Free tool · No account needed
TXT Record Lookup
TXT records hold free-form text, and most of what they carry today is read by machines: SPF and DMARC policies for email, DKIM public keys, and the verification strings services ask you to publish to prove you own a domain.
About TXT records
What the answer tells you
- SPF lives at the domain itself and starts with v=spf1. A domain may have only one SPF record — two make both invalid.
- DMARC lives at _dmarc.<domain> and starts with v=DMARC1. DKIM keys live at <selector>._domainkey.<domain>.
- Long values are split into strings of up to 255 characters in DNS. This lookup joins them back together, as mail servers do.
example.com. 3600 IN TXT "v=spf1 include:_spf.example.com -all"
Record types
Look up any record type
Each type has a page of its own, explaining what the record does and what to look for in the answer.
- AA Record LookupIPv4 address
- AAAAAAAA Record LookupIPv6 address
- CNAMECNAME LookupAlias
- MXMX LookupMail servers
- TXTTXT Record LookupText, SPF and DMARC
- NSNS LookupNameservers
- SOASOA Record LookupZone authority
- CAACAA Record LookupCertificate authorities
- SRVSRV Record LookupService locations
- PTRReverse DNS LookupReverse DNS (PTR)
Questions
Frequently asked questions
- My verification record is published but the check fails
- Make sure it is at the exact name the service asked for — often a subdomain such as _acme-challenge — and that the value has no quotes or spaces you did not intend. Then wait for the resolver columns to show it: a "no such record" answer can stay cached for the zone's minimum TTL.
- How do I look up a DKIM key?
- Enter <selector>._domainkey.<domain>, for example google._domainkey.example.com. The selector is chosen by whoever signs your mail, and appears in the s= tag of a message's DKIM-Signature header.
- What is DNS propagation?
- DNS does not push changes out. Each resolver keeps an answer for its TTL and only asks again once that runs out, so after a change different resolvers return old and new answers for a while. When every column here agrees with the authoritative one, the change has reached them.
- What does the authoritative column show?
- The answer from one of the domain's own nameservers, which never comes from a cache. It shows what the zone says right now; the resolver columns show what the internet has cached.