---
title: "DNS A Vs AAAA Records: Key Differences And When To Use Each | DuoCircle"
description: "Learn the key differences between DNS A and AAAA records, how they work, and when to use each for reliable IPv4 and IPv6 connectivity across networks."
image: "https://www.duocircle.com/images/og-default.png"
canonical: "https://www.duocircle.com/blog/dns-a-vs-aaaa-records-key-differences-when-to-use/"
---

Quick Answer

DNS A records point domains to IPv4 addresses, while AAAA records point to IPv6 addresses. Use A for IPv4 connections and AAAA for IPv6-enabled networks. Understanding the difference helps ensure reliable DNS resolution and connectivity.

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fdns-a-vs-aaaa-records-key-differences-when-to-use%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=DNS%20A%20Vs%20AAAA%20Records%3A%20Key%20Differences%20And%20When%20To%20Use%20Each&url=undefined%2Fblog%2Fdns-a-vs-aaaa-records-key-differences-when-to-use%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fdns-a-vs-aaaa-records-key-differences-when-to-use%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fdns-a-vs-aaaa-records-key-differences-when-to-use%2F&title=DNS%20A%20Vs%20AAAA%20Records%3A%20Key%20Differences%20And%20When%20To%20Use%20Each "Share on Reddit") [ ](mailto:?subject=DNS%20A%20Vs%20AAAA%20Records%3A%20Key%20Differences%20And%20When%20To%20Use%20Each&body=Check out this article: undefined%2Fblog%2Fdns-a-vs-aaaa-records-key-differences-when-to-use%2F "Share via Email") 

![DNS A AAAA ](https://media.mailhop.org/duocircle/dmarc-report-7681-1787915944225.jpg) 

DNS A and AAAA records are essential building blocks of the Domain Name System (DNS), connecting human-readable domain names to the IP addresses that computers use to access websites, applications, APIs, and other online services. While both records perform the same basic function of mapping a hostname to an IP address, they support different Internet Protocol versions: A records use IPv4, while AAAA records use IPv6\. Understanding the differences between them helps you choose the right DNS configuration, avoid connectivity issues, and support reliable dual-stack infrastructure.

In this guide, we’ll explain how **A and AAAA records** work, compare their key differences, explore common use cases, and show when you should use one or both for modern websites and applications.

## What DNS Records Do and Where A/AAAA Fit In

The **domain name system** is the distributed naming layer that translates a human-readable domain name such as example.com into an IP address that computers can use to reach a web server, app endpoint, API, or other internet service. Without DNS, users would need to remember numeric internet addresses instead of memorable names.

At a technical level, DNS records are instructions stored in a DNS zone. _Each resource record has a record type, a name, a TTL, and a record value. A name server hosts the authoritative data for the zone, while a DNS resolver performs a DNS lookup on behalf of the user or application._ During that DNS lookup, the resolver sends a DNS query to locate the correct [DNS server](https://www.cloudflare.com/learning/dns/what-is-a-dns-server/) and retrieve the requested DNS resource.![DMARC Report Service 7682](https://media.mailhop.org/duocircle/dmarc-report-service-7682-1787915958582.jpg)A and AAAA records are both address records. An A record maps a hostname to an IPv4 address, while an AAAA record maps a hostname to an IPv6 address. In other words, both serve the same broad purpose address mapping but they use **different IP version formats**.

Other DNS records serve different purposes. An [MX record](https://www.digicert.com/blog/what-is-an-mx-rec) identifies the mail servers responsible for receiving email for a domain, while a CNAME record aliases one hostname to another. Other records, such as SPF, [DKIM](https://www.duocircle.com/resources/what-is-dkim), DMARC, BIMI, MTA-STS, and TLS-RPT, support email authentication, security, and deliverability. Together, these DNS records help organizations maintain reliable **web and email services** while reducing configuration and security issues.

## How a DNS Lookup Uses Address Records

When a browser loads a website, it usually begins with a DNS lookup for an address record. When a client connects to a hostname, its DNS resolver may retrieve both A and AAAA records. The client can then use the available **IPv4 or IPv6 path** based on network connectivity and connection-selection behaviour. Many modern systems request both DNS records and choose the best reachable path.

#### Authoritative DNS and Zone Files

In traditional DNS management, address records are stored in a zone file managed by a DNS provider or managed DNS platform. Organizations often centralize DNS configuration to simplify record management, reduce the risk of outages, and maintain reliable access to public-facing websites, applications, and services.

##### TTL and DNS Propagation

A low [Time to live (TTL)](https://www.ibm.com/think/topics/time-to-live) can help changes to an A or AAAA record take effect sooner, but the timing still depends on **DNS resolver caching** behaviour. This matters when migrating hosting providers, changing a web application’s IP address, or moving services between cloud, hosting, and CDN environments.

## DNS A Records Explained: IPv4 Mapping, Use Cases, and Examples

_An A record is a DNS resource record that maps a hostname to an IPv4 address._ IPv4 is the older and still widely used Internet Protocol addressing system. It uses **32-bit addresses** written in dotted-decimal notation, such as:

```

example.com.      3600    IN    A      192.0.2.10
www.example.com.  3600    IN    A      192.0.2.20
```

In this example, the A record for example.com points to 192.0.2.10, and the A record for [www.example.com](http://www.example.com) points to 192.0.2.20\. During a DNS lookup, the resolver retrieves the A record and returns the IPv4 IP address to the client.![DMARC Reporting Service 7683](https://media.mailhop.org/duocircle/dmarc-reporting-service-7683-1787915965821.jpg)Common A record use cases include:

- Hosting a website on an **IPv4-enabled server**
- Pointing an app subdomain, such as app.example.com, to an IPv4 endpoint
- Directing [Application Programming Interfaces](https://www.coursera.org/in/articles/what-is-an-api) traffic to an IPv4 load balancer
- Mapping internal or external services in hybrid environments
- Supporting legacy systems that do not fully support IPv6

Because IPv4 has been used for decades, an A record offers broad compatibility. Many networks, older routers, legacy devices, and enterprise systems still rely heavily on IPv4\. For businesses running **outbound email systems**, customer portals, or supplier platforms, the A record remains essential for reachability.

However, IPv4 address space is limited. Public IPv4 addresses are scarce, which is one reason the internet continues to move toward IPv6\. Even so, the A record is not going away soon; it remains one of the most important DNS records in practical [DNS configuration](https://www.hivelocity.net/kb/dns-configuration-everything-you-need-to-know/).

## DNS AAAA Records Explained: IPv6 Mapping, Use Cases, and Examples

An AAAA record is the IPv6 equivalent of an A record. It maps a hostname to an IPv6 address instead of an IPv4 address. IPv6 uses 128-bit addresses written in **hexadecimal notation**, such as:

```

example.com.      3600    IN    AAAA   2001:db8::10
www.example.com.  3600    IN    AAAA   2001:db8::20
```

In this case, the AAAA record tells the domain name system that example.com and [www.example.com](http://www.example.com) can be reached over IPv6\. When a client performs a DNS lookup, the resolver can return the AAAA record value if the client, network, and destination all support IPv6.

IPv6 was designed to solve the shortage of IPv4 addresses and improve **long-term scalability**. It is also important for modern [cloud hosting](https://www.techtarget.com/it-infrastructure/definition/cloud-hosting), mobile networks, CDNs, IoT environments, and globally distributed applications. A properly configured AAAA record allows IPv6-capable users to connect without falling back to IPv4.

Typical AAAA record use cases include:

- Enabling IPv6 access for websites and web apps
- Supporting modern **mobile carrier networks**
- Preparing infrastructure for future internet growth
- Reducing dependency on scarce IPv4 space
- Improving compatibility with IPv6-first networks

From a **network protocol** perspective, IPv6 is not simply a longer address format. It is a newer generation of the Internet Protocol with a much larger address pool. Still, an AAAA record only works when the server, firewall, [Content Delivery Network (CDN)](https://www.f5.com/glossary/content-delivery-network-cdn) , DNS provider, and application stack are all configured correctly for IPv6 traffic.![SMTP Email 7684](https://media.mailhop.org/duocircle/smtp-email-7684-1787915973167.jpg)

## Key Differences Between A and AAAA Records: Address Format, Compatibility, and Performance

The main difference between an A record and an AAAA record is the type of IP address each returns. An A record returns an IPv4 address, while an AAAA record returns an **IPv6 address**.

### Address Format

IPv4 addresses are shorter and use dotted-decimal notation:

```
192.0.2.10
```

IPv6 addresses are longer and use hexadecimal notation:

```
2001:db8::10

```

_This address format difference reflects the underlying IP version. IPv4 uses 32-bit addressing, while IPv6 uses 128-bit addressing._

### Compatibility

An A record is still the safest baseline for **universal compatibility** because IPv4 remains widely supported. An AAAA record is essential for IPv6 reachability, but it should only be published when the destination service truly supports IPv6.

If an AAAA record points to an unreachable IPv6 endpoint, some users may experience slow page loads, connection failures, or fallback delays. This can affect [user experience](https://en.wikipedia.org/wiki/en:User%5Fexperience) and, for web applications, revenue-critical conversion paths. For email-related hostnames, poor DNS records can also complicate domain health, although mail routing itself usually depends more directly on MX record, [SPF](https://www.duocircle.com/content/sender-policy-framework/sender-policy-framework-example/), DKIM, DMARC, MTA-STS, and **TLS-RPT configuration**.

### Performance and Routing

IPv6 may perform better in some networks, especially where **carriers and cloud providers** have optimized IPv6 routing. In other cases, IPv4 may still be faster or more stable. Modern operating systems often use connection selection logic, such as Happy Eyeballs, to test IPv4 and IPv6 paths and connect through the fastest working route.

For this reason, performance is not determined by the A record or AAAA record alone. It depends on hosting infrastructure, CDN edge locations, DNS resolver behavior, network routing, firewall policies, and the quality of the authoritative DNS server.![Sendgrid Alternative 7685](https://media.mailhop.org/duocircle/sendgrid-alternative-7685-1787915995901.jpg)

## When to Use A, AAAA, or Both for Modern Website and App Hosting

Use an A record when your website, app, API, or service needs to be reachable through an IPv4 address. Because IPv4 remains widely supported across **global networks**, A records are still commonly used in production environments.

Use an AAAA record when the same service is fully reachable through an IPv6 address. Before publishing the AAAA record, confirm that the server listens on IPv6, the firewall allows IPv6 traffic, [TLS certificates](https://www.paloaltonetworks.in/cyberpedia/what-is-tls-certificate) are valid for the hostname, and monitoring checks both IP versions.

Use both an A record and an AAAA record when you want dual-stack hosting. Dual-stack is the recommended approach for many modern **websites and applications** because it supports both IPv4 and IPv6 clients. _In a dual-stack setup, the domain name system can return both DNS records during a DNS lookup, allowing the client to choose the best connection path._

For production DNS management, follow these practices:

- Keep A record and AAAA record values aligned with your hosting provider or CDN documentation.
- Test every hostname after **DNS propagation** using a DNS Record Checker.
- Monitor domain health, uptime, and reputation monitoring signals.
- Avoid publishing an AAAA record until IPv6 is fully configured end to end.
- Review related DNS records, including MX and [CNAME records](https://www.ionos.com/digitalguide/hosting/technical-matters/cname-record/), and verify that SPF, DKIM, and DMARC are properly configured for email services.
- Use managed DNS from reliable DNS Providers for resilience and faster failover.![SMTP Relay 7686](https://media.mailhop.org/duocircle/smtp-relay-7686-1787916004342.jpg)For organizations managing outbound email, accurate DNS configuration is essential for reliable delivery and domain security. Properly configured DNS records can support email authentication, reduce the risk of **spoofing and phishing**, and help maintain a strong [sender reputation](https://emaillabs.io/en/understanding-email-sender-reputation-and-how-it-affects-email-deliverability/). Organizations should regularly review their DNS records and monitor authentication results to identify configuration issues before they affect [email security](https://www.duocircle.com/) or delivery.

![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) 

Brad Slavin 

General Manager

General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio.

## Secure your email infrastructure

Protect, authenticate, and deliver. Contact our team to find the right solution.

[Contact Sales](/contact/) [Explore Products](/products/) 

Share this article

[ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fdns-a-vs-aaaa-records-key-differences-when-to-use%2F) [ ](https://twitter.com/intent/tweet?text=DNS%20A%20Vs%20AAAA%20Records%3A%20Key%20Differences%20And%20When%20To%20Use%20Each&url=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fdns-a-vs-aaaa-records-key-differences-when-to-use%2F) [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fwww.duocircle.com%2Fblog%2Fdns-a-vs-aaaa-records-key-differences-when-to-use%2F) Copy 

Related Articles

- [ ![DMARC Reporting Solutions](https://media.mailhop.org/duocircle/spf-record-generator-1901-1781856849705.jpg)  12 Best DMARC Reporting Solutions That Provide Actionable Email Authentication Insights Blog ](/blog/12-best-dmarc-reporting-solutions-actionable-email-authentication-insights/)
- [ ![Email Uptime Monitoring](https://media.mailhop.org/duocircle/sender-policy-framework-0901-1783581559231.jpg)  15 Email Uptime Monitoring Features To Look For In 2026 Blog ](/blog/15-email-uptime-monitoring-features-to-look-for-in-2026/)
- [ ![DNS Propagation Checker](https://media.mailhop.org/duocircle/dmarc-report-0221-1786611877303.jpg)  8 DNS Propagation Checker Features To Look For In 2026 Blog ](/blog/8-dns-propagation-checker-features-to-look-for-in-2026/)

## Related Articles

[  comparisons  12 Best DMARC Reporting Solutions That Provide Actionable Email Authentication Insights  Jun 19, 2026 ](/blog/12-best-dmarc-reporting-solutions-actionable-email-authentication-insights/)[  comparisons  15 Email Uptime Monitoring Features To Look For In 2026  Jul 9, 2026 ](/blog/15-email-uptime-monitoring-features-to-look-for-in-2026/)[  comparisons  8 DNS Propagation Checker Features To Look For In 2026  Aug 13, 2026 ](/blog/8-dns-propagation-checker-features-to-look-for-in-2026/)

```json
{"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"DNS A Vs AAAA Records: Key Differences And When To Use Each","description":"Learn the key differences between DNS A and AAAA records, how they work, and when to use each for reliable IPv4 and IPv6 connectivity across networks.","url":"https://www.duocircle.com/blog/dns-a-vs-aaaa-records-key-differences-when-to-use/","datePublished":"2026-08-28T00:00:00.000Z","dateModified":"2026-08-28T00:00:00.000Z","dateCreated":"2026-08-28T00:00:00.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/dns-a-vs-aaaa-records-key-differences-when-to-use/"},"articleSection":"comparisons","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/dmarc-report-7681-1787915944225.jpg","caption":"DNS A AAAA "},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"comparisons"},{"@type":"ListItem","position":3,"name":"DNS A Vs AAAA Records: Key Differences And When To Use Each","item":"https://www.duocircle.com/blog/dns-a-vs-aaaa-records-key-differences-when-to-use/"}]}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"comparisons","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"DNS A Vs AAAA Records: Key Differences And When To Use Each","item":"https://www.duocircle.com/blog/dns-a-vs-aaaa-records-key-differences-when-to-use/"}]}
```

```json
{"@context":"https://schema.org","@type":"BlogPosting","headline":"DNS A Vs AAAA Records: Key Differences And When To Use Each","description":"Learn the key differences between DNS A and AAAA records, how they work, and when to use each for reliable IPv4 and IPv6 connectivity across networks.","url":"https://www.duocircle.com/blog/dns-a-vs-aaaa-records-key-differences-when-to-use/","datePublished":"2026-08-28T00:00:00.000Z","dateModified":"2026-08-28T00:00:00.000Z","dateCreated":"2026-08-28T00:00:00.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/dns-a-vs-aaaa-records-key-differences-when-to-use/"},"articleSection":"comparisons","keywords":"","image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/dmarc-report-7681-1787915944225.jpg","caption":"DNS A AAAA "},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}
```
