The authoritative DNS zone file that holds the canonical records for a domain. Your registrar or DNS provider maintains this; changes you make propagate outward from here.
When you update an A record, MX record, or any other DNS entry, you're editing the master zone. It's the source of truth. Secondary nameservers (slave zones) pull copies via zone transfer (AXFR) to distribute load and add redundancy.
Why it matters: If your master zone gets hijacked, corrupted, or locked by a hostile actor, your entire domain goes dark or redirects to their target. This is why DNS security (DNSSEC, strong registrar passwords, registry lock) exists. Also why offshore and bulletproof registrars keep tight control over zone access—you own the master, not some middleman.
For bunkerdomains users: we give you direct zone file editing and don't gate it behind expensive support tickets. You control the master; we don't interfere.