Check TXT records for any domain. Verify SPF, DKIM, and DMARC email authentication records across multiple DNS servers.
ReviewMyDNS is a free DNS propagation checker that queries 50+ global DNS servers to verify your DNS records. Check A, AAAA, MX, CNAME, TXT, NS, and SOA records instantly.
TXT records store arbitrary text strings in DNS and have become the standard mechanism for domain ownership verification and email authentication. The three email authentication standards — SPF, DKIM, and DMARC — are all published as TXT records. So are domain verification tokens for Google Workspace, Microsoft 365, and dozens of other services.
An SPF record lists the mail servers and IP ranges authorised to send email on behalf of your domain. A typical SPF record looks like: v=spf1 include:_spf.google.com ~all. The ~all suffix means mail from unlisted sources is soft-failed (accepted but flagged). Using -all enforces a hard fail, which is stricter but can reject legitimate mail if the SPF record is incomplete. A domain should have exactly one SPF record — multiple SPF records cause a PermError and break email delivery.
DKIM adds a cryptographic signature to outbound emails. The public key that receiving servers use to verify signatures is stored in a TXT record at a selector subdomain: selector._domainkey.yourdomain.com. If the public key is missing, expired, or doesn't match the private key used by your mail server, receiving servers treat the message as unsigned. Some providers rotate DKIM keys periodically — use this tool after any key rotation to confirm the new record is publishing correctly.
DMARC tells receiving servers what to do with mail that fails SPF or DKIM checks: monitor (p=none), quarantine to spam (p=quarantine), or reject outright (p=reject). It also specifies email addresses where aggregate and forensic reports should be sent. A DMARC record lives at _dmarc.yourdomain.com and looks like: v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@yourdomain.com.
Enter your domain and click Check. The tool returns all TXT records published for your domain. Look for records starting with v=spf1 (SPF), v=DKIM1 (DKIM public key), and v=DMARC1 (DMARC policy). If any of these are missing or malformed, use the email delivery debugging guide to identify and fix the issue.