MTA-STS & TLS-RPT Checker
Verify a domain's MTA-STS policy and TLS reporting setup
MTA-STS & TLS-RPT Checker
Enter a domain name to validate its MTA-STS policy, DNS records, and TLS reporting configuration.
No domain checked yet
Enter a domain above and click Check MTA-STS & TLS-RPT to validate its configuration.
Tool Features
A complete MTA-STS and TLS-RPT validation
DNS Records
Validates the _mta-sts and _smtp._tls TXT records
Live Policy Fetch
Fetches and parses your policy file over HTTPS
Actionable Results
Clear pass / warn / fail on every requirement
Enforcement Status
Tells you whether TLS is enforced or still in testing
Learn more
Guides & explainers related to this tool
Guide
How to Set Up MTA-STS
Step-by-step: publish the policy file, DNS records, and move from testing to enforce.
Article
What Is MTA-STS?
How MTA-STS forces inbound email over valid TLS, and what each policy field means.
Article
What Is TLS-RPT?
How SMTP TLS reporting gives you daily visibility into TLS failures.