[ Free tool · Check ]
MTA-STS & TLS-RPT Checker
Check your TLS policy record, policy file and TLS reporting.
[ About this tool ]
This MTA-STS and TLS-RPT checker validates the _mta-sts record, fetches the policy file, checks mode and MX coverage, and confirms the TLS-RPT reporting record.
How to read the results
- ›mode: enforce gives full protection; testing only reports.
- ›Every MX host must match an mx: line in the policy.
- ›Some policy files block browser requests (CORS); that is reported, not a failure.
Frequently asked questions
How do I check MTA-STS?
Enter your domain. The tool checks the TXT record, the HTTPS policy file and the TLS-RPT record.
What is the difference between MTA-STS and TLS-RPT?
MTA-STS enforces encrypted delivery; TLS-RPT reports when encrypted delivery fails.
Learn more in our guide: What is MTA-STS? Setup Guide, Record and Policy File
[ Get this fixed for me ]
Free expert review of your result
Our team reviews this result and sends you the exact fixes, at no cost.
[ More tools ]
DMARC Checker
Look up and explain any domain's live DMARC record.
SPF Checker
Validate your SPF record and check the 10-lookup limit.
DKIM Lookup
Verify a DKIM selector is published and the key is valid.
DMARC Generator
Build a valid _dmarc TXT record with guided options.
SPF Generator
List your sending sources and generate a correct v=spf1 record.
DMARC Report Analyzer
Upload XML aggregate reports for an instant compliance dashboard.