example.com. 3600 IN TXT "v=spf1 include:_spf.example.net -all"
A TXT record stores text. DNS doesn’t interpret it, but other systems do — today mostly for email security and for proving that you control a domain.
Common uses
- SPF (
v=spf1 …) lists which servers may send mail for the domain. - DKIM keys live at
selector._domainkey.example.comand let receivers verify message signatures. - DMARC (
_dmarc.example.com,v=DMARC1; p=quarantine; …) tells receivers what to do when SPF/DKIM fail and where to send reports. - Verification tokens for search consoles, certificate authorities and SaaS products.
Format notes
A single TXT string is limited to 255 bytes; longer values (such as 2048-bit DKIM keys) are split into several quoted strings that are joined back together. A domain must have only one SPF record.
Frequently asked questions
- Can a domain have multiple TXT records?
- Yes, as many as needed. But there must be only one record starting with v=spf1.
- Where are DMARC records published?
- As a TXT record on the _dmarc subdomain, e.g. _dmarc.example.com. You can look it up with this tool.