Basic DNS Records
9 record typesA Record Common
Maps a domain name to an IPv4 address (e.g., 93.184.216.34)
AAAA Record Common
Maps a domain name to an IPv6 address (e.g., 2606:2800:220:1::)
MX Record Common
Specifies mail servers responsible for receiving email for a domain
TXT Record Common
Stores text data — used for SPF, DKIM, domain verification, and more
CNAME Record Common
Creates an alias from one domain name to another (canonical name)
NS Record Common
Specifies authoritative nameservers for a domain or subdomain
SOA Record
Start of Authority — contains zone administration information
CAA Record Security
Certificate Authority Authorization — controls which CAs can issue SSL certs
DNAME Record
Delegation Name — redirects an entire subtree of the domain name tree
Email Authentication Records
4 record typesSPF Record Email
Sender Policy Framework — authorizes which servers can send email for your domain
DKIM Record Email
DomainKeys Identified Mail — cryptographic email signatures to verify sender
DMARC Record Email
Domain-based Message Authentication — policy for handling failed SPF/DKIM
BIMI Record Email
Brand Indicators for Message Identification — display your logo in email clients
DNSSEC Records
9 record typesDNSKEY Record DNSSEC
Contains the public signing key used to verify DNSSEC signatures
DS Record DNSSEC
Delegation Signer — establishes chain of trust between parent and child zones
RRSIG Record DNSSEC
Resource Record Signature — cryptographic signature for DNS record sets
NSEC Record DNSSEC
Next Secure — provides authenticated denial of existence
NSEC3 Record DNSSEC
Next Secure v3 — hashed denial of existence (prevents zone enumeration)
NSEC3PARAM Record DNSSEC
NSEC3 Parameters — defines hash algorithm and iterations for NSEC3
CDS Record DNSSEC
Child DS — used for automated DNSSEC delegation updates
CDNSKEY Record DNSSEC
Child DNSKEY — used for automated DNSSEC key rollovers
ZONEMD Record DNSSEC
Zone Message Digest — cryptographic hash of the entire DNS zone
Service Discovery Records
5 record typesSRV Record Service
Service — specifies location of services (host, port, priority, weight)
HTTPS Record Service
HTTPS Service Binding — optimizes HTTPS connections with parameters
SVCB Record Service
Service Binding — general-purpose service endpoint discovery
URI Record Service
Uniform Resource Identifier — maps hostnames to URIs
NAPTR Record Service
Naming Authority Pointer — enables dynamic URI rewriting rules
Security & Encryption Records
6 record typesPTR Record Common
Pointer — reverse DNS lookup, maps IP addresses back to hostnames
TLSA Record Security
TLS Authentication — binds TLS certificates to DNS names (DANE)
SSHFP Record Security
SSH Fingerprint — publishes SSH host key fingerprints in DNS
IPSECKEY Record Security
IPsec Key — stores public keys for IPsec authentication
OPENPGPKEY Record Security
OpenPGP Public Key — publishes PGP keys for email encryption
SMIMEA Record Security
S/MIME Certificate Association — binds S/MIME certs to email addresses
Location & Other Records
4 record typesLOC Record Other
Location — stores geographic coordinates (latitude, longitude, altitude)
APL Record Other
Address Prefix List — specifies lists of address ranges
HIP Record Other
Host Identity Protocol — separates host identity from location
CSYNC Record Other
Child Synchronization — signals parent zone to update child records
Understanding DNS Record Types
DNS (Domain Name System) uses different record types to store various kinds of information. When you type a domain name in your browser, DNS resolvers query these records to find the right server to connect to. Each record type serves a specific purpose:
- Address Records (A/AAAA) — Map domain names to IP addresses
- Mail Records (MX) — Direct email to the right mail servers
- Text Records (TXT) — Store arbitrary text, including SPF, DKIM, and verification tokens
- Alias Records (CNAME) — Create aliases pointing to other domains
- Security Records (DNSSEC, CAA, TLSA) — Cryptographically secure DNS and control certificates
Click on any record type above to learn more about its purpose, syntax, examples, and best practices. Each guide includes a direct link to our DNS Record Finder tool to look up that specific record type.
Frequently Asked Questions
What are DNS record types?
DNS record types are different categories of data stored in the Domain Name System. Each type serves a specific purpose: A records map domains to IPv4 addresses, MX records specify mail servers, TXT records store text data like SPF and DKIM, CNAME records create aliases, and many more. There are over 30 different DNS record types defined in various RFCs.
What are the most common DNS record types?
The most common DNS record types are: A (IPv4 address), AAAA (IPv6 address), MX (mail server), TXT (text data including SPF/DKIM/DMARC), CNAME (alias), NS (nameserver), and SOA (zone authority). These records handle the majority of DNS queries for websites and email.
What DNS records are needed for email?
For email, you need: MX records (to specify mail servers), SPF records (stored in TXT, to authorize sending servers), DKIM records (stored in TXT, for email signatures), and DMARC records (stored in TXT, for authentication policy). These records work together to ensure email deliverability and prevent spoofing.
What are DNSSEC records?
DNSSEC (DNS Security Extensions) records add cryptographic security to DNS. Key types include: DNSKEY (public signing keys), DS (delegation signer for chain of trust), RRSIG (cryptographic signatures), NSEC/NSEC3 (authenticated denial of existence), and CDS/CDNSKEY (for automated key management). DNSSEC prevents DNS spoofing and cache poisoning attacks.
How do I look up a specific DNS record type?
Use DNSai's DNS Record Finder tool. Enter your domain, select the specific record type from the dropdown (A, MX, TXT, DKIM, etc.), choose your DNS server, and click Lookup. You can also select "All Record Types" to query everything at once.
Lookup Domain Data at Scale
DNS Explorer — Run bulk DNS lookups across thousands of domains. Query any record type, export to CSV, and audit your entire domain portfolio.
Start free DNS Explorer trial14-day full-feature trial