This generator produces both parts of an MTA-STS deployment: the v=STSv1 TXT record for _mta-sts.yourdomain.com and the policy file to serve at https://mta-sts.yourdomain.com/.well-known/mta-sts.txt. Choose testing mode first, list your MX hosts and set max_age, then switch to enforce once TLS-RPT reports are clean.
See it in Action
MTA-STS policies enhance email security by enforcing encrypted connections, preventing downgrade attacks, and ensuring the integrity and confidentiality of email communications.
The tool generates MTA-STS records and policies for your domain, allowing you to enforce or test secure email connections based on your selected settings.
You can choose from three policy types: None (disables the policy), Testing (allows both secure and insecure connections), and Enforce (only allows secure connections).
The 'Maximum Age' specifies how long the generated MTA-STS policy is valid before it needs to be refreshed or updated.
Yes, the tool can generate MTA-STS records for multiple domains; simply input each domain and configure the settings accordingly.
Once generated, you need to add the MTA-STS record to your domain's DNS settings to activate the policy.
'Testing' mode allows both secure and insecure connections for troubleshooting, while 'Enforce' mode mandates secure connections only, enhancing security.
MTA-STS policies enhance email security by ensuring that email transmissions are encrypted, preventing unauthorized access and reducing the risk of attacks.
The policy should be updated as needed, particularly if there are changes in your email infrastructure or security requirements.
Yes, you can use the 'Testing' policy mode to evaluate the effects of MTA-STS policies on your email setup before fully enforcing secure connections.
Emails Analyzed
0DMARC Reports Processed
0Sending Sources Checked
0Domains Scanned
0
‘yourDMARC secures emails, saves our time. Our small healthcare practice struggled with email security. yourDMARC's DMARC/DKIM combo and real-time alerts are a lifesaver! HIPAA compliance is a breeze now, and their support team is top-notch. ‘
Discover more about yourDMARC and quickly book a demo with our sales representatives.
Explore our flexible plans and pricing to find the perfect email security solution for your business today.
Explore our latest blogs for expert insights on spoofing prevention and email compliance best practices.
© 2026 yourDMARC
Download to read the eBook
