DNS Tools
DNSSEC Checker
Check whether a domain has DNSSEC enabled - DNSKEY and DS records present.
Enter a domain to check whether it has DNSSEC enabled - a security extension that protects against DNS spoofing.
JustChecker tracks your DNS and security posture continuously.
Frequently Asked Questions
DNSSEC (Domain Name System Security Extensions) adds cryptographic signatures to DNS records, letting resolvers verify that DNS responses haven't been tampered with or spoofed.
No - it checks for the presence of DNSKEY and DS records, which indicates DNSSEC is likely configured. A full chain-of-trust validation requires checking signatures all the way to the DNS root, which this lightweight tool doesn't perform.
This is configured through your domain registrar or DNS provider - most major providers offer a one-click DNSSEC enable option, which then requires adding a DS record at your registrar.