Primary use
SMTP diagnostics
Verify the submission path before a broken password reset or alert flow reaches production.
Run check
Enter the host, submission mode, and optional credentials. Add from and to addresses when you want to probe envelope handling as part of the diagnostic.
Use this when
This page is strongest when a team has an SMTP host and needs proof that the connection, encryption, and auth path actually work before user-facing email depends on it.
Upgrade path
A clean SMTP transcript still needs sender identity, header evidence, and mailbox assertions around it before the release checklist is complete.
Primary use
Verify the submission path before a broken password reset or alert flow reaches production.
Checks
Review banner, TLS, login behavior, and transcript steps in one run.
Use case
Use it during provider cutovers, credential rotation, and mail-server changes.
Next step
Pair transport diagnostics with inbox assertions before you trust the full workflow.
What this checks
The valuable output is not just whether the socket opened. Teams need to know whether the server banner was sane, whether STARTTLS negotiated, whether auth worked, and which transcript step failed.
Handshake
Banner and connect
Confirm the target host actually accepts SMTP connections on the port you expect.
Encryption
STARTTLS proof
Verify whether the server offers and negotiates SMTP TLS the way your environment expects.
Authentication
Login path
Catch broken credentials, unsupported mechanisms, and auth failures before production workflows depend on them.
Evidence
Transcript
Keep the step-by-step transcript so escalation starts with facts instead of screenshots and memory.
SMTP test plan
A useful SMTP test should narrow the problem. Start with transport, then add auth, envelope, and inbox evidence only when the previous layer is healthy.
| Symptom | Run first | Next check |
|---|---|---|
| Connection refused or timeout | Host, port, and network reachability | Firewall, provider allowlist, or port policy |
| TLS or certificate failure | STARTTLS negotiation on the intended port | TLS policy, hostname, and certificate chain |
| Authentication failure | Username, app password, and supported auth method | Credential rotation, app-specific passwords, or SMTP AUTH policy |
| SMTP works but users do not receive mail | Envelope probe and transcript | Email header analyzer, inbox placement, SPF, DKIM, and DMARC |
Operational use
Searches for SMTP test and SMTP diagnostics are usually urgent. The page should help a team quickly decide whether the server path is healthy enough to trust or whether transport setup is still the blocker.
Verify the new submission path before DNS, templates, and retry policy all change at once.
Test login behavior immediately after password, token, or app-secret changes so broken auth does not linger unseen.
Use SMTP diagnostics before shipping password reset, billing, and alert flows where one transport failure creates immediate support load.
Confirm PTR and forward-confirmed sender identity after the SMTP path itself looks healthy.
Open toolReview SPF, DKIM, DMARC, BIMI, MX, MTA-STS, and TLS-RPT posture alongside SMTP diagnostics.
Open toolEncode SMTP AUTH PLAIN credentials safely when troubleshooting login behavior or legacy integrations.
Open toolInspect received headers after a transport check to confirm how the message was actually handled downstream.
Open toolThis SMTP tester connects to the host and port you provide, records the banner, attempts STARTTLS if requested, and tests SMTP authentication when credentials are supplied. It also returns a transcript so you can see where the flow failed.
Use the submission mode your provider documents. Port 587 usually pairs with STARTTLS, while 465 is typically implicit TLS. Port 25 is often filtered and is rarely the right choice for application mail.
No. Basic connectivity, TLS, and auth checks can run without them. Add envelope addresses when you want the diagnostic to probe more of the submission path after connection and login.
No. SMTP health confirms transport setup, not sender reputation or mailbox placement. Pair it with reverse DNS, sender-auth checks, blacklist review, and real mailbox testing before rollout.