01
What TXT holds
TXT records store text data: SPF policies, domain verification tokens, and service configuration at a specific DNS name.
Free security tool · no sign-up
TXT Record Checker.
TXT records carry SPF policies, verification tokens, and service settings. Review entries at the DNS hostname you enter.
Free for AwareX client employees and anyone who needs a quick check. No sign-up required.
How to check, verify, and actTry an example:
DNS queried via Cloudflare. We don’t store your input.
Your workplace verification guide
Check it. Verify it. Know what to do next.
Inspect public text records used for domain verification and email policies. Do not enter private verification codes or credentials.
Prepare your input
Enter the domain you want to review, such as example.com, without a page path.
Run the check
Select Check records. The tool requests the public DNS records through Cloudflare.
Review the result
Review the TXT entries with your DNS or email administrator before making changes.
How to verify independently
Use the exact public hostname supplied by IT or the provider.
Compare the returned value with the approved value.
Check the same name at both the subdomain and the root domain, because records at a subdomain may not appear at the root.
Your next workplace action
Send the hostname and relevant public record to IT. Do not remove unfamiliar records; another business service may depend on them.
What the result means
- TXT records returned
- Multiple records can be normal. Each may serve a different verification or policy purpose.
- Expected value absent
- Confirm the exact hostname, recent DNS changes, and provider instructions with IT.
- Value matches
- The value is visible through this resolver. The provider must still confirm its own verification.
A returned record is not a security verdict. Missing records can reflect configuration, propagation, or a lookup issue.
Why it matters
Read the entries. Verify their purpose.
TXT records publish text at a specific DNS name. Identify each entry's owner and purpose before changing it; unfamiliar values can belong to legitimate services.
02
Audit regularly
Old verification tokens and stale SPF entries accumulate. Review them and remove what you no longer need.
03
Confirm the owner
Ask your administrator which service uses an unfamiliar entry. Checking the root domain does not include TXT entries at every subdomain.
DNS standards · sourced facts
Small record.
Important details.
These DNS specification facts clarify what a TXT lookup can show. They describe record structure and scope, not the security of a domain or an audit of every subdomain.
255
Bytes per text string
Each DNS character string can hold up to 255 bytes. That limit applies to each string, not necessarily to the entire TXT record.
IETF · RFC 1035, section 3.31+
Strings in a record
A TXT record contains one or more character strings. Applications determine how to interpret the text they contain.
IETF · RFC 1035, section 3.3.141 name
A lookup has a specific scope
The DNS query includes a name and a record type. Checking example.com does not inventory TXT entries at every subdomain.
IETF · RFC 1035, section 4.1.2After the check
Records protect the domain.
People protect the inbox.
TXT records support service verification and configuration, but a list of public text entries is not a phishing defense. AwareX separately helps employees practice checking requests and reporting suspicious messages.
- Your domain
Public text at one DNS name
Confirm each entry with its service owner. This lookup does not inventory the whole domain, verify account ownership, or assess employee behavior.
- The attacker
A request still needs scrutiny
Lookalike addresses, compromised accounts, SMS, calls, and deepfakes can reach employees regardless of the records returned by this check.
- AwareX
Your people get practice
Separately, AwareX provides contextual simulations and learning that help teams pause, verify, and report. This lookup does not run or validate those activities.
AwareX is AI-powered human risk testing: it learns your business, runs realistic simulations across email, SMS, voice, QR codes, and deepfakes, and adapts learning to how your people respond.
See AwareX in Action - Book a demoTHE PLATFORM BEHIND THE CHECKFive AI agents. One New Age
Five AI agents. One New Age
Human Risk Management platform.
This free tool shows one signal. AwareX is a New Age Human Risk Management platform: five AI agents work together to test your people the way attackers would, and to turn every response into learning.
Context engine
Learns your business from public context: departments, products, and tone, so every test is grounded in how your organization actually works.
Scenario engine
Drafts and scores attack scenarios against your scope, the way a real attacker would plan them.
Lure composer
Writes on-brand emails, messages, and calls with realistic signatures and sender identities, ready for your review.
Risk calibration
Compares predicted risk with how people actually respond, so the picture gets sharper after every wave.
Targeting and routing
Decides who needs practice next and routes learning to the people and teams that need it most.
Beyond the free check
See AwareX
in action.
A TXT Record Checker result is one piece of the picture. Explore how AwareX connects realistic simulations, learning, and reporting for your organization.
- Explore scenarios tailored to your business.
- See campaign activity and learning progress together.
- Discuss setup, training, and ongoing support.
What this free tool checks
TXT records carry SPF policies, verification tokens, and service settings. Review entries at the DNS hostname you enter. This tool queries public DNS through Cloudflare and displays the TXT records returned for your domain. Use the results to review your configuration; finding a record does not by itself confirm that your domain is secure.
Where we test
- ContextualAn AI agent scans the web
- EmailSpoofed senders and fake invoices
- SMSDelivery alerts and code traps
- VoiceUrgent calls from trusted numbers
- QR CodeCodes on posters and payment slips
- DeepfakeCloned faces and voices on calls
AIDrafted by AI, approved by you
THE IMPROVE FRAMEWORKIMPROVE.
IMPROVE.
One continuous loop.
Identify, Measure, Prioritize, Reduce, Optimize, Validate, and Evaluate. AI connects business context, employee responses, and targeted learning to inform each next test.
WHY TEAMS PARTNER WITH AWAREX
The benefits of partnering with AwareX
A free check tells you where you stand today. A partnership with AwareX turns that snapshot into a continuous, AI-powered program.
Contextual by default
Simulations are written from your sector, your roles, and current events, so every test feels real to the person receiving it.
Learning in the moment
Every response informs the next test and the lesson that follows it, so training adapts as your risk changes.
Evidence you can present
Dashboards, records, and compliance alignment give leadership and auditors a clear picture of progress.
Support at every step
Setup, campaign planning, and ongoing optimization from a team that runs these programs every day.
Frequently asked questions
Good questions.
Straight answers.
Free access, safe follow-up, and answers specific to this checker.
Yes. Every AwareX free tool is free to use, and you can run as many checks as you need.
No. There is no account, no sign-up, and nothing to install. Open the page, run the check, and read the result.
Share the result with your DNS or email administrator, close any gaps they identify against your provider’s recommended setup, and re-run the check to confirm the change.
TXT records hold text used for domain verification, SPF policies, and other service settings. A domain can legitimately publish several TXT records for different services.
DNS represents TXT data as quoted strings. A long record can be split into multiple quoted segments; those segments can be parts of one logical value rather than separate policies.
No. It queries the exact hostname you enter. TXT records at other names, such as _dmarc.example.com or a DKIM selector, require a separate lookup.
Check the service’s requirements before deleting it. Some providers periodically verify ownership, and removing a record can interrupt an integration.
THE NEXT ATTACK IS ALREADY BEING WRITTEN, BY AI