Setup instructions for routers, DNS providers, and the API.
myhouse.dnsfollowme.uk.Internet → Permit Access → DynDNS
Settings → Internet → WAN → Dynamic DNS
Note: UniFi only sends updates when the WAN IP actually changes. To force an update, disable the DynDNS config, save, re-enable, save.
Detailed setup guide →Services → Dynamic DNS → Add
Control Panel → External Access → DDNS → Add
Any device that speaks DynDNS2 works with the following:
You can attach a domain you host yourself with a supported DNS provider. Your API token is stored AES-256-GCM encrypted and is only used to update DNS records for that domain.
Prerequisite: the domain is delegated to Cloudflare (nameservers set to Cloudflare).
Zone:DNS:Edit.Prerequisite: the domain is set up as a zone in the Hetzner DNS Console.
Prerequisite: the paid DNS API add-on is enabled for the zone at united-domains. Without it the token returns no zones.
Rate limit: 1,200 requests/hour per token.
Prerequisite: the domain is in your IONOS account and API access is enabled in the developer portal.
TXT records are supported — Let's Encrypt certificates via DNS-01 work for IONOS-hosted zones.
Prerequisite: the domain is in your INWX account.
Important: INWX API login fails when the account has Mobile-TAN 2FA enabled. Create a separate sub-user without 2FA for this — your main account can (and should) keep 2FA.
Prerequisite: the domain is managed through your netcup account.
Note: the netcup API is recordset-based (every change replaces the entire record set). If you edit DNS records manually in the CCP at the same moment we set a Let's Encrypt TXT record, one change can be lost. For normal traffic (DynDNS updates, cert renewals) this is fine.
Prerequisite: the domain is in your OVHcloud account and you're using the European endpoint (eu.api.ovh.com).
/domain/zone/*), confirm in your OVH account, and copy the resulting consumer key.Note: we default to the EU endpoint. CA/US accounts need a different base URL — please reach out beforehand.
Prerequisite: a (free) deSEC.io account with a zone set up there.
deSEC is ACME-DNS-01 friendly — Let's Encrypt certificates work without any special configuration.
Prerequisite: the domain is managed through your Gandi account.
Gandi LiveDNS enforces a 300s minimum TTL — we raise lower values automatically.
Prerequisite: a Mittwald account with a project, and the domain is set up there as a DNS zone.
Note: Mittwald creates a separate "DNS Zone" object inside your project for every subdomain (sub-zone delegation). 10 DynDNS hosts → 10 sub-zones — functionally fine, but visible in the mStudio UI.
Prerequisite: the domain is in your Infomaniak Manager account.
Infomaniak natively supports TXT records — Let's Encrypt certificates via DNS-01 work without special configuration.
Prerequisite: the domain is registered with Scaleway and managed in your account.
Scaleway uses a PATCH-based change model — operations are atomic per request. Let's Encrypt DNS-01 works natively.
The router-compatible update endpoint:
GET https://api.dnsbeacon.com/nic/update?hostname=<host>&myip=<ipv4>[&myipv6=<ipv6>] Authorization: Basic base64(<email>:<api-key>)
Possible responses:
| good <ip> | Update accepted |
| nochg <ip> | IP unchanged, no DNS update needed |
| nohost | Hostname doesn't exist or is inactive |
| badauth | Email or API key is wrong |
| badparam | Invalid parameters (e.g. malformed IP) |
| 911 | Server error — retry later |
curl -u "you@example.com:dyndns_..." \ "https://api.dnsbeacon.com/nic/update?hostname=myhouse.dnsfollowme.uk&myip=1.2.3.4"
One-click certificate issuance via Let's Encrypt — straight from the dashboard, no ACME client, no configuration on your side. Works for subdomains on our domain and for your own domain (BYOD).
Requires a PRO or BUSINESS plan.
A lightweight update client for Windows, Linux and macOS that runs directly on the device — ideal for laptops, workstations and servers that need to publish their public IP without relying on the router's DynDNS feature.
The Windows client is available now as a public beta — grab it on the Downloads page. Native macOS and Linux clients are still in the works.
Most routers (UniFi, Fritz!Box) only send updates when the WAN IP actually changes. To force one, disable the DynDNS config in the router, save, re-enable, save. The dashboard's Hostnames → History tab shows whether updates are arriving.
Enter it in the router as the password instead of your account password. The email stays as the username. You can revoke the API key any time without changing your account password.
Yes. Append "&myipv6=<your-ipv6>" to the update URL — the service will create an AAAA record alongside the A record. Free and Pro plans can use both in parallel.
API keys are only stored as hashes and can't be recovered. Delete the old key in the dashboard, create a new one, and update your router.
Free: 3 hostnames, 1 custom domain, 3 API keys. Pro: unlimited. Business: unlimited + team login.
When you add a custom domain, the service uses the supplied token to call the DNS provider and check that the zone exists and the token has access. If that works, the domain is marked verified and can be used immediately.
Under Settings → Two-factor authentication. During setup the service shows a QR code that you scan with Google Authenticator, Authy, Bitwarden, or 1Password. On activation you get 8 single-use backup codes — store them safely. API keys for /nic/update are not affected by 2FA — routers still only need email + API key.