DNSSEC Checker

Check DNSKEY DS records and resolver AD validation status using DNS-over-HTTPS.

DNSSEC cryptographically signs DNS records so resolvers can detect tampering. This checks whether the zone publishes DNSKEY records and whether Cloudflare's validating resolver marks the answer as authenticated (AD flag). Queried live over Cloudflare DNS-over-HTTPS.

About this tool

DNSSEC Checker is a single-purpose utility on instant.tw, a free toolbox of calculators, converters, generators, and quick lookups. Everything works in your browser — nothing is uploaded, nothing is stored on a server unless explicitly noted.

Category: Developer Tools — Advanced. Browse more Developer Tools — Advanced tools.