Website review
This review may include AI-generated content and is not individually verified. Domain, certificate and other facts come from the observed data on this page.
What is myaddr.tools?
myaddr.tools is a minimalist dynamic DNS (DDNS) service. It gives you a stable hostname that points to an IP address you control, and lets you update that address through a simple HTTP request — useful when your home server, router or lab machine sits behind an ISP connection whose IP changes.
The core appeal is low friction. You claim an available name, receive a secret key, and use that key to manage DNS records. No account is required to get started, and the service describes itself as ad-free and tracking-free.
What you get
- A subdomain under several suffixes that all resolve the same way, including
myaddr.tools,myaddr.dev(on the HSTS preload list) andmyaddr.io, plus their subdomains. - An HTTP-based Update API at
https://myaddr.tools/updatethat acceptsGET,POSTandPUTinterchangeably, reading parameters from the query string or from form-encoded or JSON bodies. - IPv4 and IPv6 handling: set
ipto an address, orip=selfto use the requester's address, withipv4.myaddr.toolsandipv6.myaddr.toolsto force a family. - ACME dns-01 challenge support, so you can issue TLS certificates from a CA such as Let's Encrypt without exposing an HTTP port. Challenge TXT records are cleaned up automatically after a few minutes.
- A Registration API at
https://myaddr.tools/regfor deleting a registration and releasing the name.
Trade-offs to weigh
The secret key is the whole security model: whoever holds it controls the name, and losing it means losing the name. Treat it like a password — store it in your router or update script, not in a public repository.
Retention is activity-based. Each IP family must be updated at least once every 90 days to stay active, tracked separately for IPv4 and IPv6, and no updates at all for 120 days deletes the registration and releases the name. That suits always-on devices running a periodic updater, but it is a poor fit for a name you set up once and forget.
A concrete scenario: you run a small home server and want home.myaddr.dev to follow your connection. A cron job or router script calls /update with your key and ip=self every few minutes; when your ISP reassigns the address, DNS follows within the record's TTL. If you also want HTTPS, request a certificate with a dns-01 challenge and let the service publish the TXT record.
Next step: check whether your preferred name is available, then read the Update API section before writing your first request, since the forgiving parameter handling makes it easy to test from a browser or curl.
How do I claim a subdomain on myaddr.tools without creating an account?
Claim the name you want at myaddr.tools; if it is free, the service immediately issues a secret key. There is no account, email or password: the secret key is your ownership credential. Keep it safe, because losing it means losing control of the name.
How the claim works
- Enter the subdomain you want (the part before
.myaddr.tools). - If available, you receive a secret key.
- Store that key in a password manager or another secure place.
The same name also resolves under the other suffixes the service offers, so one claim covers your-name.myaddr.tools, your-name.myaddr.dev, your-name.myaddr.io and their subdomains. That is convenient for testing, but it also means the name is a single point of control across all of them.
Pointing it at your address
With the key in hand, send a request to the update endpoint with key and ip parameters. Setting ip=self uses the address the request came from, which is what most home routers and update scripts want. IPv4 and IPv6 are tracked separately, so a dual-stack setup needs an update for each. A DELETE to the same endpoint removes both.
Practical considerations
- Updates are required. An address stays active only if it is refreshed at least once every 90 days; if nothing is updated for 120 days, the registration and name are deleted. Put the update in a cron job or your router's DDNS client rather than relying on memory.
- The key is the whole security model. Anyone holding it can repoint your name. Treat it like a password and avoid pasting it into shared scripts or public repositories.
- Fits simple, low-stakes uses. A home lab, a personal server behind a dynamic IP, or a test host are good matches. A name you depend on commercially is riskier, since an unrefreshed record can disappear.
- TLS is covered. The service supports ACME dns-01 challenges, so you can obtain certificates from Let's Encrypt-style CAs for the name without exposing a web server for validation.
If you want a broader comparison of free dynamic DNS options, Duck DNS and FreeDNS take different approaches to accounts and naming.
How can I use myaddr.tools to obtain a TLS certificate from Let's Encrypt?
Use myaddr.tools as the DNS-01 challenge responder for your domain, then let your ACME client (such as Certbot or acme.sh) request the certificate from Let's Encrypt.
How the flow works
- Claim a name at myaddr.tools. You receive a secret key; whoever holds it controls that name.
- When your ACME client needs to prove control, it creates a TXT record value for
_acme-challenge.<your-name>. - Push that value to myaddr.tools via the Update API with your
keyand theacme_challengeparameter. - myaddr.tools serves the value as a TXT record on all
_acme-challengesubdomains, so the CA can read it. - The TXT record is removed automatically after a few minutes — you don't need to clean it up.
Practical notes
- The service supports ACME dns-01 challenges for CAs like Let's Encrypt, so this is the intended path for certificates.
- Because the challenge record expires on its own, a failed validation usually means re-running your ACME client, not manually fixing DNS.
- The
myaddr.devnames are on the HSTS preload list, which is relevant if you plan to serve HTTPS from that hostname.
Concrete example
A self-hoster running a home server behind a changing IP can point home.myaddr.tools at their address, then use a DNS-01 hook in their ACME client to publish the challenge value and obtain a publicly trusted certificate — no inbound port 80 needed for HTTP-01 validation.
Decide before you start
DNS-01 is the right choice when you cannot expose port 80, need wildcard certificates, or want validation independent of your web server. If you can serve HTTP on port 80, HTTP-01 is simpler; choose DNS-01 when those constraints apply.
Next step: check whether your ACME client has a generic "manual" or scriptable DNS hook you can point at the myaddr.tools update endpoint.
What happens if I don't update my IP address regularly on myaddr.tools?
If you stop updating, the service eventually drops your records and then your registration. According to the site's own "Things to Know" section, there are two separate timers:
- 90 days per IP address: Each IPv4 and IPv6 address must be updated at least once every 90 days to stay active. The two are tracked independently, so letting IPv4 lapse doesn't affect an IPv6 record that is still being refreshed.
- 120 days of total inactivity: If no updates are made to your name at all for 120 days, the registration is deleted and the name is released for someone else to claim.
In practice, the gap between the two thresholds matters. A name that receives only IPv4 updates stays registered, but its IPv6 record can quietly disappear after 90 days — which is exactly the kind of failure that breaks dual-stack clients while leaving IPv4 visitors unaffected. Conversely, a name with steady updates on either record type never approaches the 120-day deletion.
What this means for you
- Home network with a router that supports custom DDNS: Most routers re-send the address on a schedule and on reconnect, so the 90-day window is rarely a problem. The risk is a router that only updates when the IP actually changes; a stable ISP address could sit unchanged for months and never trigger a refresh.
- A machine you set up once and forgot: This is the failure mode the policy targets. If you configured the update from a script or cron job and later retired the device, expect the record to vanish at 90 days and the name to be gone at 120.
- Certificate automation: If you use the ACME dns-01 support for TLS certificates, remember that challenge TXT records are removed automatically after a few minutes — that's separate from the IP timers and not something you need to maintain.
Practical next step
Add a scheduled update that runs well inside the 90-day window — for example, a weekly cron job or a router-side DDNS client — and make it send both an IPv4 and an IPv6 update, even if one of them is unchanged. If you only care about one address family, you can still send both to keep the registration comfortably clear of the 120-day deletion rule. And because the secret key is the only thing controlling the name, keep it somewhere you can recover it; losing it means losing the name regardless of how diligently you update.
Can I use myaddr.tools with my own domain name?
No. myaddr.tools works with subdomains of the domains it provides, not with a domain you already own. When you claim a name, you get that name under myaddr.tools, myaddr.dev, myaddr.io and their subdomains, all resolving to the same records. The page's own examples are your-name.myaddr.tools, your-name.myaddr.dev and your-name.myaddr.io.
So it is a dynamic DNS host for names it controls, not a DNS provider for arbitrary zones. If you need home.example.com to follow a changing IP, you would point your own domain's DNS at a provider that supports record management through an API, or run the update client against that provider instead.
Where myaddr.tools fits
- Homelab, Raspberry Pi or home router behind a changing IP. You claim a name, keep the secret key on the device, and have it call the update endpoint whenever its address changes.
- TLS certificates for a self-hosted service. The service supports ACME
dns-01challenges, so a client can publish a TXT record and let a CA like Let's Encrypt issue a certificate for your name. - Quick, low-friction naming. No account is required to claim a name, which suits throwaway or small setups more than a business identity.
The trade-offs worth knowing
The name is not yours in the registrar sense. Whoever holds the secret key controls it, and losing the key means losing the name. Records also expire: each IPv4 and IPv6 address must be updated at least once every 90 days, tracked separately, and with no updates at all for 120 days the registration is deleted. That makes it a poor fit for a name you intend to advertise or depend on long-term without monitoring.
If you own a real domain and want a hostname under it, decide first whether you need a stable, portable name or just a convenient one. For portability, use your own domain with a DNS provider you can move between; for convenience on a spare device, a name here is quick to set up. Either way, automate the update call rather than doing it by hand, since the expiry rules punish forgetfulness.
A practical next step: check whether your router, NAS or client software can send a plain HTTP GET with a key and IP parameter. If it can, it can talk to this service. If it only supports named providers, you would need a small script or a cron job to make the call.
How do I delete my registration and release my subdomain on myaddr.tools?
Send a DELETE request to https://myaddr.tools/reg with your secret key as the key parameter. That immediately and permanently deletes your registration and releases the name so anyone (including you) can claim it again.
A minimal example with curl:
curl -X DELETE "https://myaddr.tools/reg?key=YOUR_SECRET_KEY"
Practical points to keep in mind:
- This is irreversible. The secret key is the only credential; once the registration is deleted, the name is free for anyone to claim. If you might want the name back, don't delete — just stop updating, or keep updating to hold it.
- Your DNS records go away with it. The name stops resolving, so anything pointed at it (a home server, a VPN endpoint, a TLS certificate renewal via the ACME dns-01 flow) breaks. If you use it for Let's Encrypt certificates, plan to reissue or switch to another method.
- Deleting is not required to stop using the service. Inactivity alone removes a registration after 120 days with no updates, and individual IP records expire after 90 days without an update. So if you just want to abandon the name, doing nothing also works — it's simply slower and less certain about timing.
- If you only want to clear addresses, use
DELETE https://myaddr.tools/update?key=...instead; that removes IPv4 and IPv6 records but keeps the name registered.
Next step: decide whether you want the name released for someone else or just taken out of service. If it's the latter, confirm the record is gone by querying the hostname with dig or nslookup before you discard the key. For the exact parameter behavior and any changes, check the current documentation at myaddr.tools.
User reviews (0)