Cas9 is an RNA-guided DNA endonuclease that targets foreign DNA for destruction as part of a bacterial adaptive immune system mediated by CRISPR (clustered regularly interspaced short palindromic repeats)1,2. Together with single-guide RNAs (sgRNA)3, Cas9 also functions as a powerful genome engineering tool in plants and animals4–6, and efforts are underway to increase the efficiency and specificity of DNA targeting for potential therapeutic applications7,8. Studies of off-target effects have shown that DNA binding is far more promiscuous than DNA cleavage9–11, yet the molecular cues that govern strand scission have not been elucidated. Here we show that the conformational state of the HNH nuclease domain directly controls DNA cleavage activity. Using intramolecular Förster resonance energy transfer (FRET) experiments to detect relative orientations of the Cas9 catalytic domains when associated with on- and off-target DNA, we find that DNA cleavage efficiencies scale with the extent to which the HNH domain samples an activated conformation. We furthermore uncover a surprising mode of allosteric communication that ensures concerted firing of both Cas9 nuclease domains. Our results highlight a proofreading mechanism beyond initial PAM recognition12 and RNA–DNA base-pairing3 that serves as a final specificity checkpoint before DNA double-strand break formation.