What TXT records are actually used for
TXT records are a generic DNS mechanism used to publish text-based information about a domain. Email authentication relies heavily on TXT records to verify sender identity and enforce policy.
Common TXT records you will see
- SPF: starts with
v=spf1 - DMARC: starts with
v=DMARC1 - Verification strings: Google, Microsoft, Apple, Facebook, Stripe
What usually goes wrong
- Multiple SPF records (breaks SPF completely)
- SPF too long (exceeds DNS lookup limits)
- DMARC never enforced (
p=noneforever) - Old verification junk left behind