What are DNS records, and why do they decide whether your email lands?
In short: DNS records are the public instructions that tell the internet how to route and trust your domain. For email, six matter most: MX (where mail is received), A/AAAA (your server addresses), and the TXT-based SPF, DKIM and DMARC records that prove your mail is genuine. If those three are missing or wrong, mailbox providers quietly send you to spam.
On this page
What is a DNS record, in one sentence?
A DNS record is a public line of configuration, stored in your domain's DNS zone, that tells other computers something about your domain, like which server to contact or which senders are allowed to email on your behalf. DNS (the Domain Name System) is often called the internet's phone book: when someone looks up your domain, they read these records to decide what to do.
Which DNS records affect email deliverability?
Six record types do the real work for email:
- MX records: list the mail servers that receive email for your domain, in priority order. No MX, no inbound mail.
- A / AAAA records: map your domain (or a sending host) to an IPv4 / IPv6 address.
- SPF (a TXT record): names the servers allowed to send email as your domain.
- DKIM (a TXT record): publishes a public key that cryptographically signs your outgoing mail.
- DMARC (a TXT record at
_dmarc): tells receivers what to do when a message fails SPF or DKIM, and where to send reports. - PTR (reverse DNS): maps your sending IP back to a hostname; mailbox providers check it for legitimacy.
How do mailbox providers use your DNS records?
When an email arrives, the receiving server runs a series of near-instant DNS lookups on the sending domain. It reads your SPF record to see if the sending server is authorised, checks the DKIM signature against your published public key, and then applies your DMARC policy to decide what happens if either fails. A domain with clean, aligned SPF, DKIM and DMARC looks trustworthy. A domain missing them looks anonymous, and anonymous mail is the first thing spam filters distrust.
This is why two identical emails can have completely different fates: the one from an authenticated domain reaches the inbox, and the one from an unauthenticated domain gets quarantined.
How do you check your DNS records?
You don't need command-line tools. A browser-based DNS Record Checker queries live public DNS and shows your A, AAAA, MX, TXT, NS and CNAME records in one view. For the email-specific records, dedicated checkers go further: an SPF Checker counts your DNS lookups against the hard limit of 10, a DMARC Checker explains your enforcement level, and a DKIM Checker confirms your public key is present and valid.
What does a healthy email DNS setup look like?
A domain that mailbox providers trust usually has:
- Valid MX records pointing to a real mail provider.
- One SPF record ending in
~allor-all, under 10 DNS lookups. - A published DKIM key (2048-bit recommended) for every sending service.
- A DMARC record at
quarantineorreject, with a reporting address. - Correct reverse DNS (PTR) on the sending IP.
Get those right and you remove the single most common, most fixable cause of cold email landing in spam.
Check your DNS records now, free
See every A, MX, TXT, NS and CNAME record for any domain in one click. No sign-up, nothing to install.
Open the DNS Record Checker →All free tools