
Keep the default for stable records. Lower it to 300 a day before a migration so the switch spreads quickly, then raise it again.