DNSSEC Checker
Check whether a domain is DNSSEC-signed.
About this check
DNSSEC adds cryptographic signatures to DNS so resolvers can verify that answers were not tampered with in transit. It defends against cache poisoning and DNS spoofing attacks.
This tool reports whether the domain publishes a DNSKEY (i.e., is signed). Full validation also depends on a correct DS record at the parent zone and a validating resolver.
Frequently asked questions
Does DNSSEC encrypt DNS?
No — it authenticates DNS answers. For privacy use DNS over HTTPS/TLS in addition.
Why enable DNSSEC?
It prevents attackers from forging DNS responses that could redirect your traffic or email.
Want the full picture?
Get a complete security report with an exposure score across email, DNS, TLS, exposure and breach metadata.
Run a full report All tools