--- title: "DNS Record Types: Defined and Explained | DuoCircle" description: "A DNS record is a domain name system record that helps users visit a website without having to memorize its IP address." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/data-privacy/dns-record-types-defined-and-explained/" --- Quick Answer DNS records are text-based instructions that map domain names to the resources they point to. The most common types: A records map a domain to an IPv4 address; AAAA records map a domain to an IPv6 address; PTR records do reverse lookups (IP to name) and are used by receivers to verify a sending mail server's identity; MX records list the mail servers responsible for accepting mail for a domain, with priority values determining order (lower value = higher priority); CNAME records alias one domain to another and must not be used at the root, must not point to IP addresses, and must not be chained or coexist with NS or MX records at the same name; NS records identify the authoritative name servers for a zone; SOA records hold zone metadata (primary nameserver, admin email, refresh and retry intervals, serial number); TXT records hold arbitrary text and carry SPF, DKIM, and DMARC policies. Around 90 record types exist; these eight cover most operational use. Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fdata-privacy%2Fdns-record-types-defined-and-explained%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=DNS%20Record%20Types%3A%20Defined%20and%20Explained&url=undefined%2Fblog%2Fdata-privacy%2Fdns-record-types-defined-and-explained%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fdata-privacy%2Fdns-record-types-defined-and-explained%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fdata-privacy%2Fdns-record-types-defined-and-explained%2F&title=DNS%20Record%20Types%3A%20Defined%20and%20Explained "Share on Reddit") [ ](mailto:?subject=DNS%20Record%20Types%3A%20Defined%20and%20Explained&body=Check out this article: undefined%2Fblog%2Fdata-privacy%2Fdns-record-types-defined-and-explained%2F "Share via Email") ![DuoCircle blog post image](https://media.mailhop.org/duocircle/images/2023/11/spf-validator-9646.jpg) A **DNS record** is a domain name system record that helps users visit a website without having to memorize its IP address. It basically translates easy-to-remember [domain names](/email-hosting/domain-name-forgery-alive-well-find-protect/) to their corresponding IP addresses and presents the desired web results. An IP address is a long string of numbers separated by dots, which makes them harder to remember; hence, a domain name system was put in place. _Moreover, an IP address linked to a domain name can change if there are any **alterations on the server** hosting the website._ So, let’s explore different DNS record types and their purposes. ## Types of DNS Records DNS records are **text-based**, which allows DNS administrators to edit and adjust them quickly and easily. _Each DNS record performs a different function and works in alignment with various technologies to fulfill desired purposes like [email security](/), domain management, identifying authoritative name servers, creating alias domain names, etc._ Officially, there are around 90 unique DNS record types, each of them demanding a proper configuration and management in order to avoid a drowned [website performance](https://cloudkul.com/blog/role-of-dns-in-website-performance/). The following are the commonly used DNS record types: ### A Record It’s one of the **most utilized** DNS record types, and A in the A record stands for ‘address.’ While performing an [IP address lookup](https://www.whatismyip.com/dns-lookup/#:~:text=The%20domain%20name%20system%20%28DNS,IP%20addresses%20for%20the%20user.), an A record retrieves the corresponding **IPv4 IP address** to a domain name. This means if you request your browser to navigate you to DuoCircle’s website, then the A record responsible for the lookup tasks would find the IP address linked to DuoCircle’s website. An A record’s capabilities aren’t restricted to this. It also blocks emails coming from **known spam sources** by cross-checking with the [domain name system-based blackhole list (DNSBL)](https://www.ionos.com/digitalguide/server/know-how/dnsbl/). _Please note that using **multiple A records** for the same domain causes redundancies and triggers issues._ ### AAAA Record AAAA record, often called a **quad-A record**, works almost like an A record. The only difference is that it directs towards an **IPv6 address**, which is the upgraded version of IPv4\. An [IPv6 address](https://www.techtarget.com/iotagenda/definition/IPv6-address) is alphanumeric and separated by colons. Just as A records, multiple AAAA records are troublesome too. [![DNS](https://media.mailhop.org/duocircle/images/2023/11/office-365-tenant-to-tenant-migration-best-practices.jpg)](https://media.mailhop.org/duocircle/images/2023/11/office-365-tenant-to-tenant-migration-best-practices.jpg) ### DNS PTR Record PTR is short for the **Pointer Record**, one of the common DNS record types whose function is completely the opposite of that of an A record. It’s used for [reverse DNS lookup](https://en.wikipedia.org/wiki/Reverse%5FDNS%5Flookup), which means when you enter an IP address and expect the search results to return with the corresponding domain name. PTR records contain IPv4 addresses with segments in **reverse order** and IPv6 address segments in the reversed order of hexadecimal digits. It generally behaves as an **anti-spam tool**. This is because a recipient’s mail server uses the DNS PTR record in the message to verify if the sender’s email server corresponds to the IP address it claims. This minimizes the likelihood of [email spoofing](https://www.scmagazine.com/news/gmail-spoofing-google-priority-1-probe) and [phishing attacks](/email-security/meta-phish-facebook-phishing-campaign-stealing-login-credentials-and-pii-2/), which could otherwise trick email receivers into sharing [sensitive information](/data-privacy/intelbroker-threat-actors-steal-sensitive-data-of-11-million-weee-customers/) and documents or clicking malicious links. ### MX Record An MX record or **mail exchange record** contains a list of domain names of mail servers responsible for accepting emails on behalf of a domain. It helps sort out authorized mail servers and is often tagged as an MX entry, specifically when involved in [email servers’ configurations](https://www.manageengine.com/products/support-center/help/adminguide/introduction/mail-server-settings.html#:~:text=Mail%20Server%20Settings%20%26%20Mail%20Configuration&text=Server%20Name%2FIP%20Address%3A%20Denotes,or%20POP%20and%20so%20on%29). Mail providers with multiple servers have to **assign a priority value** to instruct the DNS in which sequence they should contact the servers. _The email server assigned the lowest value has the highest priority and serves as the initial point of contact._ Servers with higher values come into play only if the primary ones are unavailable. You can use an [MX lookup](https://www.wirewiki.com/mx-lookup) to quickly check which mail servers are configured for a domain and confirm their priority settings. Nevertheless, the DNS **evenly distributes the workload** among [email servers](https://www.bleepingcomputer.com/news/security/us-govt-email-servers-hacked-in-barracuda-zero-day-attacks/#google%5Fvignette) having the same priority. Similar to NS records, MX records cannot direct to a CNAME record or a domain alias. ### CNAME Record A CNAME or **canonical name** record is a DNS record type that directs users to an alias domain (a subdomain or different domain) to the primary domain name. For example, a CNAME record can direct the web address [www.duocircle.au](http://www.duocircle.au) to the primary website, that is, [www.duocircle.com](http://www.duocircle.com), so as to show that both domains belong to the same company. This ensures you get the most out of the [web traffic](https://www.bigcommerce.com/ecommerce-answers/what-is-website-traffic-and-how-to-interpret-it/) and your **users don’t get lost** on the web. _It’s recommended to use a canonical name record if your website has **multiple subdomains**._ Also, you don’t have to make any edits to the CNAME record if any changes are made to your IP address, as all of them point to the same main domain. Record administrators have to make changes to the A or AAAA records only. You need to keep the following points in mind while using a CNAME record- - _Never place a canonical name record in the root domain._ - It should **always direct to another domain name** and not an IP address. - Avoid pointing a CNAME record to another CNAME record. - **Never point** a CNAME record to NS and MX records. - There shouldn’t be any other resource record with the same name besides [DNSSEC records](https://www.akamai.com/blog/trends/dnssec-how-it-works-key-considerations#:~:text=Domain%20Name%20System%20Security%20Extensions,include%20any%20protocol%20security%20measures.), such as NSEC and RRSIG. ### NS Record An NS record is short for a **name server record**, a DNS record type that indicates the authoritative DNS server and specifies which DNS server contains all the actual zone files or DNS records of a specific domain. Usually, NS records let the internet know which specific nameserver or [DNS server](https://www.cdnetworks.com/web-performance-blog/what-is-a-dns-server/) includes the IP address of the queried domain. Your **website won’t load** in the absence of a properly configured NS record. ### SOA Record SOA record stands for **Start of Authority record**. It contains important details about your DNS zone or domain and monitors traffic between primary and [secondary nameservers](https://networkencyclopedia.com/secondary-name-server/). _It helps in **zone transfers**, which is basically the process where DNS records are shared between nameservers. A DNS file zone is invalid in its absence._ An SOA record has the following set of additional information- - **MNAME**, Primary nameserver of the domain or zone. - **RNAME**, Nameserver **administrator’s email address**. - **REFRESH**, DNS zone file refresh interval. - **SERIAL** \- Nameserver’s or zone’s serial number. - **RETRY**, [Refresh retry interval](https://mxtoolbox.com/problem/dns/dns-soa-retry-value#:~:text=More%20Information%20About%20Dns%20Soa,and%207200%20should%20be%20okay.). - **EXPIRE**, No response timeout. [![DNS TXT record](https://media.mailhop.org/duocircle/images/2023/11/spf-record-tester-3078.jpg)](https://media.mailhop.org/duocircle/images/2023/11/spf-record-tester-3078.jpg) ### TXT Record A textual or TXT record is a frequently encountered **DNS record type** that holds human-readable, explanatory data. It is typically combined with other DNS records to supply supplementary details. A single domain can encompass numerous TXT records. These TXT records find applications in services related to Domain-based Message Authentication, Reporting, and Conformance ([DMARC](/resources/what-is-dmarc)), [Sender Policy Framework](/content/sender-policy-framework) (SPF), and DomainKeys Identified Email ([DKIM](/resources/what-is-dkim)). _In essence, a TXT record can be employed for **validating domain ownership** and mitigating spam._ ## Topics SecurityTrendsUpdates ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) ## Related Articles [ Privacy 6m AI Models Are Stealing Your Passwords By Listening To Your Keyboard Oct 20, 2023 ](/blog/data-privacy/ai-models-are-stealing-your-passwords-by-listening-to-your-keyboard/)[ Privacy 3m Check Point Research Q1 2024 Results- Microsoft, Google, and Linkedin Topped the List; Airbnb is a New Entry Apr 18, 2024 ](/blog/data-privacy/check-point-research-q1-2024-microsoft-google-linkedin-lead-airbnb-joins/)[ Privacy 6m Cyber Security vs Ethical Hacking: What’s the Difference? Apr 10, 2024 ](/blog/data-privacy/cyber-security-vs-ethical-hacking-whats-the-difference/)[ Privacy 3m Cybercrime Surge: The Automotive Sector Under Siege! May 23, 2024 ](/blog/data-privacy/cybercrime-surge-the-automotive-sector-under-siege/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"DNS Record Types: Defined and Explained","description":"A DNS record is a domain name system record that helps users visit a website without having to memorize its IP address.","url":"https://www.duocircle.com/blog/data-privacy/dns-record-types-defined-and-explained/","datePublished":"2023-11-03T16:41:32.000Z","dateModified":"2026-03-25T19:00:00.000Z","dateCreated":"2023-11-03T16:41:32.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/data-privacy/dns-record-types-defined-and-explained/"},"articleSection":"data-privacy","keywords":"Security, Trends, Updates","wordCount":1114,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2023/11/spf-validator-9646.jpg","caption":"DuoCircle blog post image","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"Privacy"},{"@type":"ListItem","position":3,"name":"DNS Record Types: Defined and Explained","item":"https://www.duocircle.com/blog/data-privacy/dns-record-types-defined-and-explained/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"Privacy","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"DNS Record Types: Defined and Explained","item":"https://www.duocircle.com/blog/data-privacy/dns-record-types-defined-and-explained/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"DNS Record Types: Defined and Explained","description":"A DNS record is a domain name system record that helps users visit a website without having to memorize its IP address.","url":"https://www.duocircle.com/blog/data-privacy/dns-record-types-defined-and-explained/","datePublished":"2023-11-03T16:41:32.000Z","dateModified":"2026-03-25T19:00:00.000Z","dateCreated":"2023-11-03T16:41:32.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/data-privacy/dns-record-types-defined-and-explained/"},"articleSection":"data-privacy","keywords":"Security, Trends, Updates","wordCount":1114,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2023/11/spf-validator-9646.jpg","caption":"DuoCircle blog post image","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```