DNS.Health User Guide
DNS.Health helps you keep an eye on your domains and DNS setup — from checking a domain's records right now, to tracking every domain your organization owns and when it expires. This guide walks through everything you can do in the app, on both the web and Android.
🔍 Diagnostic Tools
Eleven quick checks covering DNS records, domain registration, security, mail delivery, and more.
📅 Domain Portfolio
Track every domain you're responsible for, with expiry reminders and SSL certificate status.
🏢 Organizations
Share domains and tools with your team, with the right level of access for each person.
📱 Web & Android
One account, works everywhere — including fingerprint sign-in on Android.
Getting Started
Requesting an account
DNS.Health accounts aren't self-service — from the sign-in screen, select Create your account to send us a short request instead. You'll be asked for:
- Your name
- Your business email address (please use your work email — personal addresses like Gmail, Outlook, Yahoo, or iCloud aren't accepted here)
- Your role
- Roughly how many domains you manage (optional)
- Why you'd like to use DNS.Health (optional)
After you accept the Privacy Policy and submit, our team reviews the request and sets up your account — you'll hear back by email.
Signing in
- Enter your username and password.
- Check Remember me if you'd like to stay signed in for about a month instead of just one day.
- Select Log in.
Fingerprint or face sign-in (Android)
On the Android app, once you've signed in with Remember me checked, you may be offered the option to enable biometric sign-in. Turn it on and next time you open the app you can unlock it with your fingerprint or face instead of typing your password. You can turn this on or off any time from Settings (the gear icon at the top right of the Home screen). It isn't available on the web app.
Organizations & Roles
Everything in DNS.Health — your domains, your teammates, your tools — lives inside an organization. You can create your own organization from the Organizations screen (you'll automatically become its admin), and you can also belong to other organizations your colleagues invite you to. If you belong to more than one, your role can be different in each.
What each role can do
| Role | What they can do |
|---|---|
| Admin | Everything a User can do, plus renaming the organization, inviting or removing teammates, changing their roles, and managing accounts created directly inside the organization. |
| User | Add, edit, and remove domains and domain contacts, and use all the diagnostic tools. |
| Viewer | Read-only access — can see the organization's domains and contacts, but can't change anything. |
Invitations
To add a teammate who already has a DNS.Health account, an organization admin can send them an invitation with a chosen role from the organization's screen. The invited person sees it waiting for them under Settings → Pending invitations, where they can accept or decline. Invitations expire after a while if left unanswered, so send a fresh one if it's been sitting too long.
Domain Contacts
Each organization can keep a list of domain contacts — the people responsible for specific domains (a name and, optionally, an email address). You can assign a contact as the "owner" of any domain in your Portfolio, making it easy to see who to reach out to about a given domain. A contact can't be deleted while they're still assigned as the owner of a domain.
Diagnostic Tools
All the tools below are available from the Tools screen, grouped into Registration Data, Monitor, Security, and Network/System, and the most popular ones also appear right on the Home screen. At the top of the Tools screen (and on the Home screen) you can pick a domain straight from your Portfolio in a dropdown, or type one in by hand — either way, tapping a tool runs it against that domain. Each individual tool screen also offers that same Portfolio dropdown above its own search field, alongside a host, IP, ASN, or URL if the tool needs something other than a plain domain. Results are always live, checked at that exact moment.
DNS Lookup
Look up any type of DNS record for a domain — such as A, AAAA, MX, TXT, NS, or CAA — and see exactly what's published.
RDAP
Look up who a domain, IP address, or ASN is registered to, including the registrar, nameservers, and important dates like registration and expiration.
WHOIS
The classic domain lookup — registrar, key dates, nameservers, and status — for any domain extension.
Reachability
Check whether a host is up and responding: DNS, HTTP, HTTPS, and a specific port are all tested at once, with response times.
DNS Records
A one-stop check of a domain's security posture: SPF, DMARC, DKIM, DNSSEC, CAA records, and its SSL/TLS certificate — including how many days are left before the certificate expires.
Mail Delivery
Checks whether a domain is set up to deliver email reliably — MX records, SPF, DMARC, and DKIM — summarized as a single score.
Propagation
See how a DNS record looks from a range of different DNS resolvers around the world at once — handy for confirming a change has fully rolled out everywhere.
HTTP Headers
Inspect the security headers a website sends back, such as HSTS and Content-Security-Policy, alongside the full set of raw headers.
Subdomain Discovery
Discover subdomains that exist for a given domain.
Zone Transfer
Checks whether a domain's nameservers are mistakenly allowing a full zone transfer — a misconfiguration that can leak an entire DNS zone to anyone who asks.
DNS Monitor
Keeps a record of a domain's DNS values over time and flags anything that changes — useful for spotting an unexpected or unauthorized change shortly after it happens.
Domain Portfolio
The Portfolio screen is where you track every domain your organization is responsible for, in one table.
For each domain you can record its registrar, the domain contact responsible for it, registration and expiration dates, whether it auto-renews, the annual cost, and any notes. Selecting Refresh SSL checks the domain's live certificate and stores its expiry date and issuer, so certificate expiry shows up right alongside domain expiry.
- Sort the list by soonest-to-expire, name, extension, or owner — domains close to expiring are highlighted so they're easy to spot.
- Import a spreadsheet (CSV) of domains to add many at once.
- Export the current list to a CSV file.
You'll see domains from every organization you belong to. A Viewer can see and export the list, but can't add, edit, or remove anything.
The Home screen also offers a quick Manage Portfolio search box, so you can jump straight to a domain without opening the full Portfolio screen first, plus a small Statistics panel showing how many of your domains are expiring within 30 days, 60 days, and a year.
Registrar Directory
A shared directory of domain registrars and resellers, which you pick from when assigning a registrar to a domain in your Portfolio. Everyone can browse it; adding new registrars to the shared directory is handled by the DNS.Health team.
Account Settings
Tap the gear icon at the top right of the Home screen to open Settings:
- Appearance — switch between Light, Dark, or match your device's System setting.
- Language — choose English, Français, Italiano, Deutsch, Nederlands, 日本語, or 繁體中文; this choice is remembered on this device only, so you can pick a different language on each device you use.
- Change password — you'll need your current password; new ones must be at least 8 characters.
- Pending invitations — accept or decline invitations to join other organizations.
- Biometric login — Android only; turn fingerprint/face sign-in on or off.
Web & Android
Use whichever is more convenient — your account and data are the same on both:
- Web app — open dns.health/manage in any modern browser, no installation needed.
- Android app — install it from the Google Play Store.
Getting Help
If you run into a problem or have a question that isn't answered here, reach out via the contact form on the DNS.Health homepage and our team will get back to you.