Create account
Security and networkingRuns in your browser

DNSSEC Domain Checker

Enter a domain to check DS and DNSKEY visibility as a DNSSEC publication check.

  • DS
  • DNSKEY
  • publication check
Online tool

Try the tool

Add your data, choose the settings, and get the result.

Domain

Your data stays here

Text and selected files are processed in the current browser and are not sent to a server to produce the result.

Reviewed: 2026-07-17
01

How to use it

  1. 1

    Enter a domain without protocol.

  2. 2

    Run the DS/DNSKEY check.

  3. 3

    Review delegation and zone-key visibility.

02

What the tool can do

  • Checks domain DS records.
  • Checks domain DNSKEY records.
  • Shows algorithms from DNSKEY publication signals.
03

Common use cases

  • Understand whether DNSSEC records are published.
  • Find DNSKEY without DS or DS without DNSKEY.
  • Check baseline DNSSEC hygiene for a domain.
04

How it works inside

The tool queries DS and DNSKEY through a DNS resolver.

Full validation later requires a separate validating resolver layer.

05

Questions and answers

Does this guarantee DNSSEC works?

No. This is a publication check. Full validation must verify the chain of trust.

Why is DS present but DNSKEY missing?

Possible zone, resolver, or cache-state issues. Check registrar and authoritative DNS.