DNSSEC protects users from cache poisoning attacks. It is required for some government domains and recommended for any domain handling email or financial transactions.

DNSSEC Checker

Check if a domain is properly DNSSEC-signed. Verify DNSKEY, DS, and AD-flag presence with our free DNSSEC validator.

About this DNSSEC Checker tool

DNSSEC adds cryptographic signatures to DNS responses so resolvers can detect tampering. CheckHub verifies the AD flag, fetches DNSKEY and DS records, and reports whether the chain validates.

How to use the DNSSEC Checker

Step 1. Enter your domain.
Step 2. CheckHub queries DNSKEY and DS records and inspects the AD flag in the response.
Step 3. See whether each step of the trust chain is signed.

Frequently asked questions

Do I need DNSSEC?: DNSSEC protects users from cache poisoning attacks. It is required for some government domains and recommended for any domain handling email or financial transactions.

Related DNS Tools

DNS Propagation Checker - Check DNS propagation across global servers
DNS Lookup - Look up DNS records for any domain
Reverse DNS - Find hostname from IP address
DNS Compare - Compare DNS records between two domains
NS Lookup - Look up nameservers
MX Lookup - Look up mail server records