Does the TLS-RPT checker change my DNS?

No. It performs a live DNS lookup and reports what is currently published.

Where do I publish the TLS-RPT record?

Publish a TXT record at _smtp._tls.yourdomain.com with v=TLSRPTv1 and a rua tag containing your reporting destinations.

Which reporting destinations are supported?

TLS-RPT supports mailto: email addresses and https:// URLs. Separate multiple destinations with commas in one rua tag.

Does the checker inspect my TLS-RPT reports?

No. It checks the DNS record, including whether it is present, unique and valid. It does not receive reports or verify whether destinations accept them.

Free TLS-RPT checker: validate your TLS reporting record

Check your TLS-RPT setup

TLS-RPT scan

Use this TLS-RPT checker tool to inspect your TLS reporting DNS record and reporting destinations.

Get started

"This clarity allows us to take action faster whether it's adjusting content, fixing authentication, or addressing reputation issues. We've moved from reactive guesswork to proactive management."

John Porteous

Group IT Manager

TLS-RPT record example

Publish a TXT record at _smtp._tls.yourdomain.com. It must start with v=TLSRPTv1 and include a rua tag with the destinations that receive aggregate TLS reports.

v=TLSRPTv1; rua=mailto:reports@yourdomain.com

Replace the reporting address with the destination supplied by your TLS reporting provider.

Use a single record for reporting destinations

Senders ignore TLS-RPT when multiple matching records are returned. Combine destinations in one comma-separated rua list and remove duplicate TLS-RPT records.