Skip to content

What is TTL in DNS?

By Ash, Founder, HosteazePublished 2 min read

TTL (time to live) is a number, in seconds, attached to every DNS record. It tells other servers how long they may keep a copy of that record before asking for a fresh one. A TTL of 3600 means up to an hour, so it controls how quickly your DNS changes reach everyone.

Three wooden hourglasses with their sand at different levels, like DNS caches around the world each counting down to a different expiry time.
Credit: AlLes via Pixabay

Every DNS record comes with a little countdown attached. When a visitor's internet provider looks up your domain, it keeps the answer so it doesn't have to ask again for the next visitor. The TTL decides how long it may keep that answer before it has to check back with your DNS.

How does TTL work?

The standard defines TTL as a time interval in seconds. RFC 2181 sets the allowed range from 0 to 2,147,483,647 seconds (about 68 years), but nobody sensible goes near the top. Resolvers are also free to cap very long TTLs.

What TTL values are common?

TTLIn plain termsGood for
3005 minutesRecords you're about to change, or ones that change often
36001 hourA sensible default for most small business records
144004 hoursRecords that rarely change
864001 dayRecords that almost never change

Providers set their own limits. Cloudflare, for example, lets you choose between 60 seconds and one day on its standard plans, and its "Auto" setting means 300 seconds. A quick live lookup shows the big players keep some records short: in October 2026, google.com's A records had a TTL of 300.

Why does TTL matter when I make a change?

Because the old TTL is what everyone is waiting on. If your MX record has a TTL of 86400 and you switch email provider, some mail servers may keep sending to the old one for up to a day. That's the real reason DNS changes take time to appear everywhere.

The fix is to plan ahead:

This is the single most useful trick when changing MX records or pointing a domain at a new website.

What is negative caching?

Resolvers also remember when a record doesn't exist. If someone looks up a TXT record before you've added it, the "not found" answer is cached too. RFC 2308 says that wait is set by your domain's SOA record (a housekeeping record every domain has), using the lower of its minimum field and its own TTL. So if a brand-new record seems stubbornly missing, an early lookup may be the culprit. Give it a little time before you start editing things again.

Frequently asked questions

What is a good default TTL?

An hour (3600 seconds) is a sensible default for most records on a small business domain. Drop to 300 seconds for a day or two around planned changes, then put it back.

Does a low TTL slow my website down?

Only slightly, and only for the first visit after a cached copy expires, because the visitor's resolver has to ask again. For most small sites the difference is too small to notice, but there's no benefit in leaving every record at the minimum forever.

Why did my change take longer than the TTL?

Usually because the TTL that matters is the old one. Resolvers that cached the record before you edited it keep it for the full old TTL. Your own computer or browser can also cache answers for a while.

Sources

  1. RFC 1035, Domain Names, Implementation and Specification (section 3.2.1)
  2. RFC 2181, Clarifications to the DNS Specification (section 8, TTL)
  3. RFC 2308, Negative Caching of DNS Queries
  4. Cloudflare Docs, Time to Live (TTL)
A brass padlock with two keys beside it on a white backgroundTutorialHow to set up DMARC for Microsoft 365Add an SPF record with include:spf.protection.outlook.com, then create the two DKIM CNAME records Microsoft gives you and switch on DKIM signing in the Defender portal. Once both pass, add a TXT record at _dmarc with v=DMARC1; p=none; rua=mailto: and a reporting address, and tighten the policy later.Email and domains · 15 October 2026An old iron key in a rustic wooden door lockTutorialHow to set up DMARC for Google WorkspaceFirst make sure SPF includes _spf.google.com and DKIM is switched on in the Google Admin console. Wait 48 hours, then add a TXT record at _dmarc on your domain with the value v=DMARC1; p=none; rua=mailto: followed by a reporting address. Read the reports for a few weeks before moving to quarantine.Email and domains · 15 October 2026A tall stack of envelopes and letters seen side on, the scale bulk senders work atQuestionGoogle, Yahoo and Outlook bulk sender rules, explainedGmail, Yahoo and Outlook.com require anyone sending around 5,000 or more emails a day to them to pass SPF, DKIM and DMARC, offer one-click unsubscribe and keep spam complaints below 0.3%. Every sender, whatever the volume, needs at least SPF or DKIM, valid reverse DNS and a low spam rate.Email and domains · 15 October 2026Red octagonal stop sign against a blue sky, like a mail server refusing a messageQuestionWhat does a 550 email bounce error mean?A 550 error means the receiving mail server permanently refused your email, so it won't try again. The extra code after it gives the reason. 5.1.1 means the address doesn't exist, 5.7.1 means it was blocked as spam or by a policy, and 5.7.26 means your domain's SPF or DKIM authentication failed.Email and domains · 14 October 2026Two stacked cardboard boxes, ready for a move, like your email moving to a new providerTutorialHow to change MX records without losing emailLog in to wherever your domain's DNS is managed, delete the old MX records, and add the new ones your email provider gives you with the exact priority numbers. Lower the TTL a day before if you can. New email reaches the new provider within minutes to hours, so keep the old mailboxes open for a few days.Email and domains · 14 October 2026

Want email on your own domain?

Hosteaze hosting plans let you set up mailboxes on your own domain. See what each plan includes.

See hosting plans