What is HSTS Preload?

HSTS Preload is a list of domains that are hardcoded into Chrome (and other browsers) as being HTTPS only. This provides maximum security by preventing any insecure HTTP connections to these domains.

Why should I use HSTS Preload?

HSTS Preload provides the strongest protection against SSL/TLS protocol downgrade attacks and cookie hijacking. It ensures that your domain is always accessed over HTTPS, even on the first visit.

How do I get my site on the HSTS Preload list?

To be eligible for HSTS Preload, your site must: 1) Serve a valid HSTS header, 2) Redirect all HTTP traffic to HTTPS, 3) Have a max-age of at least 31536000 seconds (1 year), 4) Include the preload directive, and 5) Include the includeSubDomains directive.

Can I remove my domain from the preload list?

Yes, but the process can take months. You'll need to file a removal request and wait for the change to propagate through browser releases. It's important to be certain before adding a domain to the preload list.

What browsers support HSTS Preload?

HSTS Preload is supported by all major browsers including Chrome, Firefox, Safari, Edge, and Opera. The list is maintained by Chrome but is used by all other browsers.

HSTS Preload List Checker

Verify your domain's HSTS preload status and header configuration. Ensure your website is properly configured for maximum security.

HSTS Preload List Checker

Features

A comprehensive tool for checking HSTS configuration and preload list status.

Preload Status

Check if your domain is in the HSTS preload list.

Header Analysis

Detailed analysis of HSTS header configuration.

Security Validation

Verify HSTS implementation correctness.

Browser Coverage

Check status across major browsers.

Header Details

View max-age and subdomain settings.

Real-time Checks

Instant verification of current HSTS status.

Clean Interface

User-friendly results presentation.

Compliance Check

Verify preload list requirements.

How to Use the HSTS Preload List Checker

Step 1

Enter your domain name in the input field.

Step 2

Click the Check button to analyze HSTS status.

Step 3

View your domain's HSTS and preload list status.

Step 4

Review detailed HSTS header information if available.

Frequently Asked Questions about HSTS Preload

More Security Tools

Password Generator

Generate strong passwords and check their strength.

MD5 Generator

Generate MD5 hashes from text.

SSL Certificate Checker

Verify SSL certificates to ensure website security. Check validity, expiration, encryption strength, and more.

HTTP Header Analyzer

Analyze HTTP headers for security and performance. Get detailed insights and actionable recommendations.

Bcrypt Hash Generator

Generate secure bcrypt password hashes effortlessly. Customize cost factors and verify hashes with ease.

Credit Card Validator

Validate credit card numbers using the Luhn algorithm.