Account

Billing & Payment

Subscription Plans

NexDNS offers tiered subscription plans. Each plan defines limits on the number of DNS zones, records per zone, and access to features such as API access, DNSSEC, and white-label nameservers.

Plans support two billing cycles: monthly and yearly. Annual billing provides a discount compared to paying monthly.

See current plans, prices, and limits on the pricing page.

Subscribing to a Plan

Navigate to Billing → Subscription in the panel to view available plans and your current subscription status. From there you can:

• Subscribe to a paid plan – select a billing cycle (monthly or yearly), then complete payment through the checkout gateway.
• Change plans – upgrade or downgrade at any time. An upgrade takes effect immediately, with a prorated charge for the difference over the rest of your current period; a downgrade takes effect at the start of your next billing period.

Billing profile required: before checking out a paid plan, you must have a billing profile on file. If one does not exist, you will be redirected to create it and then returned to complete checkout.

Payment Methods

Payments are processed securely through Stripe. All major credit and debit cards are accepted. Currency: EUR.

Additionally, bank transfer payments are available – contact support to arrange one. A proforma invoice is generated as a PDF document for bank transfer payments.

Invoices & Payments

All financial activity is tracked in three sections:

• Billing → Invoices – lists all invoices generated for your account. Each invoice has a unique number and can be filtered by status. You can view invoice details or download them as PDF.
• Billing → Payments – shows all payment transactions. Each payment record includes the amount, currency, status, and payment method. You can filter by status and sort by date.
• Billing → Settlements – displays subscription period history, showing the amount charged for each billing period.

Invoice PDFs are generated for every completed transaction. For bank transfer payments, a proforma/bill PDF is also available for download before payment is confirmed.

Billing Profile

Your billing profile stores the legal and contact information used on invoices. You have one billing profile per account, managed under Billing → Billing Profile.

Your billing profile includes: name, country, address, city, postal code, email, phone, and optionally a VAT ID (which can be validated automatically).

After creating a billing profile, you can update the contact information (email and phone number) at any time. Other fields are set at creation; contact support if they need to be changed.

Security (2FA)

Two-Factor Authentication

NexDNS supports Time-based One-Time Password (TOTP) two-factor authentication, adding an extra layer of security to your account. When enabled, you will be prompted for a 6-digit code from your authenticator app each time you sign in.

NexDNS uses standard TOTP, compatible with any authenticator app such as Google Authenticator, Authy, or 1Password. The issuer name displayed in your authenticator app is NexDNS.

Compatible Authenticator Apps

Any TOTP-compatible authenticator app will work. Common choices include:

• Google Authenticator (iOS, Android)
• Authy (iOS, Android, Desktop)
• Microsoft Authenticator (iOS, Android)
• 1Password, Bitwarden, or any password manager with TOTP support

Enabling 2FA

Navigate to Settings → Security to manage two-factor authentication.

1. Click the button to begin 2FA setup. A secret key is generated and stored in your session.
2. Scan the QR code with your authenticator app, or manually enter the secret key shown on screen. The secret can be copied to clipboard.
3. Enter the 6-digit verification code from your app to confirm setup. The code must be numeric and exactly 6 digits.
4. Upon successful verification, 2FA is enabled and 8 recovery codes are generated and displayed. You will also receive a security notification.

Recovery Codes

When 2FA is enabled, the system generates 8 single-use recovery codes. Each code is a 12-character hexadecimal string in the format xxxxxx-xxxxxx. Recovery codes are stored in hashed form, so they cannot be retrieved after the initial display.

Important: save your recovery codes in a secure location immediately after setup. They are the only way to regain access if you lose your authenticator device.

Key details about recovery codes:

• Each code can only be used once. After use, it is marked as consumed.
• When a recovery code is used to sign in, you receive a security notification alerting you of the event.
• The number of remaining unused recovery codes is shown on the Security settings page.
• You can regenerate all recovery codes at any time from the Security settings. This invalidates all previous codes and generates a fresh set of 8. Regeneration is recorded in the audit log.

Disabling 2FA

To disable two-factor authentication, go to Settings → Security and click the disable button. This removes your TOTP secret and deletes all recovery codes. A security notification is sent to confirm the change. The action is also recorded in your activity log.

API Key Management

Overview

API keys allow programmatic access to the NexDNS REST API. You can manage your keys under Settings → API Keys.

Plan requirement: API key creation requires an active subscription with the api_access feature enabled. This is available on Pro plans and above.

Creating an API Key

When creating a new API key, you provide:

• Name – a descriptive label for the key (up to 255 characters).
• Permissions – one or more of the following scopes:

  Scope	Description
  zones.read	List and view zones
  zones.write	Create, update, delete zones
  records.read	List and view DNS records
  records.write	Create, update, delete records
  webhooks.read	List and view webhooks
  webhooks.write	Create, update, delete webhooks

• Expiration date (optional) – set a future date after which the key becomes invalid. If left empty, the key does not expire.

Key Format & Security

Generated API keys follow the format nxd_ followed by 40 random alphanumeric characters (e.g., nxd_aBcDeFgHiJkLmNoPqRsTuVwXyZ0123456789Ab).

The full key is shown only once, immediately after creation. It is stored in hashed form and cannot be retrieved later. Copy and store it securely.

On the API Keys page, each key is identified by its first 8 characters (the key prefix), along with its name, permissions, creation date, and expiration status.

Using API Keys

Include your API key in requests to the NexDNS REST API. Keys are used for authentication and authorize operations according to their assigned permission scopes.

curl -H "Authorization: Bearer nxd_yourKeyHere" \
     https://api.nexdns.tech/v1/zones

Revoking an API Key

To revoke a key, click the revoke button next to it on the Settings → API Keys page. Revocation is immediate and permanent – the key is permanently deleted and can no longer be used for authentication.

Both creation and revocation of API keys generate a security notification and are recorded in the audit log.