How to Check Your Domain's DNS Records Using Dig, Nslookup, or an Online Checker

When you update a DNS record, point your domain to a new host, or set up email authentication, you want proof the change actually took effect, not just a guess based on whether your browser shows the new site yet. The most reliable way to check is to query DNS directly, using a command-line tool or a free online checker, rather than relying on what your own device currently shows you.

These steps work the same whether your hosting account is on cPanel or DirectAdmin, since you're checking DNS from outside your hosting account entirely.

Using an Online DNS Checker (No Software Needed)

The simplest option is a free online DNS checker tool, such as whatsmydns.net. These tools query DNS servers in multiple countries at once, so you can see whether a change has reached your area yet without installing anything.

1. Open the DNS checker website in your browser.
2. Enter your domain name (for example, yourdomain.co.ke).
3. Choose the record type you want to check: A, CNAME, MX, TXT, or NS.
4. Click Search and review the results shown per location.

A green check or matching value at most locations means the change has propagated widely. A few locations lagging behind is normal and usually resolves within a few hours.

Using Command-Line Tools

If you prefer to check directly from your computer, both Windows and Mac or Linux have built-in tools for querying DNS.

On Windows (nslookup)

1. Open the Command Prompt (search for cmd in the Start menu).
2. Type nslookup yourdomain.co.ke and press Enter to check the A record.
3. To check a specific record type, add the -type= flag, for example: nslookup -type=MX yourdomain.co.ke or nslookup -type=TXT yourdomain.co.ke.

On Mac and Linux (dig)

1. Open the Terminal application.
2. Type dig yourdomain.co.ke and press Enter to check the A record.
3. To check a different record type, add it after the domain, for example: dig yourdomain.co.ke MX or dig yourdomain.co.ke TXT.
4. Look at the ANSWER SECTION in the output. This shows the actual value your domain is currently returning.

What to Check For

• A record: should return the IP address of your current hosting server. Compare it against the IP address shown in your hosting account.
• CNAME: should point to the correct target hostname, such as a subdomain pointing to a third-party service.
• MX: should list the correct mail server or servers for your domain, in the right priority order. This matters most right after switching email providers.
• TXT: used for things like SPF, DKIM, and domain verification codes. The value must match exactly, including spacing, or verification can fail.
• NS: shows which nameservers are currently authoritative for your domain. This matters most right after changing nameservers.

If a command-line lookup and an online checker disagree, trust the online checker for the broader picture: your own computer or router may be using a cached DNS answer even after the record has updated everywhere else. Restarting your browser or flushing your local DNS cache can resolve that mismatch.

If you've confirmed the correct record is live everywhere but your website or email still isn't behaving as expected, the issue is likely on the hosting or email configuration side rather than DNS. For more on why changes take time to show up everywhere, see How Long Do DNS Changes Take to Propagate?