Website profiles · Technology insights · Alternatives

myaddr.tools

A minimalist dynamic DNS service

No paid content found
Visit website
Profile views 7 Outbound visits 2 Normal
myaddr.tools Full homepage screenshot

At a glance

Category
Cloud & Hosting
Language
English
Paid-content signal
No paid content foundObserved
Registered
2023
Hosting
Hetzner Online GmbHInferred
HTTPS certificate trusted
PassedObserved
Last updated

Website review

This review may include AI-generated content and is not individually verified. Domain, certificate and other facts come from the observed data on this page.

What is myaddr.tools?

myaddr.tools is a minimalist dynamic DNS (DDNS) service. It gives you a stable hostname that points to an IP address you control, and lets you update that address through a simple HTTP request — useful when your home server, router or lab machine sits behind an ISP connection whose IP changes.

The core appeal is low friction. You claim an available name, receive a secret key, and use that key to manage DNS records. No account is required to get started, and the service describes itself as ad-free and tracking-free.

What you get

  • A subdomain under several suffixes that all resolve the same way, including myaddr.tools, myaddr.dev (on the HSTS preload list) and myaddr.io, plus their subdomains.
  • An HTTP-based Update API at https://myaddr.tools/update that accepts GET, POST and PUT interchangeably, reading parameters from the query string or from form-encoded or JSON bodies.
  • IPv4 and IPv6 handling: set ip to an address, or ip=self to use the requester's address, with ipv4.myaddr.tools and ipv6.myaddr.tools to force a family.
  • ACME dns-01 challenge support, so you can issue TLS certificates from a CA such as Let's Encrypt without exposing an HTTP port. Challenge TXT records are cleaned up automatically after a few minutes.
  • A Registration API at https://myaddr.tools/reg for deleting a registration and releasing the name.

Trade-offs to weigh

The secret key is the whole security model: whoever holds it controls the name, and losing it means losing the name. Treat it like a password — store it in your router or update script, not in a public repository.

Retention is activity-based. Each IP family must be updated at least once every 90 days to stay active, tracked separately for IPv4 and IPv6, and no updates at all for 120 days deletes the registration and releases the name. That suits always-on devices running a periodic updater, but it is a poor fit for a name you set up once and forget.

A concrete scenario: you run a small home server and want home.myaddr.dev to follow your connection. A cron job or router script calls /update with your key and ip=self every few minutes; when your ISP reassigns the address, DNS follows within the record's TTL. If you also want HTTPS, request a certificate with a dns-01 challenge and let the service publish the TXT record.

Next step: check whether your preferred name is available, then read the Update API section before writing your first request, since the forgiving parameter handling makes it easy to test from a browser or curl.

How do I claim a subdomain on myaddr.tools without creating an account?

Claim the name you want at myaddr.tools; if it is free, the service immediately issues a secret key. There is no account, email or password: the secret key is your ownership credential. Keep it safe, because losing it means losing control of the name.

How the claim works

  1. Enter the subdomain you want (the part before .myaddr.tools).
  2. If available, you receive a secret key.
  3. Store that key in a password manager or another secure place.

The same name also resolves under the other suffixes the service offers, so one claim covers your-name.myaddr.tools, your-name.myaddr.dev, your-name.myaddr.io and their subdomains. That is convenient for testing, but it also means the name is a single point of control across all of them.

Pointing it at your address

With the key in hand, send a request to the update endpoint with key and ip parameters. Setting ip=self uses the address the request came from, which is what most home routers and update scripts want. IPv4 and IPv6 are tracked separately, so a dual-stack setup needs an update for each. A DELETE to the same endpoint removes both.

Practical considerations

  • Updates are required. An address stays active only if it is refreshed at least once every 90 days; if nothing is updated for 120 days, the registration and name are deleted. Put the update in a cron job or your router's DDNS client rather than relying on memory.
  • The key is the whole security model. Anyone holding it can repoint your name. Treat it like a password and avoid pasting it into shared scripts or public repositories.
  • Fits simple, low-stakes uses. A home lab, a personal server behind a dynamic IP, or a test host are good matches. A name you depend on commercially is riskier, since an unrefreshed record can disappear.
  • TLS is covered. The service supports ACME dns-01 challenges, so you can obtain certificates from Let's Encrypt-style CAs for the name without exposing a web server for validation.

If you want a broader comparison of free dynamic DNS options, Duck DNS and FreeDNS take different approaches to accounts and naming.

How can I use myaddr.tools to obtain a TLS certificate from Let's Encrypt?

Use myaddr.tools as the DNS-01 challenge responder for your domain, then let your ACME client (such as Certbot or acme.sh) request the certificate from Let's Encrypt.

How the flow works

  1. Claim a name at myaddr.tools. You receive a secret key; whoever holds it controls that name.
  2. When your ACME client needs to prove control, it creates a TXT record value for _acme-challenge.<your-name>.
  3. Push that value to myaddr.tools via the Update API with your key and the acme_challenge parameter.
  4. myaddr.tools serves the value as a TXT record on all _acme-challenge subdomains, so the CA can read it.
  5. The TXT record is removed automatically after a few minutes — you don't need to clean it up.

Practical notes

  • The service supports ACME dns-01 challenges for CAs like Let's Encrypt, so this is the intended path for certificates.
  • Because the challenge record expires on its own, a failed validation usually means re-running your ACME client, not manually fixing DNS.
  • The myaddr.dev names are on the HSTS preload list, which is relevant if you plan to serve HTTPS from that hostname.

Concrete example

A self-hoster running a home server behind a changing IP can point home.myaddr.tools at their address, then use a DNS-01 hook in their ACME client to publish the challenge value and obtain a publicly trusted certificate — no inbound port 80 needed for HTTP-01 validation.

Decide before you start

DNS-01 is the right choice when you cannot expose port 80, need wildcard certificates, or want validation independent of your web server. If you can serve HTTP on port 80, HTTP-01 is simpler; choose DNS-01 when those constraints apply.

Next step: check whether your ACME client has a generic "manual" or scriptable DNS hook you can point at the myaddr.tools update endpoint.

What happens if I don't update my IP address regularly on myaddr.tools?

If you stop updating, the service eventually drops your records and then your registration. According to the site's own "Things to Know" section, there are two separate timers:

  • 90 days per IP address: Each IPv4 and IPv6 address must be updated at least once every 90 days to stay active. The two are tracked independently, so letting IPv4 lapse doesn't affect an IPv6 record that is still being refreshed.
  • 120 days of total inactivity: If no updates are made to your name at all for 120 days, the registration is deleted and the name is released for someone else to claim.

In practice, the gap between the two thresholds matters. A name that receives only IPv4 updates stays registered, but its IPv6 record can quietly disappear after 90 days — which is exactly the kind of failure that breaks dual-stack clients while leaving IPv4 visitors unaffected. Conversely, a name with steady updates on either record type never approaches the 120-day deletion.

What this means for you

  • Home network with a router that supports custom DDNS: Most routers re-send the address on a schedule and on reconnect, so the 90-day window is rarely a problem. The risk is a router that only updates when the IP actually changes; a stable ISP address could sit unchanged for months and never trigger a refresh.
  • A machine you set up once and forgot: This is the failure mode the policy targets. If you configured the update from a script or cron job and later retired the device, expect the record to vanish at 90 days and the name to be gone at 120.
  • Certificate automation: If you use the ACME dns-01 support for TLS certificates, remember that challenge TXT records are removed automatically after a few minutes — that's separate from the IP timers and not something you need to maintain.

Practical next step

Add a scheduled update that runs well inside the 90-day window — for example, a weekly cron job or a router-side DDNS client — and make it send both an IPv4 and an IPv6 update, even if one of them is unchanged. If you only care about one address family, you can still send both to keep the registration comfortably clear of the 120-day deletion rule. And because the secret key is the only thing controlling the name, keep it somewhere you can recover it; losing it means losing the name regardless of how diligently you update.

Can I use myaddr.tools with my own domain name?

No. myaddr.tools works with subdomains of the domains it provides, not with a domain you already own. When you claim a name, you get that name under myaddr.tools, myaddr.dev, myaddr.io and their subdomains, all resolving to the same records. The page's own examples are your-name.myaddr.tools, your-name.myaddr.dev and your-name.myaddr.io.

So it is a dynamic DNS host for names it controls, not a DNS provider for arbitrary zones. If you need home.example.com to follow a changing IP, you would point your own domain's DNS at a provider that supports record management through an API, or run the update client against that provider instead.

Where myaddr.tools fits

  • Homelab, Raspberry Pi or home router behind a changing IP. You claim a name, keep the secret key on the device, and have it call the update endpoint whenever its address changes.
  • TLS certificates for a self-hosted service. The service supports ACME dns-01 challenges, so a client can publish a TXT record and let a CA like Let's Encrypt issue a certificate for your name.
  • Quick, low-friction naming. No account is required to claim a name, which suits throwaway or small setups more than a business identity.

The trade-offs worth knowing

The name is not yours in the registrar sense. Whoever holds the secret key controls it, and losing the key means losing the name. Records also expire: each IPv4 and IPv6 address must be updated at least once every 90 days, tracked separately, and with no updates at all for 120 days the registration is deleted. That makes it a poor fit for a name you intend to advertise or depend on long-term without monitoring.

If you own a real domain and want a hostname under it, decide first whether you need a stable, portable name or just a convenient one. For portability, use your own domain with a DNS provider you can move between; for convenience on a spare device, a name here is quick to set up. Either way, automate the update call rather than doing it by hand, since the expiry rules punish forgetfulness.

A practical next step: check whether your router, NAS or client software can send a plain HTTP GET with a key and IP parameter. If it can, it can talk to this service. If it only supports named providers, you would need a small script or a cron job to make the call.

How do I delete my registration and release my subdomain on myaddr.tools?

Send a DELETE request to https://myaddr.tools/reg with your secret key as the key parameter. That immediately and permanently deletes your registration and releases the name so anyone (including you) can claim it again.

A minimal example with curl:

curl -X DELETE "https://myaddr.tools/reg?key=YOUR_SECRET_KEY"

Practical points to keep in mind:

  • This is irreversible. The secret key is the only credential; once the registration is deleted, the name is free for anyone to claim. If you might want the name back, don't delete — just stop updating, or keep updating to hold it.
  • Your DNS records go away with it. The name stops resolving, so anything pointed at it (a home server, a VPN endpoint, a TLS certificate renewal via the ACME dns-01 flow) breaks. If you use it for Let's Encrypt certificates, plan to reissue or switch to another method.
  • Deleting is not required to stop using the service. Inactivity alone removes a registration after 120 days with no updates, and individual IP records expire after 90 days without an update. So if you just want to abandon the name, doing nothing also works — it's simply slower and less certain about timing.
  • If you only want to clear addresses, use DELETE https://myaddr.tools/update?key=... instead; that removes IPv4 and IPv6 records but keeps the name registered.

Next step: decide whether you want the name released for someone else or just taken out of service. If it's the latter, confirm the record is gone by querying the hostname with dig or nslookup before you discard the key. For the exact parameter behavior and any changes, check the current documentation at myaddr.tools.

Related questions

More questions →
How to Delete a myaddr.tools Registration

Send a DELETE request to https://myaddr.tools/reg with your key parameter. The registration is removed immediately and permanently, and your name is released back into the pool of available names. There is no undo — if you want the name again later, you have to claim it from scratch and you will receive a new secret key.

What You Need Before Deleting

  • Your secret key. This is the key you received when you first claimed your name. It is the only credential that authorizes changes to your registration, and it cannot be recovered if lost.
  • A decision about whether you actually want to delete. If you only want to stop using the name temporarily, deleting is the wrong move — see the alternative below.

The Deletion Request

The /reg endpoint accepts a DELETE request with your key:

curl -X DELETE "https://myaddr.tools/reg?key=YOUR_SECRET_KEY"

The key can be passed as a URL query parameter. The same key that manages your DNS records through the /update endpoint authorizes deletion here.

What Happens After You Delete

Effect Detail
Registration Removed immediately and permanently
Name Released and becomes available for anyone to claim
DNS records Stop resolving, since the name no longer belongs to you
Recovery Not possible — you would need to re-claim the name and get a new secret key

Because the name is released instantly, someone else could claim it right after you delete. If you have anything pointing at that hostname — a server, a certificate renewal hook, a monitoring check — those references will break.

Before You Delete: Check the Alternative

If your goal is simply to stop the name from expiring on its own, you do not need to delete it. myaddr.tools keeps a registration alive as long as you update each IP address at least once every 90 days, and deletes the registration automatically after 120 days with no updates at all. So if you want to keep the name but stop actively using it, you can let it lapse naturally rather than deleting — though note that letting it lapse has the same end result (the name is released), just on the service's schedule instead of yours.

Deleting manually is the right choice when you want the name gone now and you are certain you will not want it back.

Common Pitfalls

  • Losing the key first. If you no longer have your secret key, you cannot delete the registration through the API. The key is the only proof of ownership.
  • Expecting a confirmation step. The deletion is immediate. There is no grace period or confirmation prompt to catch a mistake.
  • Assuming the name stays reserved. Once released, the name is fair game for anyone. If you plan to re-claim it, do so promptly.
How to Get Started with myaddr.tools and Claim a Subdomain

Claiming a name on myaddr.tools takes seconds and requires no account: visit the site, pick an available name, and you receive a secret key. That key is the only credential for the name — whoever holds it controls the DNS records, and if you lose it you lose the name. Once you have the key, you manage records through the HTTP-based Update API.

Claiming your name

Go to myaddr.tools and claim the name you want. If it is available, the service returns a secret key. There is no signup, email confirmation, or password to manage.

Two things follow from that design:

  • Store the key somewhere safe immediately. There is no recovery path described — losing the key means losing control of the name.
  • Treat the key as a password. Anyone who has it can change or delete your records.

Your name resolves across several domains at once, all pointing to the same records:

Domain Note
your-name.myaddr.tools Primary
your-name.myaddr.dev On the HSTS preload list
your-name.myaddr.io —

All subdomains of the above also resolve, so you can use hosts like ipv4.your-name.myaddr.tools or ipv6.your-name.myaddr.tools.

Updating DNS records with the Update API

The endpoint is https://myaddr.tools/update. It is deliberately forgiving:

  • GET, POST, and PUT are treated as equivalent update requests.
  • Parameters are read from the URL query string and from POST/PUT bodies.
  • Bodies may be application/x-www-form-urlencoded or application/json.
  • Success returns body OK with status code 200; failures return a helpful error message with a 4xx status.

Add or update an IP address

Send a GET, POST, or PUT request to /update with key and ip parameters. Set ip to any valid IPv4 or IPv6 address, or use ip=self to record the requester's own IP address.

https://myaddr.tools/update?key=YOUR_KEY&ip=self

To force a specific address family, use the hosts ipv4.myaddr.tools or ipv6.myaddr.tools. Adding an IPv4 address replaces any existing IPv4 address, and the same applies to IPv6 — so each family holds one address at a time.

Add an ACME dns-01 challenge

For TLS certificates from CAs like Let's Encrypt, send a request with key and acme_challenge:

https://myaddr.tools/update?key=YOUR_KEY&acme_challenge=YOUR_CHALLENGE_VALUE

The value is served as a TXT record on all _acme-challenge subdomains. Challenge TXT records are removed automatically after a few minutes, so you do not need to clean them up.

Delete an IP address

A DELETE request to /update with key removes both the IPv4 and IPv6 addresses. This always responds with status code 204.

curl -X DELETE "https://myaddr.tools/update?key=YOUR_KEY"

Keeping your name active

Two independent timers apply:

  • 90 days per IP address. Each IP (IPv4 and IPv6 tracked separately) must be updated at least once every 90 days to stay active.
  • 120 days per name. If no updates are made to your name at all for 120 days, the registration is deleted and the name is released.

If your address rarely changes, schedule a periodic update anyway — a cron job or timer that calls /update with ip=self is enough to reset both clocks.

Deleting your registration

To immediately and permanently delete your registration and release the name, send a DELETE request to https://myaddr.tools/reg with your key:

curl -X DELETE "https://myaddr.tools/reg?key=YOUR_KEY"

This is irreversible — the name becomes available to anyone else.

Common snags

  • Lost key: no recovery is described, so the name is effectively gone. Save the key before doing anything else.
  • Only one address per family: a new IPv4 update overwrites the previous IPv4 record rather than adding a second one.
  • ACME records are temporary: they disappear after a few minutes, which is fine for validation but not for long-lived TXT records.
  • Silent expiry: missing the 90- or 120-day windows deletes records or the whole registration, so automate updates if you are not checking in regularly.
What is myaddr.tools and what does it do?

myaddr.tools is a minimalist dynamic DNS (DDNS) service that maps a changing IP address to a fixed subdomain name. You claim a name, receive a secret key, and then use an HTTP-based API to point that name at whatever IPv4 or IPv6 address you currently have. It is aimed at people who need a stable hostname for a machine on a dynamic connection — a home server, a router, a small VPS — without creating an account or dealing with a traditional DNS control panel.

What problem it solves

Most ISPs hand out IP addresses that change. If you want to reach a device at home from elsewhere, you need a name that always resolves to the current address. myaddr.tools provides that name and lets you update the address programmatically, so a scheduled script or a router's DDNS client can keep it current.

The service is deliberately small in scope. According to its own description, it is "no ads, no tracking, no nonsense," and you can get a subdomain in seconds with no account required.

Key features

  • No account required. You claim a name and get a secret key. The key is the only credential — whoever holds it controls the name.
  • HTTP-based update API. Updates work over plain HTTP requests, which makes them easy to call from scripts, cron jobs, or router firmware.
  • IPv4 and IPv6 support. You can set either address type, and they are tracked independently.
  • ACME dns-01 support. You can serve the TXT record needed for a dns-01 challenge, which lets you obtain TLS certificates from CAs like Let's Encrypt for a name that has no public web server.
  • Multiple suffixes. A single claimed name resolves across your-name.myaddr.tools, your-name.myaddr.dev (on the HSTS preload list), your-name.myaddr.io, and all subdomains of those.
  • Public Suffix List. The suffixes are added to the Public Suffix List, which matters for cookie isolation and for services that treat each subdomain as a separate registrable domain.

How the update API works

The update endpoint is at https://myaddr.tools/update. It is intentionally forgiving:

  • GET, POST, and PUT are treated as equivalent update requests.
  • Parameters can come from the URL query string or from POST/PUT bodies.
  • Bodies can be application/x-www-form-urlencoded or application/json.
  • Success returns body OK with status code 200; errors return a helpful message with a 4xx status.

Add or update an IP address

Send a request to /update with key and ip parameters. Set ip to any valid IPv4 or IPv6 address, or use ip=self to use the requester's own IP address. To force a specific protocol, use the hosts ipv4.myaddr.tools or ipv6.myaddr.tools.

Adding an IPv4 address replaces any existing IPv4 address, and the same applies to IPv6 — so each address family holds one value at a time.

Add an ACME challenge

Send a request to /update with key and acme_challenge parameters. The challenge value is served as a TXT record on all _acme-challenge subdomains. These TXT records are automatically removed after a few minutes, which matches the short lifetime of an ACME challenge.

Delete an IP address

A DELETE request to /update with key removes both the IPv4 and IPv6 addresses. This always responds with status code 204.

Registration management

The registration endpoint is at https://myaddr.tools/reg. To immediately and permanently delete your registration and release your name, send a DELETE request to /reg with your key.

Things to know before you rely on it

Two expiry rules matter if you plan to depend on the service:

Rule Detail
Per-IP activity Each IP address (IPv4 and IPv6 tracked separately) must be updated at least once every 90 days to stay active.
Registration activity If no updates are made to your name for 120 days, the registration is deleted and the name is released.

The practical consequence: an unattended device that stops reporting will eventually lose its name. If you are setting this up for a remote machine, make sure whatever updates the record runs on a schedule well inside these windows.

When it fits and when it doesn't

myaddr.tools is a good fit if you want a free-of-frills hostname for a dynamic IP, you are comfortable calling an HTTP API or configuring a DDNS client, and you want to avoid account signup. It is a poor fit if you need a full DNS management interface, many records per name, or a guarantee of long-term persistence without ongoing updates — the 90/120-day rules mean the service expects you to keep it informed.

Because the secret key is the sole credential, treat it like a password: anyone who has it can repoint your name. Store it wherever your update script runs, and use the /reg delete endpoint if you ever want to release the name permanently.

What are the update and expiration rules for myaddr.tools registrations?

myaddr.tools keeps a name alive as long as you keep updating it. Each IP address (IPv4 and IPv6 tracked separately) must be updated at least once every 90 days to stay active, and if no updates are made to your name for 120 days, the registration is deleted and the name is released. The secret key is the only credential — lose it and you lose control of the name.

The two clocks you need to watch

There are two separate timers, and they measure different things.

Rule Applies to Threshold What happens
Per-IP activity Each IPv4 and IPv6 address independently 90 days That IP record goes inactive
Name activity The whole registration 120 days Registration deleted, name released

The per-IP rule is stricter and more granular. If you update your IPv4 address but never touch IPv6, the IPv6 record can go inactive on its own 90-day clock while the name itself stays alive. The 120-day rule is the backstop: any update at all resets it, but if nothing happens for four months, the whole registration disappears.

How to keep a record active

Send an update to the /update endpoint before the 90-day window closes for each address family you use.

https://myaddr.tools/update?key=YOUR_SECRET_KEY&ip=self

Key points from the API:

  • GET, POST, and PUT are treated as equivalent update requests.
  • Parameters can come from the URL query string or from POST/PUT bodies (application/x-www-form-urlencoded or application/json).
  • Set ip to any valid IPv4 or IPv6 address, or use ip=self to record the requester's own IP.
  • To force a specific family, use the host ipv4.myaddr.tools or ipv6.myaddr.tools.
  • Adding an IPv4 address replaces any existing IPv4 address; the same applies to IPv6.
  • Success returns body OK with status 200; failures return a helpful message with a 4xx status.

If you only ever use one address family, you only need to maintain that one. But if you have both an A and an AAAA record, both need their own update within 90 days.

What happens when a record or name expires

  • IP record inactive (missed 90 days): that specific address stops resolving. The name and your other records are unaffected.
  • Name inactive (missed 120 days): the registration is deleted and the name is released, meaning someone else can claim it.

Because the name is released on the 120-day mark, a long outage can cost you the subdomain permanently. If you expect to be away, a single update before you leave resets the clock.

The secret key is the whole account

There is no account and no recovery flow. When you claim a name, you receive a secret key, and that key gives whoever holds it control over the name. If you lose the secret key, you lose the name. Store it somewhere durable before you rely on the registration.

Deleting things on purpose

  • Delete IP addresses: send a DELETE request to /update with key. This removes both IPv4 and IPv6 addresses and always responds with status 204.
  • Delete the registration: send a DELETE request to /reg with key. This immediately and permanently deletes the registration and releases the name.

ACME challenge records are temporary

If you use the acme_challenge parameter to serve a TXT record for a dns-01 challenge, that record is served on all _acme-challenge subdomains and is automatically removed after a few minutes. You do not need to clean it up, and it does not count as a long-term record you have to maintain.

Practical checklist

  • Update each address family you use at least every 90 days.
  • Make at least one update every 120 days to keep the name itself.
  • Back up the secret key somewhere you will not lose it.
  • If you stop using a name, delete the registration so the name is freed rather than left to expire.
How does the myaddr.tools Update API work?

The myaddr.tools Update API is a single HTTP endpoint at https://myaddr.tools/update that manages the DNS records for the name you claimed. You authenticate with the secret key you received at registration, then add or update an IP address, add an ACME dns-01 challenge TXT record, or delete your addresses. The endpoint is deliberately forgiving: it treats GET, POST, and PUT as equivalent update requests, reads parameters from the URL query string or from POST/PUT bodies, and accepts bodies as either application/x-www-form-urlencoded or application/json. On success it responds with the body OK and status code 200; otherwise it returns a helpful error message with a 4xx status.

This is for anyone who has already claimed a name and holds its secret key. If you don't have a key yet, claim a name first — the key is what gives you control over the name, and losing it means losing the name.

Adding or updating an IP address

Send a GET, POST, or PUT request to /update with two parameters:

Parameter Value
key Your secret key
ip Any valid IPv4 or IPv6 address, or self to use the requester's IP address

For example, a GET request using your own connection's IP:

https://myaddr.tools/update?key=YOUR_KEY&ip=self

Expected result: the response body is OK with status 200, and the record now points at that address.

Two behaviors matter here:

  • IPv4 and IPv6 are tracked separately. Adding an IPv4 address replaces any existing IPv4 address, and the same applies to IPv6. One update does not overwrite the other family.
  • You can force the address family by using the host ipv4.myaddr.tools or ipv6.myaddr.tools instead of myaddr.tools. This is useful when ip=self might otherwise resolve to the wrong family — for instance, on a dual-stack host where you want to publish only the IPv6 address.

Adding an ACME dns-01 challenge

To satisfy a dns-01 challenge for a TLS certificate (for example from Let's Encrypt), send a GET, POST, or PUT request to /update with:

Parameter Value
key Your secret key
acme_challenge The challenge value

The acme_challenge value is served as a TXT record on all _acme-challenge subdomains. Challenge TXT records are removed automatically after a few minutes, so you don't need to clean them up yourself — but you do need to complete the challenge before they disappear.

Deleting an IP address

Send a DELETE request to /update with your key. This removes both the IPv4 and IPv6 addresses. The endpoint always responds with status code 204.

DELETE https://myaddr.tools/update?key=YOUR_KEY

Note the asymmetry: an update request replaces one address family at a time, while a delete clears both at once.

Keeping the name alive

The API is also how you keep your registration from expiring:

  • Each IP address (IPv4 and IPv6) must be updated at least once every 90 days to remain active, and the two families are tracked independently.
  • If no updates are made to your name for 120 days, the registration is deleted and the name is released.

So a periodic update call — even one that re-sends the same address — doubles as your keep-alive. If you want to remove the registration entirely and release the name immediately, send a DELETE request to https://myaddr.tools/reg with your key.

Common sticking points

  • Using the wrong key. The key is the only credential; there is no account recovery. A 4xx with an error message usually means the key is wrong or missing.
  • Forgetting the family split. If you only ever update IPv4, your IPv6 record (if any) still needs its own update within the 90-day window.
  • Assuming the challenge record persists. ACME TXT records vanish after a few minutes, so run the challenge promptly after adding it.
  • Mixing up /update and /reg. /update manages DNS records; /reg manages the registration itself.

Website Overview

The available information shows a mix of normal operation and configuration gaps. Depending on how the website is used, these gaps may affect secure access or the consistency of its public presentation.

Domain and Registration

Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain has about 2 years of registration history; its current configuration provides more context than age alone. The registrar is Porkbun LLC, a widely used domain service provider. The domain uses the common .tools extension, which is not an independent safety signal.

DNS and Email

Nameservers are provided by myaddr.tools, indicating managed DNS hosting. DNSSEC is enabled, allowing validating resolvers to authenticate signed DNS data. No CNAME was found; the observed records resolve directly to addresses. MX records point to a mail host under the site's domain; its maintenance and authentication settings warrant attention. SPF and DMARC are configured. DKIM status is unknown.

TLS and Certificates

The public key uses EC with 256 bits. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued by Let's Encrypt, commonly associated with automated certificate services. The certificate's total validity is about 89 days, consistent with a short renewal cycle.

HTTP and Browser Security

The response lacks these common security headers: X-Content-Type-Options, Referrer-Policy, Permissions-Policy. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. No obvious internal addresses or debug information were found in the headers. The Server header identifies nginx without an exact version. No explicit CDN or WAF marker was found in the response headers.

Technology Stack Analysis

The public page identifies Bootstrap, nginx without precise versions, leaving fewer clues for version-specific scanning.

Search and Social Sharing

No Open Graph metadata was detected, so social previews may depend on platform inference. The title has 26 characters, within a common display range. A meta description is present, with 32 characters. The observed directives allow indexing and link following. No Generator meta tag is publicly exposed.

Hosting and Email

DNSmyaddr.tools
HostingHetzner Online GmbH
EmailNo incoming email service
Approximate IP geolocation (inferred; a CDN or proxy may differ from the origin server) Germany flagNuremberg, Bavaria, Germany Inferred 116.203.95.251

Registration details

RDAP / WHOIS

RegistrarPorkbun LLC
Registered2023-11-06
Expires2030-11-06
Domain statusclient delete prohibited、client transfer prohibited
Nameserversns1.myaddr.tools、ns2.myaddr.tools
DNSSECsigned

DNS records

DNS

TypeNameValueTTLPriority
Amyaddr.tools116.203.95.251300—
AAAAmyaddr.tools2a01:4f8:1c1e:84c3::1000300—
MXmyaddr.tools.3000
NSmyaddr.toolsns1.myaddr.tools1800—
NSmyaddr.toolsns2.myaddr.tools1800—
TXTmyaddr.toolsThis domain is a public suffix. Report abuse to [email protected].300—
TXTmyaddr.toolsgoogle-site-verification=Rej-94n_q-BvwImMzCsuHwSVSC30AgrsRuv5UHjn7Vk300—
TXTmyaddr.toolsv=spf1 -all300—
DSmyaddr.tools14635 15 2 68f5af7c9fd7bc3a19ee7d85147405c6e8e5871088478e0545ab8d0429a6b9413600—
DMARC_dmarc.myaddr.toolsv=DMARC1; p=reject;300—

TLS and certificates

TLS / SSL

AssessmentNormal configuration
Supported protocolsTLSv1.2、TLSv1.3
Negotiated protocolTLSv1.3
Certificate subjectmyaddr.tools
IssuerLet's Encrypt
Valid until2026-12-10T03:09 · Remaining when checked: 70 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HTTP

HeaderValue
content-typetext/html
cache-controlmax-age=3600, must-revalidate
servernginx
strict-transport-securitymax-age=31536000
content-security-policyframe-ancestors 'none'

Identified technologies

Bootstrapnginx

Pages, Search and Sharing

Meta descriptionA minimalist dynamic DNS service
Canonical URLhttps://myaddr.tools
LanguageEnglish (default)
Twitter CardNot detected

Unknown

No robots.txt found

No sitemaps found

User reviews (0)

  • No reviews yet.