What lives in TXT
- SPF — strings that start with
v=spf1. - Domain verification — Google, Microsoft, Apple, Facebook, and dozens of SaaS products ask you to publish a token.
- DKIM — public keys at
selector._domainkey.example.com, not always on the apex. Use the DKIM checker with a selector. - DMARC — at
_dmarc.example.com. Easier in the DMARC tool.
A zone can have many TXT records. Two SPF records on the same name is invalid and often causes both to be ignored. If a vendor says it cannot verify you, this lookup is the fastest way to see what the internet actually sees versus what you pasted in a control panel.
DNS TXT strings longer than 255 characters are split into chunks on the wire. Resolvers concatenate them; DNSFetch shows the joined text when PHP provides it that way.