HSTS Preload List Checker.
Verify your domain's HSTS preload status and header configuration. Ensure your website is properly configured for maximum security.
HSTS Preload List Checker
How it works
Four steps.
- 01
Enter your domain name in the input field.
- 02
Click the Check button to analyze HSTS status.
- 03
View your domain's HSTS and preload list status.
- 04
Review detailed HSTS header information if available.
Features
Features.
Preload Status
Check if your domain is in the HSTS preload list.
Header Analysis
Detailed analysis of HSTS header configuration.
Security Validation
Verify HSTS implementation correctness.
Browser Coverage
Check status across major browsers.
Header Details
View max-age and subdomain settings.
Real-time Checks
Instant verification of current HSTS status.
Clean Interface
User-friendly results presentation.
Compliance Check
Verify preload list requirements.
What is HSTS Preload?
HSTS Preload is a list of domains that are hardcoded into Chrome (and other browsers) as being HTTPS only. This provides maximum security by preventing any insecure HTTP connections to these domains.
Why should I use HSTS Preload?
HSTS Preload provides the strongest protection against SSL/TLS protocol downgrade attacks and cookie hijacking. It ensures that your domain is always accessed over HTTPS, even on the first visit.
How do I get my site on the HSTS Preload list?
To be eligible for HSTS Preload, your site must: 1) Serve a valid HSTS header, 2) Redirect all HTTP traffic to HTTPS, 3) Have a max-age of at least 31536000 seconds (1 year), 4) Include the preload directive, and 5) Include the includeSubDomains directive.
Can I remove my domain from the preload list?
Yes, but the process can take months. You'll need to file a removal request and wait for the change to propagate through browser releases. It's important to be certain before adding a domain to the preload list.
What browsers support HSTS Preload?
HSTS Preload is supported by all major browsers including Chrome, Firefox, Safari, Edge, and Opera. The list is maintained by Chrome but is used by all other browsers.
Related tools
More Security & Privacy tools.
AES Cipher
Encrypt and decrypt using AES
Bcrypt Hash Generator
Generate secure BCrypt password hashes
Blowfish Cipher
Fast symmetric block cipher encryption with variable-length keys (32-448 bits)
Clickjacking Tester
Test websites for clickjacking vulnerabilities
CSP Generator
Generate Content Security Policy headers
CSRF Token Generator
Generate secure CSRF protection tokens
DES Cipher
DES and Triple DES encryption/decryption for legacy system compatibility
Hash Calculator
Calculate MD5 SHA hashes quickly
Built by Infyways
Need more than a tool.
These utilities are made by the Infyways studio. When a free tool is not enough, we build the real thing.
