TXT Record Lookup
View all TXT DNS records for a domain — including SPF, DKIM, DMARC, domain verification, and ownership tokens.
Did this tool work for you?
How to use this calculator
- 1
Enter the domain name you want to check.
- 2
Click "Check Now" to retrieve all TXT records.
- 3
Results show all TXT records including SPF, DKIM keys, DMARC policy, and verification tokens.
Frequently asked questions
What are TXT records used for?
TXT records store arbitrary text data in DNS. Common uses: SPF (email authentication), DKIM public keys, DMARC policy, domain verification for Google Search Console / Bing Webmaster, Apple domain verification, Let's Encrypt ACME challenges, and Microsoft 365 or Google Workspace tenant verification.
How many TXT records can I have?
There is no strict DNS limit on the number of TXT records, but SPF has a limit of 10 DNS lookups (include: mechanisms). Having too many TXT records can slow DNS resolution. Each record is up to 255 characters per string (though multiple strings can be concatenated).
Why does my SPF record appear in TXT records?
SPF records are stored as TXT records beginning with "v=spf1". The original SPF record type (type 99) is deprecated; all SPF records are now published as TXT records.
What is a domain verification TXT record?
Services like Google, Microsoft, and others ask you to add a specific TXT record to prove you own a domain. The service then queries DNS to confirm the record exists before granting access.
TXT Record Lookup — View all DNS text records for any domain
Understanding TXT records
TXT records act as a flexible bulletin board in DNS. Because anyone can add any text, they've become the standard way to publish authentication policies, ownership proofs, and configuration data that doesn't warrant a dedicated record type.
Security-critical TXT records
The most security-sensitive TXT records are SPF (controls who can send email as your domain), DKIM public keys (verify email signatures), and DMARC (_dmarc. prefix, controls how receivers handle failing SPF/DKIM checks). All three together form the email authentication stack.
Learn more from an authoritative source:
MDN Web DocsSPF Record Checker
Validate the SPF (Sender Policy Framework) record for any domain and understand its email authentication policy.
DKIM Record Checker
Look up and validate the DKIM (DomainKeys Identified Mail) public key record for a domain and selector.
DMARC Record Checker
Check and analyse the DMARC policy for any domain to understand how email authentication failures are handled.
DNS Propagation Checker
Check whether your DNS changes have propagated across Cloudflare, Google, and Quad9 resolvers worldwide.
SSL Certificate Checker
Inspect the SSL/TLS certificate for any domain — view issuer, expiry date, SANs, and days remaining.
Domain Age Checker
Find out how old any domain is — see its registration date, age in years, and expiry date via RDAP.
Results are estimates for informational purposes only and do not constitute professional financial, medical, legal, or technical advice. Read full disclaimer →