About this tool. TLS-RPT is the companion to MTA-STS: it asks providers to send you a daily report whenever encrypted delivery to your domain fails. One DNS record, and you'll actually know when something breaks.
Ten signals decide whether your mail arrives. You just checked one.
TLS-RPT tells you when encryption breaks on the way in. Whether your outbound mail authenticates at all is a separate question, and the more common problem.
- SPF, DKIM, DMARC, MX and blocklist status, graded A to F in one pass
- Every problem written out in plain English, with the record to publish
- Saved under Reports, so you can re-run it and see what changed
- One domain watched against the blocklists daily
Run the full checkup free
No card, and nothing to cancel.
How to read your TLS-RPT record
- TLS-RPT publishes an address where other servers send reports when TLS delivery to you fails. It is how you find out about encryption problems.
- It is a simple TXT record at _smtp._tls.yourdomain with a reporting destination.
Common problems and how to fix them
You enforce MTA-STS but see no reports
Add a TLS-RPT record so failures are reported. Without it, downgrade or certificate problems stay invisible.
Common questions.What is TLS-RPT?
SMTP TLS Reporting. It asks sending servers to report failures in encrypting mail to you, so you can catch problems early.
Do I need MTA-STS to use TLS-RPT?
They pair well but are independent. TLS-RPT gives you visibility; MTA-STS enforces the encryption.