Look up TXT records for a name
Free, no sign-up — results in seconds.
What TXT records are used for
| Purpose | Where it lives | Starts with |
|---|---|---|
| SPF | the domain itself | v=spf1 |
| DKIM | selector._domainkey.example.co.za | v=DKIM1 |
| DMARC | _dmarc.example.co.za | v=DMARC1 |
| Domain verification | usually the domain itself | provider-specific, e.g. google-site-verification= |
| MTA-STS / TLS reporting | _mta-sts / _smtp._tls | v=STSv1 / v=TLSRPTv1 |
The 255-character rule
A single string inside a TXT record can be at most 255 characters. Longer values — typically 2048-bit DKIM keys — are split into several quoted strings in one record, which receivers join back together:
selector1._domainkey IN TXT ( "v=DKIM1; k=rsa; p=MIIBIjANBgkqh..."
"...rest of the key...IDAQAB" )Most DNS panels do the splitting automatically. If yours doesn't, the key will fail validation.
Common TXT record problems
- Two SPF records. A domain must have exactly one TXT record starting with
v=spf1. Merge them into one. - Record on the wrong name. DMARC must be on
_dmarc, DKIM onselector._domainkey— not on the root. - Domain appended twice. Typing
_dmarc.example.co.zain a panel that adds the domain creates_dmarc.example.co.za.example.co.za. - Smart quotes or line breaks pasted from a document.
Adding a TXT record in your DNS panel
Most control panels (cPanel Zone Editor, registrar DNS pages, Cloudflare) ask for the same four things:
| Field | What to enter |
|---|---|
| Name / Host | @ (or leave blank) for the root domain; just the label for others — _dmarc, selector1._domainkey. Most panels add your domain automatically. |
| Type | TXT |
| Value / Content | The text exactly as your provider gives it. Some panels want it wrapped in quotes, others add quotes for you — don't end up with doubled quotes. |
| TTL | 3600 is fine. Use 300 if you expect to change it soon. |
After saving, look the record up (below) to confirm it's live exactly as intended before telling a service to verify it.
Can old verification records be removed?
Usually yes, once the service no longer needs them — but check first. Some services (for example certain email platforms and search tools) re-check the TXT record periodically and will un-verify the domain if it disappears. Tidy up records for services you've genuinely stopped using; they make the zone harder to read and increase the size of DNS responses.
How to look up TXT records
Use the TXT lookup on the exact name (for DMARC, enter _dmarc.yourdomain), or the Email Deliverability Checker to find and assess SPF, DKIM and DMARC together.
dig example.co.za TXT +short
dig _dmarc.example.co.za TXT +shortFrequently asked questions
Can I have more than one TXT record?
Yes — many domains have several (SPF plus verification records). The exception is SPF: only one SPF record is allowed.
Why doesn't my verification record show up?
It may still be propagating, it may be on the wrong name, or the domain may have been appended twice. Look it up with the TXT checker.
Is there a size limit on TXT records?
Each string is limited to 255 characters, but a record can contain multiple strings. Very large records may cause DNS responses to fall back to TCP.