TXT Record Checker - Free DNS TXT Record Lookup Tool

Instantly look up and analyse all TXT DNS records for any domain - including SPF, DMARC, DKIM, Google and Microsoft verification records. Free, real-time, no signup required.
DKIM Selector
Filter by type
Fetching TXT records...
Real DNS lookup via Google DNS · Cloudflare · OpenDNS · no signup required

How to Use the TXT Record Checker

1
Enter a domain name (e.g. example.com) in the input field - the tool strips https:// and trailing paths automatically
2
Select a DNS resolver - Google, Cloudflare, or OpenDNS - to query records from different sources
3
DKIM auto-detect is on by default - it checks 15 common selectors in parallel and shows any it finds inline. Or toggle it off to enter a specific selector manually
4
Click Check Records or press Enter to retrieve all TXT records for the domain instantly. Use the filter pills to isolate specific record types

What Is a DNS TXT Record?

A DNS TXT (text) record stores arbitrary text data associated with a domain. Originally designed for human-readable notes, TXT records are now widely used for machine-readable verification and authentication - most importantly for email security.

Unlike A or MX records which route traffic and email, TXT records act as a public notice board: mail servers, security tools, and third-party services read them to verify identity, authorise actions, or enforce policies.

Email authentication
SPF, DKIM, and DMARC all use TXT records to publish policies that receiving mail servers check before delivering email.
Domain verification
Google, Microsoft, and other services ask you to add a TXT record to prove you own a domain before granting access.
Security policies
BIMI, MTA-STS, and TLS-RPT records are published as TXT records to communicate security configurations to receiving servers.
Third-party integrations
Many SaaS tools use TXT records to verify domain ownership before enabling custom sending domains or SSO.

TXT Record Types - What Each Tag Means

This tool automatically classifies each TXT record it finds. Here is a reference for what each tag indicates.

TXT record type reference - SPF, DMARC, DKIM, Google, Microsoft, Other
Tag What it means Relevant for
SPF Starts with v=spf1 - defines which mail servers are authorised to send email for this domain Email deliverability, spam prevention
DMARC Starts with v=DMARC1 - sets the policy for handling email that fails SPF or DKIM Email authentication policy, abuse reporting
DKIM Starts with v=DKIM1 - a public key used by receiving servers to verify the email signature Email signing, tamper detection
Google Contains google-site-verification - proves ownership to Google Workspace or Search Console Google services domain verification
Microsoft Contains ms= or Microsoft keywords - proves ownership to Microsoft 365 or Azure AD Microsoft services domain verification
Other Any other TXT record - tokens for SaaS tools, custom strings, or other platform verifications Third-party services, custom use cases

Frequently Asked Questions

A TXT record lookup queries the DNS for all TXT-type records published under a domain name. It returns the raw record values along with TTL data. This tool performs the lookup in real time using your choice of DNS resolver — Google, Cloudflare, or OpenDNS — and automatically classifies each record as SPF, DMARC, DKIM, or a verification record.
Yes — a domain can have as many TXT records as needed. In practice, most domains have several: one SPF record, one DMARC record, one or more DKIM records (one per selector/sending service), plus domain verification records for Google, Microsoft, or other platforms. Note that a domain should only ever have one SPF recordmultiple SPF records cause SPF to fail.
It means the record is not published in DNS for this domain. Missing SPF means receiving servers can’t verify your authorised senders — increasing spam likelihood. Missing DKIM means emails aren’t signed, reducing trust. Missing DMARC means you have no policy controlling what happens when SPF or DKIM fails, and you’re not receiving any abuse reports. All three should be present for good deliverability.
TXT record changes propagate based on the TTL (Time to Live) value of the record. A TTL of 3600 means resolvers cache the record for up to 1 hour before fetching a fresh copy. Changes typically take between a few minutes and 48 hours to propagate globally, depending on the TTL and downstream resolver cache times. During migrations, temporarily lowering your TTL to 300 seconds speeds up propagation.
DNS record types serve different purposes: A records map a domain to an IP address, MX records define mail servers, CNAME records create aliases, and NS records define nameservers. TXT records store free-form text and are used for verification and policy publishing — they don’t affect how your domain resolves or routes traffic, but they’re read by mail servers and third-party services.
If SPF is missing from results, the most common causes are: the record hasn’t been added yet, it was added to the wrong subdomain (should be on the root domain @), DNS changes haven’t propagated yet (wait up to 48 hours), or the record has a syntax error that prevents it being recognised. Try switching to a different DNS resolver in the dropdown — Google and Cloudflare sometimes reflect changes at different speeds.

Monitor Your DNS Records & Email Authentication Automatically


PowerDMARC alerts you the moment your SPF, DMARC, or DKIM records change — before it affects your email deliverability.