How do I make sure a robots.txt edit will not block pages I need indexed?
Write down which URLs must stay crawlable and which must be blocked, then check every rule in the new file against that list before you publish. Pay attention to rule precedence, case, and wildcards, because those cause most mistakes. After publishing, confirm Google fetched the new file and watch for crawl changes.
robots.txt is one of the smallest files on a website and one of the easiest to get badly wrong. A single slash in the wrong place can tell every crawler to skip your entire site. And because nothing visibly breaks for human visitors, a bad edit can sit there for weeks before anyone notices traffic sliding.
The stakes are higher now that the same file controls access for AI crawlers like GPTBot, ClaudeBot, and PerplexityBot alongside Googlebot. Teams are editing robots.txt more often than they used to, usually to make decisions about AI. More edits means more chances to break something.
What does robots.txt actually control?
robots.txt tells crawlers which paths on a host they may or may not request. It controls crawling, not indexing. A blocked page can still appear in search results if other pages link to it, just without its content. If you need a page kept out of results, a noindex directive is the right tool.
That distinction trips people up constantly. They add a Disallow rule to hide a page, the page keeps appearing in Google with no description, and they assume the file is broken. It is working exactly as designed. I wrote about the difference in detail in noindex versus robots disallow for AI crawlers.
The file also has a fixed location. Google's documentation says it must sit in the top-level directory of a site, and crawlers do not look for robots.txt files in subdirectories. Each subdomain is its own host, so a staging subdomain or a docs subdomain needs its own file if you want to control it.
Which rules cause the most mistakes?
The usual mistakes come from rule precedence, case sensitivity, and wildcards. Google uses the most specific rule based on path length, and when rules conflict it uses the least restrictive one. Paths are case-sensitive. The asterisk matches any characters and the dollar sign marks the end of a URL. Misreading any of these blocks the wrong pages.
Precedence is the subtle one. If you disallow a folder and then allow one page inside it, the longer, more specific Allow rule wins for that page. That is usually what people want. But if two rules are the same length and conflict, Google picks the less restrictive one, which can surprise anyone expecting the block to win.
Case sensitivity bites on CMS sites. If your rule says /Blog/ and your URLs use /blog/, the rule does nothing. Wildcards bite in the other direction. A pattern meant to block one kind of URL parameter can quietly match far more URLs than intended, including pages you need crawled.
How do I build a test list before editing the file?
Make a short list of real URLs from your site in two columns: must be crawlable and must be blocked. Include your homepage, key product and pricing pages, a few blog posts, CMS collection pages, and any URLs with parameters. Every proposed rule gets checked against this list before the file changes.
I build the list from three sources. The sitemap gives me the pages I definitely want crawled. Google Search Console gives me the pages that actually get impressions. And the CMS gives me the URL patterns, such as /blog/ or /case-studies/, that rules will match. Ten to twenty URLs is usually enough to catch most mistakes.
The blocked column matters as much as the crawlable one. If you are adding a rule to keep crawlers out of internal search results or filtered URLs, put a few real examples in the blocked column. A rule you cannot test against a real URL is a rule you are trusting blindly.
How do I check rules against the list without a live tool?
Walk each URL through the rules by hand, or use a robots.txt parser to do it for you. For each URL, find every rule that matches its path, pick the longest match, and resolve ties toward the less restrictive rule. If any result disagrees with your list, fix the rule before publishing.
Doing this by hand for twenty URLs takes a few minutes and forces you to understand what every line does. That understanding is worth more than any tool. When I hand a robots.txt change to a client, I include the test list and the expected result for each URL, so anyone can recheck it later.
Also check for lines that are not doing what you think. Google's documentation says it ignores invalid lines, so a typo in a directive does not throw an error. It simply gets skipped. A misspelled Disallow is a rule that silently does not exist, which is why reading the final file line by line matters.
What happens after I publish the new robots.txt?
Crawlers will not see the change instantly. Google says it generally caches robots.txt for up to 24 hours, so a fix can take a day to take effect. In Search Console, the robots.txt report shows the files Google found and when it last crawled them, and lets you request a recrawl after a critical change.
On Webflow, robots.txt is edited in the site settings rather than uploaded as a file, so check Webflow's help center for where that setting sits today. I publish the change, open the live file in a browser to confirm the exact text, and then request a recrawl in Search Console if the change matters for indexing.
Then I watch. The robots.txt report also flags parsing errors, and Google notes that errors prevent a rule from being used. Over the following week I check crawl stats and the pages report for any sudden drop in crawled URLs, which is the clearest sign a rule blocked more than intended.
What if robots.txt cannot be fetched at all?
That depends on the error. Google treats most 4xx responses as if no robots.txt exists, so it crawls without restrictions. A 5xx server error is more serious. Google says that for the first 12 hours it stops crawling the site while it keeps trying to fetch the file. Server errors on robots.txt can pause crawling.
This is why I check the live file's response, not just its text. A file that returns an error because of a hosting or proxy issue can do more damage than a badly written rule. I always confirm the status code, especially on sites behind custom proxies or CDNs.
File size is the other edge case. Google enforces a 500 KiB limit and ignores anything after that point. Most sites are nowhere near it, but sites that generate robots.txt automatically from long lists of paths can creep up on it without anyone noticing.
How should I handle AI crawlers in the same file?
Treat each AI crawler as its own user agent group with explicit rules, and test those groups against your URL list just like Googlebot. Decide on purpose which crawlers can access which sections. Do not copy a block of AI rules from a forum post without checking every line against your own site.
The decision itself is strategic, not technical. Some teams want every AI crawler welcome so their pages can be cited. Others want training crawlers blocked and search crawlers allowed. Whatever you decide, write it down next to the file so the next person knows the rules were intentional. My view on that decision is in my robots.txt strategy for AI bots on Webflow.
Remember that robots.txt is a request, not a lock. Reputable crawlers follow it, but it does not secure anything. If content truly must not be accessed, protect it with authentication. For finer control over how specific files are indexed, an X-Robots-Tag header can do things robots.txt cannot.
What should you do next?
Before your next robots.txt edit, build a list of twenty real URLs split into crawlable and blocked. Check every rule against it, read the final file line by line for typos, publish, confirm the live text, and request a recrawl in Search Console. Then check crawl stats for a week.
That routine takes less than an hour and protects the single most powerful file on your site. Most robots.txt disasters I hear about were not complex. They were one untested line.
If you want a second pair of eyes on a robots.txt change, or a full crawl access review for Google and AI crawlers, reach out at pravinkumar.co. Let's chat before the change goes live, not after.
Get found, cited and the back office automated
Let's make your site the source AI engines quote and wire up the systems behind it.
Read more blogs
Let's get your website found and cited by AI
Tell me what you're working on, whether AI search is skipping your product, your back office is buried in manual work, or you need a build that does both.