Skip to content

Scan your domain with 35 DNS and email security checks at zerohook.org.

ZeroHook | SecurityTools

What is

What is a TXT record

A TXT record carries descriptive text in DNS. RFC 1035 introduced the type. SPF, DKIM, and DMARC all publish policy strings in TXT records at specific names under the domain.

Long policies may be split into multiple quoted strings in one TXT RRset. SPF and DMARC validators concatenate those strings with no extra separator when they read the record.

One name, one SPF

RFC 7208 requires that only one TXT record starting with v=spf1 remain after version selection. Publishing two separate TXT records that both claim to be SPF on the same owner name is a permerror, not a way to list two senders.

DKIM uses TXT at selector._domainkey. DMARC uses TXT at _dmarc. Those names are different from the apex SPF name, so they do not collide with the SPF uniqueness rule.