The Internet Corporation for Assigned Names and Numbers (ICANN) will change the DNS security trust anchor on October 11, 2026, a critical update to the Domain Name System Security Extensions (DNSSEC). This cryptographic key rollover maintains the integrity of DNS data for global internet users. The current Key Signing Key will be replaced to uphold strong security standards.

DNSSEC cryptographically verifies DNS responses, preventing tampering. While invisible to most users, the rollover requires preparation from network operators. ICANN's IANA functions manage this process, collaborating with the global internet community. The new key is published well in advance, allowing time for system updates to maintain trust in domain resolutions.

A phased timeline began in 2024, with both keys valid until January 2027. Recursive resolvers—systems run by ISPs and enterprises—must adopt the new trust anchor. Those with manual configurations or outdated software face potential resolution failures post-rollover. Operators should verify their systems now.

Vice President Kim Davies emphasized the careful coordination behind this update. The rollover represents a proactive maintenance step, ensuring the DNS remains secure and resilient against evolving threats without disrupting everyday internet access.