A TXT record lookup retrieves the text DNS records for a domain and automatically analyzes them — identifying SPF email authentication rules, DKIM public keys, DMARC policies, and domain ownership verification tokens. Essential for diagnosing email deliverability issues.
TXT Record Lookup
For DKIM: enter selector subdomain (e.g., selector1._domainkey.example.com). For DMARC: enter _dmarc.example.com
Querying TXT records via DNS over HTTPS...
No TXT records found
This domain may not have TXT records configured at this name.
How to Use the TXT Record Lookup Tool
TXT DNS records carry critical email authentication data — SPF, DKIM, and DMARC. This TXT record lookup tool fetches records via Cloudflare DoH and automatically parses them so you understand what each record means without memorizing the syntax.
Step 1: Enter the Domain or Subdomain
For bare domain TXT records (SPF, domain verification), enter just example.com. For DMARC records, enter _dmarc.example.com. For DKIM records, enter the selector subdomain like selector1._domainkey.example.com.
Understanding the Record Types
- SPF (v=spf1) — authorizes which servers can send email on your behalf. The ~all or -all at the end controls how failures are handled
- DMARC (v=DMARC1) — policy for handling emails that fail SPF or DKIM checks. p=reject is the strongest setting
- DKIM — contains the public key used to verify email signatures from your mail server
- Domain verification — tokens like google-site-verification= or MS= prove domain ownership to third-party services
Email Deliverability Checklist
For reliable email delivery, your domain should have all three authentication records: SPF (authorizes senders), DKIM (signs messages), and DMARC (defines policy). Missing any one of these can cause email to land in spam. Check each:
- SPF: look up TXT records on your bare domain
- DKIM: look up your selector subdomain (check your mail provider for the selector name)
- DMARC: look up
_dmarc.yourdomain.com
Copy Records
Each record has a copy button to copy its raw value for documentation or troubleshooting. Use this when submitting support tickets to your email provider or DNS registrar.
FAQ
What is a TXT record?
A TXT (text) record is a DNS record that stores arbitrary text strings. Originally designed for human-readable notes, TXT records are now essential for email authentication (SPF, DKIM, DMARC), domain ownership verification (Google, Microsoft, Facebook), and service configuration. Multiple TXT records can exist for the same domain.
What is an SPF record and how do I read it?
SPF (Sender Policy Framework) is a TXT record starting with 'v=spf1' that lists authorized email senders for your domain. Mechanisms include 'include:domain' (allow another domain's senders), 'ip4:x.x.x.x' (allow specific IP), 'a' (allow the domain's A record), and 'mx' (allow mail servers). The ending determines failure policy: '-all' is hard fail, '~all' is soft fail, '?all' is neutral.
What is a DKIM record?
DKIM (DomainKeys Identified Mail) TXT records contain a public key used to verify email signatures. They live under a selector subdomain like 'selector1._domainkey.yourdomain.com'. The 'p=' field contains the base64-encoded public key. Receiving mail servers use this key to verify that email claiming to be from your domain was actually signed by your mail server.
What is a DMARC record?
DMARC (Domain-based Message Authentication, Reporting, and Conformance) TXT records at '_dmarc.yourdomain.com' specify what to do when SPF or DKIM checks fail. The policy (p=) can be 'none' (monitor only), 'quarantine' (move to spam), or 'reject' (block delivery). The 'rua=' field sets an email address to receive aggregate reports about authentication failures.
Is this TXT record lookup tool free?
Yes, completely free. All lookups use Cloudflare's DNS over HTTPS API directly from your browser with no server-side storage or processing required.
Is my lookup data private?
Queries go directly from your browser to Cloudflare's public DoH API. We do not log or store any domain names or results on our servers.
How do I look up a DKIM record?
DKIM records live at a selector subdomain, not the bare domain. To look up a DKIM record, enter the full selector domain: 'selector1._domainkey.yourdomain.com'. You'll need to know your DKIM selector (check your email provider's setup guide or look for 'DKIM-Signature' headers in sent emails).