This MTA-STS record generator creates both pieces you need for deployment:

  • DNS TXT record at
  • policy file content

Deployment checklist

  1. Publish generated DNS TXT record
  2. Host generated policy file on HTTPS
  3. Run the MTA-STS checker to verify rollout
  4. Pair with TLS reporting for visibility