Is DNS propagation instant?

You update your SPF record, save the change, and then... nothing seems to work. Your emails still aren't authenticating. Is something broken, or do you just need to wait?

DNS propagation is not instant. When you make a change to a DNS record, that change doesn't immediately reach every server on the internet. Different DNS resolvers around the world cache your old record until it expires, and only then do they fetch the new one.

How long does that actually take? It depends on your TTL (Time To Live) setting. TTL is a number attached to every DNS record that tells resolvers how long to cache it before checking again. A TTL of 3600 means resolvers will hold onto the old record for up to one hour. A TTL of 86400 means up to 24 hours. Most DNS changes finish propagating globally within 24 to 48 hours, though many resolve much faster than that (often within a few hours).

For email authentication specifically, this matters a lot. If you publish a new SPF record or rotate a DKIM key and then immediately send a campaign, some receiving servers will still see the old record. That can cause authentication failures that look like something is broken when it's really just propagation lag.

A few practical things to know:

• If you can, lower your TTL a day before making the change. This means resolvers will refresh faster when you do update the record.
• Don't send a big campaign right after updating authentication records. Give it a few hours at minimum, ideally overnight.
• Use a DNS lookup tool to check whether your change has propagated. Tools like dnschecker.org let you test your record from multiple locations around the world simultaneously. You're looking for consistent results across all nodes before you assume the change is live.

If you've waited 48 hours and something still looks wrong, that's when it's worth digging deeper. You can check your SPF record in seconds with our free SPF checker, or run your DKIM signature through the DKIM record lookup. Still stuck? Our SOS hotline is free and someone will actually look at your setup with you.