Free TLS-RPT Generator
Generate a DNS record to receive SMTP TLS reports.
What Does This Generator Create?
Our TLS-RPT Record Generator creates a correctly formatted DNS TXT record for publishing at smtp.tls.yourdomain.com. You specify one or more reporting URIs — either a mailto: address for email-based report delivery or an https: endpoint for automated JSON submission. The tool validates URI format, ensures the version tag (v=TLSRPTv1) is included, and outputs the complete record for direct copy-paste into your DNS management interface.
Choosing Your Reporting Method
Email delivery (mailto:) is simpler to set up but can generate a high volume of messages for domains with significant inbound email traffic. Each sending server that delivers to your domain may send a daily report. For most organizations, a dedicated reporting address (e.g., tlsrpt@yourdomain.com) works well. HTTPS endpoints are better suited for automated processing — they receive JSON via POST request, making it easy to integrate with monitoring dashboards and alerting systems. SimpleDMARC's managed platform can serve as your TLS-RPT endpoint with automatic parsing and visualization.
Deploying TLS-RPT
TLS-RPT is one of the simplest email security records to deploy — it requires just a single DNS TXT record with no additional infrastructure. Publish the record, and sending servers will begin submitting reports within 24 to 48 hours. We strongly recommend deploying TLS-RPT before switching MTA-STS to enforce mode, as the reports will immediately reveal any TLS negotiation issues that could disrupt legitimate email delivery.