Skip to content

How To Use the Beget DNS Plugin

This plugin works against the provider. It is assumed that you already have an account and at least one domain you will be working against.


It is possible to use this plugin using the same credentials that are used to login to the web control panel. However, it is recommended to setup a separate password for API access and also limit the permissions.

To do this, go to your Beget API settings and select "Use separate password". After setting the password, uncheck all of the Permitted Methods except for "DNS management" and click the Apply button.


There are some limitations with how the Beget API works that make it risky to use when using DNS Challenge Aliases. If you need to use this plugin with challenge aliases, the value for the DnsAlias must not contain any other record types or TXT values because they will likely be deleted when the plugin attempts to create the TXT records.

Using the Plugin

Your Beget credentials are passed as the username and password in a PSCredential object to the BegetCredential parameter.

$pArgs = @{
    BegetCredential = (Get-Credential -Message "Beget Credentials")
New-PACertificate -Plugin Beget -PluginArgs $pArgs