Email authentication

TLS-RPT Generator

Generate a TLS-RPT (SMTP TLS Reporting) DNS record to receive reports on TLS delivery failures to your domain. Free, with email or HTTPS reporting.

Configure TLS-RPT

Choose where TLS failure reports are sent. The record updates instantly.

Your TLS-RPT record

Host / Name

_smtp._tls.yourdomain.com

Value (TXT)

v=TLSRPTv1; rua=mailto:[email protected]
TXT
Type
Set one
Destination
Enter an email (mailto:) or an HTTPS endpoint to receive daily TLS reports.

What this TLS-RPT generator does

Builds a valid v=TLSRPTv1 record
Accepts an email (mailto:) or HTTPS reporting endpoint
Supports multiple destinations
Shows the exact _smtp._tls DNS host
Pairs with MTA-STS or DANE for TLS monitoring
One-click copy, ready to paste as a TXT record

Common use cases

  1. 1Getting reports when TLS delivery to your domain fails
  2. 2Monitoring an MTA-STS rollout before enforcing
  3. 3Detecting downgrade attacks on inbound mail
  4. 4Auditing TLS support across sending servers
  5. 5Meeting transport-security compliance requirements
  6. 6Publishing TLS-RPT alongside MTA-STS

Related tools

MTA-STS policy generatorEmail Authentication AnalyzerDMARC generatorSPF generatorDKIM key generatorDMARC Record Checker

About TLS-RPT

TLS-RPT (SMTP TLS Reporting) asks sending servers to send you daily reports about TLS connectivity to your domain — successes and failures. It is a DNS TXT record at _smtp._tls.yourdomain.com containing a rua destination, either a mailto: address or an HTTPS endpoint.

TLS-RPT is the visibility layer for MTA-STS and DANE: publish it first so you can see TLS problems before enforcing, then act on the reports. It has no effect on delivery by itself — it only enables reporting.

More Free Tools Where This Came From

This utility is one of dozens of free, no-login tools for DNS, email, SEO and developers — all instant and private.

See All ToolsTalk to Our Team

HostCloud.in  ·  Pune, India  ·  Serving 34,987+ Websites Since 2020

FREQUENTLY ASKED QUESTIONS

Got Questions? We Have Answers.

What is TLS-RPT?

TLS-RPT (SMTP TLS Reporting) asks sending servers to send you daily reports on TLS connectivity to your domain — both successes and failures.

Where do I publish the record?

Create a TXT record at _smtp._tls.yourdomain.com with the generated v=TLSRPTv1 value.

Can reports go to an HTTPS endpoint?

Yes. The rua destination can be a mailto: address or an https:// URL. You can list more than one, separated by commas.

Does TLS-RPT change delivery?

No. TLS-RPT only enables reporting. It has no effect on whether mail is delivered — it is the visibility layer for MTA-STS and DANE.

Why publish TLS-RPT?

It lets you detect TLS problems and downgrade attacks before enforcing MTA-STS, so you can fix issues without risking delivery.

Should I use TLS-RPT with MTA-STS?

Yes. Publish TLS-RPT first, roll out MTA-STS in testing mode, review the reports, then switch MTA-STS to enforce.