Look up MX (Mail Exchange) records for any domain to verify mail server configuration, check priorities, and troubleshoot email delivery issues. All lookups are performed using Google Public DNS in your browser.

MX (Mail Exchange) records are a type of DNS record that specifies which mail servers accept email for a domain. When someone sends an email to user@example.com, the sending server performs a DNS lookup for the MX records of example.com to determine where to deliver the message. Without properly configured MX records, email delivery will fail completely.
MX records are critical to the email infrastructure of the internet. They work alongside other DNS-based email authentication records like SPF, DKIM, and DMARC to ensure reliable and secure email delivery. Understanding how DNS works is essential background for managing MX records effectively.
Each MX record has two components: a priority value (also called preference) and a mail server hostname. The priority determines the order in which sending servers attempt delivery:
| Priority | Behavior | Typical Use |
|---|---|---|
| 10 | Tried first (lowest = highest priority) | Primary mail server |
| 20 | Tried if priority 10 fails | Secondary/backup server |
| 30 | Tried if 10 and 20 fail | Tertiary backup |
| Equal values | Load balanced randomly | Distributing traffic across servers |
Lower priority numbers indicate higher preference. If two MX records share the same priority value, the sending server randomly selects one, effectively creating round-robin load balancing. This is how large email providers like Google and Microsoft distribute incoming mail across their data centers.
Pro Tip: Always configure at least two MX records with different priorities. If your primary mail server goes down, the backup server will accept messages and queue them for later delivery. This redundancy is essential for business email. Make sure your DNS configuration includes backup mail servers to avoid lost emails.
If you use a hosted email service, your MX records will point to the provider's mail servers. Here are the standard MX configurations for the most widely used email platforms:
| Provider | MX Records | Priority |
|---|---|---|
| Google Workspace | aspmx.l.google.com | 1 |
| Google Workspace | alt1.aspmx.l.google.com | 5 |
| Google Workspace | alt2.aspmx.l.google.com | 5 |
| Microsoft 365 | [tenant].mail.protection.outlook.com | 0 |
| Zoho Mail | mx.zoho.com | 10 |
| Zoho Mail | mx2.zoho.com | 20 |
| ProtonMail | mail.protonmail.ch | 10 |
| ProtonMail | mailsec.protonmail.ch | 20 |
When email delivery fails, MX record misconfiguration is one of the first things to check. Common issues include:
You can verify your overall DNS health using our DNS Lookup tool to check A, AAAA, CNAME, and TXT records alongside your MX configuration. If you suspect your ISP DNS is causing issues, try switching to a public resolver like Google DNS (8.8.8.8) or Cloudflare (1.1.1.1).
Configuring MX records requires access to your domain's DNS management panel. Here is a typical setup process:
Here is an example DNS zone file entry for Google Workspace:
; MX Records for Google Workspace
example.com. IN MX 1 aspmx.l.google.com.
example.com. IN MX 5 alt1.aspmx.l.google.com.
example.com. IN MX 5 alt2.aspmx.l.google.com.
example.com. IN MX 10 alt3.aspmx.l.google.com.
example.com. IN MX 10 alt4.aspmx.l.google.com.
After configuring MX records, you should also set up SPF, DKIM, and DMARC records to protect against email spoofing and improve deliverability.
MX records are just one part of a complete email security setup. Modern email authentication relies on several DNS-based mechanisms working together:
| Record Type | Purpose | DNS Record |
|---|---|---|
| MX | Specifies mail servers for the domain | MX record |
| SPF | Lists authorized sending IP addresses | TXT record |
| DKIM | Adds digital signature to outgoing mail | TXT record (selector._domainkey) |
| DMARC | Policy for handling authentication failures | TXT record (_dmarc) |
| MTA-STS | Enforces TLS encryption for mail transport | TXT + HTTPS policy file |
| DANE/TLSA | Binds TLS certificates to MX servers | TLSA record |
Proper email authentication prevents spoofing attacks where malicious actors send emails that appear to come from your domain. Learn more about protecting your network in our secure home WiFi network guide.
You can also query MX records using command-line tools. This is useful for scripting and server administration:
nslookup -type=mx example.com
nslookup -type=mx example.com 8.8.8.8
dig example.com MX +short
dig @8.8.8.8 example.com MX
host -t mx example.com
If command-line DNS tools aren't resolving correctly, your DNS server may not be responding. Try specifying a public DNS server like 8.8.8.8 directly. You can also test DNS resolution through encrypted channels with our DNS over HTTPS Tester.
If no MX records exist, sending servers will attempt to deliver email to the domain's A record as a fallback (per RFC 5321). However, many modern mail servers reject this approach, and email delivery becomes unreliable. Always configure explicit MX records for any domain that receives email.
Yes. When multiple MX records share the same priority value, sending servers randomly choose between them. This provides basic load balancing across your mail servers, which is how providers like Google distribute traffic across their infrastructure.
Propagation depends on the TTL (Time To Live) value of the existing records. If the TTL is 3600 seconds (1 hour), most DNS resolvers will pick up the change within an hour. In practice, full global propagation can take up to 48 hours. Lowering TTL before a migration helps speed this up.
No, MX records only affect email routing. Your website is served based on A and AAAA records. However, both record types exist in the same DNS zone, so be careful when editing your DNS records not to accidentally modify the wrong entries.
Changing MX records alone shouldn't cause spam issues. However, if you forgot to update your SPF record to include the new mail server's IP addresses, receiving servers may flag your emails as unauthorized. Use our SPF Record Checker to verify your SPF configuration is correct.
No. Per RFC 1035 and RFC 7505, MX records must contain a fully qualified domain name (FQDN), not an IP address. The hostname in the MX record must itself resolve to an A or AAAA record. This is a common misconfiguration that breaks email delivery.
A null MX record (RFC 7505) explicitly declares that a domain does not accept email. It uses priority 0 and a single dot (.) as the hostname: example.com. IN MX 0 . This tells sending servers not to attempt delivery, which is useful for domains used only for web services.
About Tommy N.
Tommy is the founder of RouterHax and a network engineer with 10+ years of experience in home and enterprise networking. He specializes in router configuration, WiFi optimization, and network security. When not writing guides, he's testing the latest mesh WiFi systems and helping readers troubleshoot their home networks.
![]() |
![]() |
![]() |
![]() |
Promotion for FREE Gifts. Moreover, Free Items here. Disable Ad Blocker to get them all.
Once done, hit any button as below
![]() |
![]() |
![]() |
![]() |