DNSSEC Checker

Check whether a domain zone is signed and the chain of trust validates

Free Online Tool

DNSSEC Checker — Complete Guide & Instructions

Check a domain's DNSSEC posture — DS and DNSKEY record presence plus a validating-resolver check that confirms whether the chain of trust actually validates.

How to Use DNSSEC Checker

  1. 1 Enter a domain.
  2. 2 Click Check — DS/DNSKEY records and resolver validation are queried.
  3. 3 Read the signed/unsigned verdict and validation status.

Key Features & Capabilities

  • DS and DNSKEY record counts.
  • AD-bit validation via a public DoH resolver.
  • Simple signed/unsigned grade.