DNSSEC Checker
Paste DNSKEY or DS records and check whether their fields are well-formed.
Runs in your browser. Nothing is uploaded — your input is processed on this device and discarded when you close the tab.
DNSSEC Checker
How to use this tool
- Enter your values in the fields above.
- Press Generate to see the result.
- Use Load sample to try the worked example, Copy result to copy it, or Clear to start again.
Worked example
Pasting a DNSKEY record with flags 257 and a DS record reports both as well-formed.
What this tool does not do / Limits
This tool only checks the format of DNSKEY and DS text you paste. It does not query live DNS, does not validate signatures against a zone, and cannot prove a domain is DNSSEC-signed.
Frequently asked questions
Does this tool check my live domain?
No. It only reads the record text you paste, and it never contacts a DNS server.
What does well-formed mean here?
It means the fields are present and in the expected shape. It is not a cryptographic validation of the signature.
Related tools
JSON Studio
Format, validate, minify, query and compare JSON in your browser, with precise line-and-column errors.
LiveRegex Tester
Test patterns against sample text with match highlighting, capture groups and a safe one-second timeout.
LiveSecurity Header and DNS Checker
Check HSTS, CSP and other security headers, TLS details, and DNS/email authentication records (SPF, DKIM, DMARC).
Live