↑↓ to move · Enter to open · Esc to close

TXT Record Lookup

A TXT record lookup shows the text strings on a domain, labels SPF, DMARC, DKIM, and site-verification records, and also reads _dmarc.

This check runs on our server. The address you enter is used only for this check and is not stored.
Updated

This check runs on our server. The address you enter is used only for this check and is not stored.

How to use the TXT Record Lookup

  1. Enter the domain.
  2. Pick a resolver.
  3. Tick the robot check and press Look up.
  4. Read the text. A label such as SPF or DMARC is added when the string matches that format.

How it works

This check runs on our server. Nothing you type is kept after the answer is sent.

DNS TXT values are split into chunks of 255 bytes. The tool joins those chunks into one string so an SPF policy is readable. Strings that start with v=spf1 are marked SPF. Strings that contain v=DMARC1 are marked DMARC. A second query asks for _dmarc plus your domain, which is the name DMARC actually uses. Site-verification tokens from common providers are marked as verification, not as mail policy.

DKIM is only labeled when a TXT string contains v=DKIM1. The usual name is selector._domainkey.example.com, and the selector is chosen by the mail system. This page does not try selectors on its own.

Examples

  • v=spf1 include:_spf.example.com -all is labeled SPF.
  • A record at _dmarc.example.com starting with v=DMARC1 is listed with the other TXT rows and labeled DMARC.
  • google-site-verification=... is labeled site verification. It does not affect mail delivery.

Limitations

  • The tool does not judge whether an SPF policy is safe. It shows the string.
  • DKIM selectors are not brute-forced.
  • Very long TXT sets are still capped by the resolver's answer size. Truncated answers are retried over TCP.

Frequently asked questions

Why is DMARC on a different name?

The DMARC spec puts the policy at _dmarc.example.com, not at the bare domain. The lookup asks for both.

What does -all mean in SPF?

It tells receiving servers to reject mail from hosts that the rest of the SPF record did not list. ~all is a softer fail. The tool shows the policy as published.

Can one TXT record hold both SPF and a verification token?

They are separate TXT records on the same name. Each string is its own row.

Often used together with the TXT Record Lookup.

  • MX Lookup

    Mail servers from MX records, with priority and the host's addresses.

  • CAA Record Lookup

    CAA issue, issuewild, and iodef values, with a short note on each tag.

  • DNS Lookup

    One table of A, AAAA, MX, NS, TXT, SOA, and CAA records for a domain.