SendClear

TLS-RPT Record Generator

One field, one correct TLS-RPT TXT record to paste into your DNS — no account needed.

Your domain (optional — just for showing the exact host to publish under)
Where should TLS failure reports go?

Mailbox providers send these when they couldn't deliver mail to you over an encrypted connection — a separate thing from DMARC reports, and SendClear doesn't translate these ones, so point this at an address you'll actually read.

Publish this as a TXT record
_smtp._tls.yourdomain.com
v=TLSRPTv1

TLS-RPT only reports on encryption-in-transit failures — it doesn't replace SPF, DKIM, or DMARC. Check your domain's full setup free to see where the rest of it stands.

Not sure what TLS-RPT actually does first? Check your domain's current setup free to see where you stand.