SecuryBlack LogoSecuryBlack
Free tool

DNSSEC Checker

Check whether your domain publishes DS and DNSKEY records, and whether a validating resolver confirms the signature chain.

We ask Cloudflare's validating resolver and read its authentication bit (AD); we don't verify the signatures ourselves.

What is DNSSEC and why does it protect your domain?

DNSSEC adds cryptographic signatures to DNS records, allowing resolvers to verify that responses originate from the authoritative zone and were not altered in transit.

Without DNSSEC, attackers can perform DNS cache poisoning attacks to redirect users to malicious servers.

DNSSEC FAQs

How do I enable DNSSEC on my domain?

Generate DNSSEC keys at your authoritative DNS provider (e.g. Cloudflare) and enter the DS record at your domain registrar.

Does DNSSEC slow down website loading?

The impact is negligible (a few microseconds for cryptographic signature checks) while providing critical Man-in-the-Middle protection.

And the rest of your domain?

DNSSEC is just one piece. Certificate, headers, email, ports: check it all free in a minute.

Analyze my domainSee all tools