Cipher Suite Checker

Test which SSL/TLS cipher suites a server supports

About Cipher Suites

A cipher suite is a set of cryptographic algorithms used to secure a TLS connection, including key exchange, authentication, encryption, and message authentication code methods. Our Cipher Suite Checker tests which cipher suites a server supports, grades their strength, checks for forward secrecy (PFS), and verifies TLS 1.3 compatibility to help you maintain a secure and modern TLS configuration.

How to Use

Enter the domain name of the server you want to test.
Click Check Ciphers to scan the server's supported cipher suites.
Review the overall grade, number of supported ciphers, and TLS 1.3 status.
Check individual cipher grades and identify weak or deprecated ciphers to disable.

Use Cases

Security Hardening: Identify and disable weak or deprecated cipher suites on your server.
Compliance Auditing: Verify that your TLS configuration meets PCI DSS, HIPAA, or other regulatory requirements.
Forward Secrecy Verification: Confirm that your server supports PFS ciphers for enhanced security.
Upgrade Planning: Check if your server supports TLS 1.3 before planning an upgrade from older protocols.

Frequently Asked Questions

Forward secrecy (also called Perfect Forward Secrecy or PFS) ensures that session keys are not compromised even if the server's private key is exposed. It uses ephemeral key exchange algorithms like ECDHE or DHE. Servers supporting PFS ciphers provide stronger protection for past communications.

You should disable all cipher suites using RC4, DES, 3DES, IDEA, and SEED encryption. Also disable all EXPORT-grade ciphers and those using anonymous Diffie-Hellman (aNULL). Only enable cipher suites with AEAD encryption like AES-GCM or ChaCha20-Poly1305 for modern security.

TLS 1.3 is the latest TLS protocol version that removes legacy and insecure features, reduces handshake latency to one round trip (or zero for resumed connections), requires forward secrecy for all ciphers, and simplifies the cipher suite list. It provides significant security and performance improvements over TLS 1.2 and earlier.

Tips & Best Practices

•Analyze cipher suite composition to understand security properties
•Use cipher suite analysis when creating server configurations
•Monitor cipher suite changes that may indicate security issues
•Compare cipher suites across servers for consistency

Technical Details

Analysis: Cipher suite component breakdown (key exchange, encryption, MAC)
Components: ECDHE, DHE, AES, ChaCha20, SHA, GCM, CBC analysis
Security: Security rating for each cipher suite component
Output: Cipher suite breakdown with security assessment