1. Home
  2. Developer tools
  3. DNS Propagation Checker

DNS Propagation Checker

After you edit a DNS record, see whether the big public resolvers have noticed. Pick a record type and compare the answers of Cloudflare and Google.

Free, no sign-up. Runs in your browser; see “Private by design” for the one online step.

How to use DNS Propagation Checker

  1. Enter a domain and choose a record type.
  2. Press Compare resolvers.
  3. Read the verdict and the differences.

Features

  • Cloudflare and Google side by side
  • Differences highlighted
  • TTL and response time of each
  • Eight record types
  • Explains why resolvers can disagree
  • Runs only on request

Supported formats

Input

  • Domain names
  • Typed or pasted text

You get

  • Answers from two resolvers
  • Differences

Private by design

Nothing is sent until you press Compare. Then the domain and record type are sent over HTTPS to both Cloudflare (cloudflare-dns.com) and Google (dns.google), which see them together with your IP address under their own privacy terms. openWorkstand never receives them. How local processing works

Good to know

  • Only two resolvers are compared; browsers cannot reach resolvers around the world.
  • Agreement now does not mean every resolver has refreshed its cache.

Guide

Has my DNS change spread? Comparing two big resolvers

Nothing in DNS changes everywhere at once. When you edit a record, the authoritative servers know immediately, but thousands of resolvers around the world may still hold the old answer in their caches. “Propagation” is the name for those caches expiring one by one. The page helps you see where two of the biggest resolvers stand.

Why there is no single moment

Each cached answer carries a time to live (TTL) set by the zone when the resolver fetched it. A resolver that looked the record up one second before your change keeps the old data for the full TTL, while one that looked it up an hour earlier will refresh sooner. Operating systems, browsers and home routers add their own caches. The result is a patchwork: during the window, some visitors see the new site and some the old, and the same visitor may even flip between them as different resolvers answer. The worst case is the TTL that was in place before the change, not the one you set afterwards.

What the page does

Enter a domain, choose a record type (A, AAAA, CNAME, MX, NS, TXT, SOA or CAA) and press Compare resolvers. The page asks Cloudflare (1.1.1.1) and Google Public DNS (8.8.8.8) over HTTPS and shows each answer side by side: status, response time, whether DNSSEC validated, and the records with their TTLs. A banner above the two panels says whether they agree and the time of the check, for example “Both resolvers return the same A records for example.com. The records you see are consistent”. Records that differ are called out.

What agreement means

If both resolvers show the new record, the biggest share of users will see it, since a large part of the world uses one of these two or a resolver that forwards to them. It is a good sign, not proof: other providers’ resolvers, your visitors’ routers and devices may hold the old data. The reverse is more informative. If one resolver still shows the old record, you can read its remaining TTL and know the longest it can take. A TTL counting down from a few hundred seconds means a few minutes; one from 86,400 means up to a day.

A change routine that avoids surprises

  1. A day or more ahead, lower the TTL to 300 seconds, and wait for the old TTL to pass (the DNS TTL Calculator works out the times).
  2. Make the change and run this comparison until both resolvers agree.
  3. Test the site from a couple of networks, including mobile data.
  4. Raise the TTL again once you are sure.

A worked example

Press Sample to compare the A records of example.com. The page reports that both resolvers return the same records and that the result is consistent. Each panel shows two addresses with a TTL, and the two panels list them in different order with different TTLs, for example 264 and 300 seconds, because each resolver cached them at a different moment. The response times differ too, which has nothing to do with the data.

Limits

Only two resolvers can be compared. Results from a different place or network can differ, and an authoritative server that returns different answers to different clients (geo-DNS) will make the two resolvers disagree even without a stale cache. For a direct view of what one resolver returns use the DNS Lookup.

Checked against the current version of the DNS Propagation Checker on .

Frequently asked questions

Why do other propagation checkers show dozens of locations and this one only two?

Those sites run servers around the world that query from each place. A web page in your browser can only reach DNS-over-HTTPS resolvers that permit cross-origin requests, which are a handful of large public services.

Does flushing my computer's DNS cache make the change appear?

Only if the stale copy was in your own cache. If your router or provider's resolver still holds the old answer, it stays until the TTL expires, whatever you do locally.

How long does DNS propagation take?

Up to the old record’s TTL for resolvers that cached it, so it is often minutes with a short TTL and up to a day or more with long ones.

Can this test resolvers around the world?

No. Browsers can only reach resolvers that allow web requests, so it compares two large ones. Matching answers are encouraging but not proof for every user.

Is anything sent over the internet?

Nothing is sent until you press Compare. Then the domain and record type are sent over HTTPS to both Cloudflare (cloudflare-dns.com) and Google (dns.google), which see them together with your IP address under their own privacy terms. openWorkstand never receives them.

Keep working with the result

openWorkstand also includes a free workspace with documents, spreadsheets, tasks, projects and a calendar that save to a folder on your computer.