TXT Record Lookup
Enter a domain name to look up its TXT records and identify SPF, DKIM, DMARC, and domain verification entries.
TXT Record Lookup
TXT records are one of the most versatile record types in the Domain Name System. Unlike A or MX records, which serve a single purpose, TXT records can store almost any short text string. That flexibility makes them the go-to mechanism for several jobs. They prove domain ownership, configure email authentication policies, and publish machine-readable security information. Want to understand DNS at a deeper level? Read our guide on the DNS Record Lookup or our explainer on how DNS works.
What TXT Records Are Used For
TXT records serve two broad categories of purpose: email authentication and domain verification. On the email side, they carry the SPF, DKIM, and DMARC policies. Receiving mail servers use those policies to decide whether an incoming message is legitimate. On the verification side, services like Google Search Console, Microsoft 365, and Facebook Business Manager use them. Each asks you to add a specific TXT record. That record proves you control a domain before they activate features on your behalf. This tool retrieves all TXT records for a domain and labels each one. You can identify its purpose at a glance.
How SPF, DKIM, and DMARC Records Work
SPF (Sender Policy Framework) records start with v=spf1 and list the mail servers allowed to send email for your domain. When a receiving server gets a message claiming to be from your domain, it checks the SPF record. It verifies that the sending IP is on the approved list. DKIM (DomainKeys Identified Mail) records start with v=DKIM1 and publish a public key. That key verifies a cryptographic signature on outgoing messages, confirming the email was not altered in transit. DMARC (Domain-based Message Authentication, Reporting, and Conformance) records start with v=DMARC1. They tell receiving servers what to do when SPF or DKIM checks fail. The options are reject, quarantine, or let the message through. They also say where to send aggregate reports. For a full analysis of all three records together, use our Email Auth Checker. To inspect just the SPF policy in depth, see the SPF Record Lookup.
Domain Verification Records Explained
Many platforms require you to prove domain ownership before granting access to analytics, ad tools, or email hosting. The verification process is simple. The platform gives you a unique text string. You publish it as a TXT record at your domain. Once its systems confirm the record is live in DNS, verification is complete. Common examples include Google Search Console strings (which contain google-site-verification) and Microsoft 365 strings (which start with MS=ms). Facebook domain verification tokens and Apple domain verification codes work the same way. This tool detects and labels all of these automatically, so you can audit a domain’s TXT records in one place.
Frequently Asked Questions
Why don’t I see my DKIM record here?
DKIM records do not live at the apex domain. They sit at a selector hostname like selector._domainkey.example.com. Enter that full hostname in the box to see the DKIM key. A plain domain lookup returns only the records published at the apex.
Can a domain have more than one TXT record?
Yes. A domain can publish many TXT records at the same name, and this tool lists all of them. The one exception is SPF: a domain must have only a single SPF record. Two SPF records cause authentication to fail.
Why is my long TXT record split into pieces?
A single DNS string is capped at 255 characters. Longer records, such as RSA DKIM keys, are split into several quoted chunks. The pieces are joined back together with no separator when read. This tool concatenates them for you, so you see the full value.
Related Tools and Resources
Looking for a broader DNS view? Use our DNS Record Lookup to query any record type for a domain. Check mail routing with the MX Lookup. Run a full email authentication audit with the Email Auth Checker. For SPF-specific analysis, the SPF Record Lookup breaks down your policy in detail. To build SPF and DMARC records from guided options, try the SPF and DMARC Record Generator. To verify a new TXT record has propagated, use the DNS Propagation Checker. Browse the full collection at the networking tools hub.