SSLWatchTLS version checker
Find out which TLS version and cipher suite a website negotiates – TLS 1.3, TLS 1.2 or older – along with its certificate.
Try: google.com · github.com · cloudflare.com
What the TLS result means
Best. Faster one-round-trip handshake and only modern ciphers.
Fine when configured with modern AEAD ciphers (AES-GCM, ChaCha20).
Deprecated and blocked by all major browsers. Upgrade now.
Check the TLS version yourself
Linux/macOS: openssl s_client -connect example.com:443 -tls1_3. Windows PowerShell: see our PowerShell guide. Learn the differences in TLS 1.2 vs TLS 1.3.
Frequently asked questions
How do I check which TLS version a website uses?
Enter the domain in the TLS version checker. It performs a real handshake and reports the negotiated protocol (for example TLSv1.3) and cipher.
Is TLS 1.2 still secure?
Yes, when configured with modern ciphers. TLS 1.3 is preferred because it is faster and removes legacy options.
How do I check the TLS version in Windows?
Use PowerShell with System.Net.Security.SslStream and read the SslProtocol property, or check the registry under SCHANNEL\Protocols for enabled versions.
Are TLS 1.0 and 1.1 still supported?
No. They were deprecated in 2021 (RFC 8996) and are blocked by Chrome, Firefox, Safari and Edge.