DNS records explained: web, mail and verification

What does this mean?

DNS records answer different questions about a name. A and AAAA point toward web or other servers; MX points toward incoming mail; TXT often supports verification and email policies. Treat a DNS zone as a collection of services, rather than a single website setting.

What should I check first?

Identify the exact name you are editing: the root domain, www, mail, _dmarc or a provider selector can require different records. Provider interfaces vary in whether they expect a full name or a relative label. Read the preview of the resulting name before saving.

How can I diagnose the cause?

Query the relevant type in DNS lookup and compare it with provider instructions. Record the existing values and TTLs. Multiple TXT records can be perfectly legitimate; multiple separate SPF policies at the same name are a different problem. Do not delete unrelated ownership verification records during an email fix.

How do I fix it safely?

Use an A or AAAA value only when the provider supplied that address; use a CNAME when it supplied an alias target. For MX, enter its hostname and priority rather than an email address. CNAME ordinarily cannot coexist with other records at the same name, so a root-domain alias needs the DNS provider’s supported arrangement.

Verify the fix and know when to contact your provider

Save a zone copy before editing, change one service at a time and verify its result. Ask the provider when its instructions conflict with an existing record or the panel produces a duplicated domain name. Give it the intended record name, type and value, and explain which other services must remain available.

Work through these checks in order

1. Read the record’s intended complete name before saving. A panel expecting only www can create www.example.com.example.com if you enter a full name without its documented absolute-name format.
2. Change only the record type required by the service. Compare A and AAAA for web routing, MX for incoming mail, and TXT or CNAME for the exact authentication or verification instruction.
3. Export the zone after a verified change and record why each modified entry exists. This makes the next migration safer than relying on a list of unexplained values.

Which tool can help?

DNS record explainer · DNS lookup · MX record checker

DNS tools show one resolver’s public answers. Record explainers do not authenticate a message, and calculators do not monitor a server. Use the evidence alongside your provider’s logs.