certbot-dns-duckdns
Obtain certificates using a DNS TXT record for DuckDNS domains
Decision gist · record as of 2026-08-14
Yes. The plugin is actively maintained, has no known vulnerabilities, installs with low friction, and solves a real problem for anyone using DuckDNS who needs automated certificate management. The MIT license carries no restrictions. Install it if you use DuckDNS and want to automate Let's Encrypt certificate issuance; skip it only if you use a different DNS provider or prefer manual certificate renewal.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- Requires certbot >= 1.18.0 installed; if certbot runs with root privileges, the plugin must also be installed with root privileges for certbot to find it.
- Installs with low friction as a pure Python wheel with three straightforward runtime dependencies (certbot, requests, dnspython).
- Actively maintained as of the latest release, with recent commits and a stable production status.
License · maintenance · safety
MIT (permissive) — MIT license permits unrestricted use, modification, and distribution for commercial and private purposes with minimal legal friction.
last release 2026-08-14 (0 days) · last repo commit 2026-08-14 · 114 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 92,363 downloads/mo, #13,457 on PyPI
Alternatives
Verify before relying
pip install certbot-dns-duckdns
certbot certonly \
--authenticator dns-duckdns \
--dns-duckdns-token YOUR_DUCKDNS_TOKEN \
-d example.duckdns.org- Whether the plugin works with certbot versions older than 1.18.0 or newer than what has been tested
- Performance characteristics when managing multiple certificate renewals in parallel
- Compatibility with DuckDNS API rate limits under high-volume certificate issuance
What it is and what it does
This package is a plugin for certbot that enables automated SSL/TLS certificate issuance for DuckDNS domains using the DNS-01 challenge method. Instead of proving domain ownership through HTTP, it proves it by temporarily adding a TXT record to your DuckDNS domain via the DuckDNS API, then removes it after validation. The plugin handles the entire DNS record lifecycle automatically, allowing you to obtain certificates (including wildcards) without manual intervention.
You install it alongside certbot and configure it with your DuckDNS token—either as a command-line argument, credentials file, or environment variable. It integrates directly into certbot's challenge workflow, so once set up, you can generate and renew certificates with standard certbot commands. The plugin depends on certbot itself, requests for API calls, and dnspython for DNS operations.
Use it for
- Obtain wildcard SSL certificates for all subdomains of a DuckDNS domain without manual DNS record editing
- Automate certificate renewal for home servers or IoT devices using DuckDNS as their DNS provider
- Delegate DNS-01 challenges from other domains to a DuckDNS domain via CNAME records for centralized certificate management
- Generate staging certificates for testing Let's Encrypt integration without hitting production rate limits
- Run certificate issuance in Docker containers with automated DNS validation for DuckDNS-hosted services
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes.
The plugin is actively maintained, has no known vulnerabilities, installs with low friction, and solves a real problem for anyone using DuckDNS who needs automated certificate management. The MIT license carries no restrictions. Install it if you use DuckDNS and want to automate Let's Encrypt certificate issuance; skip it only if you use a different DNS provider or prefer manual certificate renewal.
Install
certbot-dns-duckdns on PyPI
Before you install
Installs with low friction as a pure Python wheel with three straightforward runtime dependencies (certbot, requests, dnspython). Actively maintained as of the latest release, with recent commits and a stable production status.
Requires certbot >= 1.18.0 installed; if certbot runs with root privileges, the plugin must also be installed with root privileges for certbot to find it.
License in practice
MIT license permits unrestricted use, modification, and distribution for commercial and private purposes with minimal legal friction.
Quickstart
pip install certbot-dns-duckdns
certbot certonly \
--authenticator dns-duckdns \
--dns-duckdns-token YOUR_DUCKDNS_TOKEN \
-d example.duckdns.orgVerify before relying
- Whether the plugin works with certbot versions older than 1.18.0 or newer than what has been tested
- Performance characteristics when managing multiple certificate renewals in parallel
- Compatibility with DuckDNS API rate limits under high-volume certificate issuance
Package facts
| License | MIT permissive |
| Python support | Supports the current Python release >=3.10 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 3 packagescertbotrequestsdnspython |
| Maintenance | Actively maintained 0 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 92,363 / month, #13,457 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Development Status :: 5 - Production/StableLicense :: OSI Approved :: MIT LicenseProgramming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14Topic :: Internet :: WWW/HTTPTopic :: SecurityTopic :: System :: Systems AdministrationTopic :: Utilities |
Evidence: certbot_dns_duckdns-1.9.0-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “certbot dns plugin duckdns”
- certbot-dns-duckdnsA certbot plugin that automates DNS-01 challenge validation for…
- certbot-dns-cloudflareAutomates DNS validation for Let's Encrypt certificate issuance by…
- certbot-dns-directadminA Certbot plugin that automates DNS-01 challenge completion for Let's…
Give your agent the search over MCP, or paste the wish link into any chat.
More WWW/HTTP packages
urllib3 is an HTTP client library that provides thread-safe connection pooling, SSL/TLS verification, multipart file uploads, request retries, compression support, and proxy handling for Python applications.
Requests is a Python HTTP library that simplifies sending HTTP/1.1 requests with automatic handling of headers, authentication, cookies, and response parsing.
h11 is a pure-Python HTTP/1.1 protocol implementation that handles parsing and serializing HTTP messages without any built-in I/O, letting you integrate it with any network layer you choose.
HTTPX is a fully featured HTTP client library for Python that provides both sync and async APIs, with support for HTTP/1.1 and HTTP/2, plus an integrated command-line client.
Install it if you are building new projects or modernizing existing ones that rely on HTTP.
A minimal low-level HTTP client library that sends HTTP requests with thread-safe and task-safe connection pooling, supporting HTTP/1.1, HTTP/2, proxies, and both sync and async interfaces.
aiohttp is an async HTTP client and server framework built on asyncio, supporting both WebSockets and middleware-based routing for building concurrent web applications.
Install it if you need async HTTP client or server capabilities in asyncio-based applications.
See also certbot-dns-directadmin · dns-lexicon · certbot-dns-multi · certbot-dns-cloudflare · certbot-dns-route53 · fqdn · certbot-nginx · certbot · acme · octodns