TXT Record Lookup
Check SPF, DKIM, DMARC and other TXT DNS records for any domain. Verify email authentication records instantly — free, no login.
Ready to lookup DNS records
Enter a domain name above and click "Lookup" to check DNS records across 28 global servers.
SPF Verification
Check which mail servers are authorized to send email for your domain.
DKIM Check
Verify your DKIM public key record is correctly published in DNS.
DMARC Policy
Review your DMARC policy to ensure proper email enforcement.
Instant Lookup
Real-time TXT record queries from authoritative DNS servers worldwide.
What Are TXT Records?
TXT (Text) records are DNS records that store arbitrary text data for a domain. While they were originally intended for human-readable notes, TXT records are now essential for email authentication and domain verification. They hold critical configuration data including SPF, DKIM, and DMARC policies that protect your domain from email spoofing and improve email deliverability.
TXT records are also used by services like Google Search Console, Microsoft, and various SaaS tools to verify domain ownership. When you verify a domain for Google Workspace or add your site to Google Search Console, the verification code they provide gets added as a TXT record.
SPF, DKIM, and DMARC Explained
SPF — Authorize Your Email Senders
An SPF (Sender Policy Framework) record is a TXT record that lists all the servers authorized to send email on behalf of your domain. A valid SPF record starts with 'v=spf1' followed by the list of authorized senders. For example: 'v=spf1 include:_spf.google.com include:sendgrid.net ~all'. The '~all' at the end means emails from unlisted servers are soft-failed. '-all' means hard-fail (rejected). To check your SPF record, enter your domain in the TXT lookup tool above and look for the record starting with 'v=spf1'.
DKIM — Cryptographic Email Signing
DKIM (DomainKeys Identified Mail) adds a cryptographic signature to every email your servers send. The receiving server can verify this signature using the public key stored in DNS as a TXT record, proving the email genuinely came from your domain and was not modified in transit. DKIM records are stored at a selector subdomain: selector._domainkey.yourdomain.com. To check a DKIM record, you need to know your selector (provided by your email service). Enter 'default._domainkey.yourdomain.com' or 'google._domainkey.yourdomain.com' in the TXT lookup to retrieve your public key.
DMARC — Policy Enforcement
DMARC (Domain-based Message Authentication, Reporting and Conformance) builds on SPF and DKIM to give domain owners control over what happens to emails that fail authentication. DMARC records are stored at _dmarc.yourdomain.com. A basic DMARC record looks like: 'v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com'. The 'p=' policy can be 'none' (monitor only), 'quarantine' (send to spam), or 'reject' (block completely). To check your DMARC record, enter '_dmarc.yourdomain.com' in the TXT lookup tool.
How to Look Up TXT Records
For SPF records
Enter your domain (e.g., 'yourdomain.com') and select TXT. Look for a record starting with 'v=spf1'.
For DKIM records
Enter 'selector._domainkey.yourdomain.com' — replace 'selector' with your DKIM selector (e.g., 'google', 'default', or 'mail'). Select TXT record type.
For DMARC records
Enter '_dmarc.yourdomain.com' and select TXT. Look for a record starting with 'v=DMARC1'.
For domain verification
Enter your main domain and select TXT to see all verification codes from Google, Microsoft, and other services.