DNSSEC Checker
Check whether a domain is signed with DNSSEC, list its DS and DNSKEY records, and confirm that validating resolvers accept the signature chain.
About the DNSSEC Checker
Check whether a domain is signed with DNSSEC, list its DS and DNSKEY records, and confirm that validating resolvers accept the signature chain.
Queries run from our global edge network, so you see what a neutral observer on the public internet sees — not what your local network or ISP resolver happens to have cached.
Frequently asked questions
What does the DNSSEC Checker do?
Check whether a domain is signed with DNSSEC, list its DS and DNSKEY records, and confirm that validating resolvers accept the signature chain.
Is the DNSSEC Checker free to use?
Yes. The DNSSEC Checker is completely free with no account, no signup and no usage limits for normal use.
Do you log the lookups I run?
No. Queries are processed at the edge and returned straight to you. We do not retain, profile or sell your lookup history.