TXT Record Lookup

TXT Record Lookup

TXT records are one of the most versatile record types in the Domain Name System. Unlike A or MX records, which serve a single purpose, TXT records can store almost any short text string — which makes them the go-to mechanism for proving domain ownership, configuring email authentication policies, and publishing machine-readable security information. If you want to understand how DNS works at a deeper level, read our guide on DNS Record Lookup or our full explainer on how DNS works.

What TXT Records Are Used For

TXT records serve two broad categories of purpose: email authentication and domain verification. On the email side, they carry the SPF, DKIM, and DMARC policies that receiving mail servers use to decide whether an incoming message is legitimate. On the verification side, services like Google Search Console, Microsoft 365, and Facebook Business Manager ask you to add a specific TXT record to prove that you control a domain before they activate features on your behalf. This tool retrieves all TXT records for a domain and automatically labels each one so you can identify its purpose at a glance.

How SPF, DKIM, and DMARC Records Work

SPF (Sender Policy Framework) records start with v=spf1 and list the mail servers authorized to send email on behalf of your domain. When a receiving server gets a message claiming to be from your domain, it checks the SPF record to verify that the sending IP is on the approved list. DKIM (DomainKeys Identified Mail) records start with v=DKIM1 and publish a public key used to verify a cryptographic signature attached to outgoing messages, confirming the email has not been altered in transit. DMARC (Domain-based Message Authentication, Reporting, and Conformance) records start with v=DMARC1 and tell receiving servers what to do when SPF or DKIM checks fail — reject the message, quarantine it, or let it through — and where to send aggregate reports. For a full analysis of all three records together for any domain, use our Email Auth Checker. To inspect just the SPF policy in depth, see the SPF Record Lookup.

Domain Verification Records Explained

Many platforms require you to prove domain ownership before granting access to analytics, ad tools, or email hosting features. The verification process is simple: the platform gives you a unique text string and asks you to publish it as a TXT record at your domain. Once the platform’s systems confirm the record is live in DNS, verification is complete. Common examples include Google Search Console verification strings (which contain google-site-verification), Microsoft 365 domain verification strings (which start with MS=ms), Facebook domain verification tokens, and Apple domain verification codes. This lookup tool detects and labels all of these automatically so you can audit your domain’s TXT records in one place.

Related Tools and Resources

Looking for a broader DNS view? Use our DNS Record Lookup to query any record type for a domain. Check mail routing with the MX Lookup, or run a full email authentication audit with the Email Auth Checker covering SPF, DKIM, and DMARC together. For SPF-specific analysis, the SPF Record Lookup breaks down your policy in detail. To build SPF and DMARC records from guided options, try the SPF and DMARC Record Generator. To verify a new TXT record has propagated across major public resolvers, use the DNS Propagation Checker. Browse the full collection at the networking tools hub.