TLS-RPT Checker

Check whether your domain publishes a TLS-RPT record, which asks other servers to send you reports when they fail to deliver to you over TLS.

Want the full picture - MX, SPF, DKIM, DMARC and more?

Run a full Domain Check

About these results

This tool reads your domain's public _smtp._tls TXT record at the moment of the check. Results reflect current public DNS and can be affected by caching and propagation (up to 24-48 hours). Guidance is general and not a substitute for your provider's official instructions. We don't store the domains you check.

What is TLS-RPT?

TLS-RPT asks other mail servers to send you reports whenever they can't deliver to your domain over a secure TLS connection - the monitoring half that pairs with MTA-STS's enforcement.

How to set it up

Publish a TXT record at _smtp._tls.yourdomain: v=TLSRPTv1; rua=mailto:you@yourdomain.

Why it matters

Without TLS-RPT you have no visibility into silent TLS delivery failures. With it, you learn when senders can't reach you securely so you can fix it early.

Related checks: Full domain check SPF DKIM DMARC MX lookup MTA-STS DNSSEC BIMI