Boneyard Tools

DNS Record Types Explained

A searchable, plain-English reference to 20 DNS record types, from everyday A and CNAME records to email policy, DNSSEC and the newer HTTPS records. Each row explains what the record does, shows a realistic example value you can copy, and lists practical notes and gotchas. Type a record name or a keyword to filter the table instantly.

How to use the DNS record explainer

  1. Type a record type such as MX, or a keyword like mail, dnssec or alias, into the search box.
  2. Leave the box empty to browse all 20 record types at once.
  3. Read the Purpose column to see what the record does in plain language.
  4. Scan the Example value column for a realistic sample of the record data.
  5. Check the Notes column for gotchas, such as why a CNAME cannot sit at the zone apex.
  6. Click Copy next to any example value to paste it into your zone file or DNS panel.

Examples

Look up a single record type

MX
1 match: MX, mail exchange record, e.g. 10 mail.example.com.

Find every record related to email

mail
7 matches: MX, TXT, SOA, PTR, SPF, DKIM and DMARC

See the DNSSEC record family

dnssec
3 matches: DNSKEY, DS and RRSIG

Frequently asked questions

How does the search work?

The box matches your text against each record's type, full name, purpose and notes, all case-insensitive. So searching mail returns MX, TXT, SOA, PTR, SPF, DKIM and DMARC because the word appears somewhere in each of their descriptions, not only in the type name.

What is the difference between an A and an AAAA record?

An A record points a hostname to an IPv4 address such as 93.184.216.34, while an AAAA record, pronounced quad-A, points it to an IPv6 address. Many hosts publish both so clients can connect over either protocol.

When should I use a CNAME instead of an A record?

Use a CNAME to alias one hostname to another canonical name, for example pointing www to the root domain. A CNAME cannot coexist with other records on the same name, so never place one at the zone apex. Providers offer ALIAS or ANAME records to get apex aliasing safely.

Why does an MX record have a number in front of it?

That number is a priority. When several mail servers are listed, senders try the lowest priority value first, so 10 mail.example.com is preferred over 20 backup.example.com. MX targets must be hostnames, never bare IP addresses.

What are SPF, DKIM and DMARC records?

They are email authentication policies, and all three are published as TXT records rather than dedicated types. SPF lists which servers may send for the domain, DKIM publishes the public key that verifies signatures, and DMARC tells receivers how to treat mail that fails SPF or DKIM and where to send reports.

What is a TXT record used for?

A TXT record stores free-form text, with each string limited to 255 characters. It is the workhorse behind domain-ownership verification and email policy, so SPF, DKIM and DMARC all ride on TXT records under specific names.

What do the DNSSEC records DNSKEY, DS and RRSIG do?

DNSKEY holds the public key used to validate signatures, RRSIG carries the actual signature over a record set with explicit validity dates, and DS is placed in the parent zone to link to the child's key and build the chain of trust. If the DS and child DNSKEY disagree, validation breaks.

Does this tool look up live DNS records for a domain?

No. It is a static reference that explains what each record type means and shows a sample value. To see a real domain's records you would run a query tool such as dig or nslookup, or use your registrar's DNS panel.

Is anything I type sent to a server?

No. The search runs entirely in your browser over a built-in list, so nothing you type leaves your device and the page works offline once loaded.

Learn more

Related tools