DNSSEC Checker
Check whether a domain has DNSSEC enabled, alongside its registrar, expiry date, and nameservers.
What DNSSEC does
DNSSEC (Domain Name System Security Extensions) cryptographically signs DNS records so resolvers can verify that an answer genuinely came from the authoritative source and was not forged in transit. With DNSSEC enabled, a domain is protected against cache-poisoning and DNS spoofing attacks. Our checker reports whether the registry has signed delegation in place for the domain.
Should you enable DNSSEC?
For most domains that matter — anything handling logins, payments, or email — DNSSEC is a worthwhile layer of protection, and most modern DNS providers enable it with a single click. Once on, you want to know if it is ever turned off unexpectedly, since that removes that protection.
Frequently asked questions
What does "DNSSEC on" mean here?
It means the registry has a signed (DS) delegation for the domain, so resolvers can validate its DNS responses.
Can I track DNSSEC changes?
Yes — with a free account, TrackDomains alerts you if a monitored domain's DNSSEC status changes.
Monitor your domains automatically
Create a free account to monitor up to 100 domains and get email alerts before any of them expire or change.
Start monitoring free