TXT Record Lookup

Read the TXT records published for any domain — including SPF, DKIM, DMARC and site-verification strings used for email security and domain ownership.

TXT Record Lookup
Enter a domain name above to read its TXT records.

What the TXT Record Lookup does

TXT records store arbitrary text in a domain's DNS. In practice they carry critical email-authentication and verification data: SPF policies that list who may send mail for the domain, DKIM public keys that verify message signatures, DMARC policies that tell receivers how to handle failures, and one-off verification tokens from services like Google and Microsoft.

This tool retrieves every TXT record for a domain so you can audit its email security posture and confirm verification strings are in place.

How to read the results

  • A record starting with v=spf1 is an SPF policy defining which servers may send mail for the domain.
  • v=DMARC1 (usually on _dmarc.domain) sets the DMARC policy — none, quarantine or reject.
  • Long base64-looking strings on selector subdomains are DKIM public keys.
  • Short tokens like google-site-verification=… prove domain ownership to a third-party service.

Worked example

Input: github.com

v=spf1 ip4:192.30.252.0/22 include:_spf.google.com ~all
google-site-verification=xxxxxxxxxxxxxxxxxxxxxxxx

The SPF record authorises GitHub's own ranges plus Google's mail servers to send email as the domain, and ends with ~all (soft-fail) for everything else.

Common use cases

  • Audit or debug SPF, DKIM and DMARC email-authentication setup.
  • Confirm a domain-ownership verification token is published correctly.
  • Investigate why your outbound mail is failing SPF or DMARC.
  • Review which third-party services a domain has been verified with.

TXT Record Lookup — Frequently Asked Questions

What is an SPF record and where is it stored?

SPF (Sender Policy Framework) is a TXT record beginning with v=spf1 that lists the IP addresses and includes allowed to send email for a domain. It is stored on the root domain and read by receiving mail servers to detect spoofing.

Can a domain have more than one TXT record?

Yes — a domain typically has many TXT records for different purposes (SPF, verification tokens, etc.). However, a domain must have only one SPF record; multiple v=spf1 records is a configuration error that causes SPF to fail.

Where do I find the DMARC record?

DMARC is published as a TXT record on the _dmarc subdomain, e.g. _dmarc.example.com, and starts with v=DMARC1. Look it up by entering that subdomain.