There is one system almost every business depends on completely and almost no owner can name. No interface you log into, no icon on the desktop, no invoice that catches your eye. It runs quietly in the background making your website load and your email arrive. When it breaks, everything breaks at once.
It is called DNS. We have watched a company lose its website and its entire email flow at once because one setting was changed by someone who did not know what it did. We have watched another spend two days finding out who controlled it, because the only person who knew had left in 2019. You do not need to be an expert. You do need to know what it is and who holds the keys.
The Phone Book, and Why the Analogy Holds
Computers find each other using numbers, not names. Your website lives at a numeric address nobody could remember, so something has to translate between the two. That is DNS, the Domain Name System. It is the phone book: look up a name, get a number, dial it. Cloudflare, which operates one of the world’s largest DNS services, describes DNS records as instructions that provide information about a domain including what address is associated with it and how to handle requests for it.
The analogy holds because the failure mode is the same. If your listing is wrong, it does not matter that your office is open and your staff are at their desks. Callers dial the wrong number and conclude you are gone. Your web server is fine, your email is fine, but the phone book sends everyone elsewhere.
Entries also take time to spread. Every record carries a setting telling other servers how long to remember the answer, which Cloudflare describes as the time-to-live value, indicating how often a DNS server refreshes that record. Set it to a day and a change may not reach everyone until tomorrow. That lag is why DNS mistakes are so slow to fix.
The Handful of Records That Matter
There are dozens of record types. For a normal business, five do all the work. Here is each in a sentence, using descriptions published by Cloudflare:
- The A record holds the address of a domain. Plainly: it says where your website lives. Break it and your site stops loading. A counterpart called AAAA does the same for newer internet addresses.
- The MX record directs mail to an email server. It tells the internet where to deliver messages sent to your company. Break it and email stops arriving, often with no bounce and no warning.
- The CNAME record forwards one domain or subdomain to another and does not itself provide an address. A “see also” entry, and what your marketing platform or booking system asks you to add so their service answers under your name.
- The TXT record lets an administrator store text notes, and Cloudflare notes these are often used for email security. This is where the settings live that tell mail servers which systems may send email as your company. Get them wrong and legitimate mail lands in spam.
- The NS record stores the name server for a DNS entry. It says which service publishes the phone book for your domain: the most consequential setting in the system, and the one people change without realizing it.
Where It Is Registered vs Where It Is Hosted
Your registrar is who you rent the domain name from. ICANN, the nonprofit that coordinates the domain name system, explains in its guidance as of 2026 that domain names can be registered through more than 2,000 ICANN-accredited registrars or their resellers, and that the terms of your registration, including fees, transfers, and renewals, are governed by your agreement with that registrar. ICANN defines the registrant as the entity holding the rights to the name. That should be your business, not an employee and not a vendor.
Your DNS host is the service that publishes the phone book entries. It may be the same company as your registrar, and often is by default, but it does not have to be. Plenty of businesses register in one place, host DNS elsewhere, and run email at a third.
The registrar is the landlord you pay rent to. The DNS host holds the keys. Lose the registrar account and you eventually lose the domain. Lose DNS access and you cannot change anything right now, in an emergency. You need both.
Why One Small Typo Takes Down Everything
The classic disaster: a business hires someone to build a new website, and somebody decides the simplest path is to move the whole domain to the web host’s DNS. That move recreates the website records correctly, because that is what the developer was thinking about, and quietly drops the mail and email security records, because nobody mentioned email. Email stops silently for everyone, and nobody notices for six hours, because email failing looks exactly like a quiet afternoon.
Three habits prevent almost all of this. Export or screenshot every record before changing anything. Lower the time-to-live value a day ahead of a planned change so mistakes can be undone in minutes. And never let a vendor move your name servers without a written list of every record that must exist afterward. DNS is a dependency you do not control, like the other outside services you run on, which we covered in our article on what it means when the cloud goes down.
DNS Filtering: A Cheap Security Win
The same system that can take you down can also protect you. Every time a computer tries to reach anything, it first asks the phone book for directions. If the service answering knows a destination is dangerous, it refuses, and the connection never happens. A switchboard operator who declines to connect calls to known scam numbers.
This is not a fringe idea. CISA, the federal government’s cybersecurity agency, runs a protective DNS service: if it matches a DNS request to a threat intelligence indicator, it blocks, redirects, or sinkholes the response and sends an alert. CISA states the service safeguards agencies by preventing traffic from reaching destinations that could be malicious.
Commercial equivalents are available to businesses of any size and typically cost a few dollars per user per month, though pricing varies and is worth confirming. You get a layer that works even when someone clicks the link, which is the point, because eventually someone always does. Our piece on why cybersecurity is no longer optional for mid-sized businesses covers where this fits.
The Bottom Line, and What to Do Today
DNS is the phone book that tells the world where to find your website and where to deliver your email. Five record types cover nearly everything, and the company you rent the name from and the company publishing the entries are two different roles. Spend twenty minutes on this:
- Identify your registrar and confirm you can log in. Not your web guy. You, or someone who still works for you, with the account in the company’s name.
- Identify your DNS host and log in there too. It may be the same place. Check, do not assume.
- Export or screenshot the full record list. Stored somewhere you can reach when your email is down, which rules out storing it only in your email.
- Turn on auto-renew and check the card on file. Domains expire by accident at real companies, and recovering one is expensive.
- Enable registrar lock and multi-factor authentication. Lock prevents an unauthorized transfer, and multi-factor on both accounts is not optional. This is the master key to your identity online.
- Note who to call. Account contact, support number, and who can approve changes, kept where your team can find it at 6 a.m. on a Sunday.
If you cannot name your registrar, cannot log into your DNS, or have no written record of your settings, fix that before an outage rather than during one. We document and manage this for businesses throughout Denton County and North Texas, and we hand you the documentation whether or not you keep working with us. Contact us today.
Sources:
Comments are closed