TLS-RPT Checker

Verify the TLS-RPT record that collects reports about TLS delivery failures.

Free • no sign-up • runs live in your browser.

What is TLS-RPT?

TLS-RPT (SMTP TLS Reporting) asks sending providers to send you daily reports whenever they fail to establish a secure TLS connection to your mail servers. It's the companion to MTA-STS and DANE: those enforce TLS, while TLS-RPT gives you visibility when something goes wrong.

How to set it up

Publish a TXT record at _smtp._tls.yourdomain.com such as v=TLSRPTv1; rua=mailto:[email protected]. Reports arrive as JSON and summarize successful and failed TLS sessions.

Frequently asked questions

Do I need MTA-STS to use TLS-RPT?

No, but they're best together: MTA-STS enforces TLS and TLS-RPT tells you when enforcement or negotiation fails.

What format are the reports?

TLS-RPT reports are JSON documents sent to your rua address, usually once per day per reporting provider.

Is TLS-RPT widely supported?

Major providers like Google and Microsoft send TLS-RPT reports, so even a single record gives useful coverage.