Free tool

Incoming mail check

Which servers receive your email, do they encrypt the connection, is their certificate valid, and do you enforce encryption with MTA-STS? We connect to each server the way a sender would, without sending anything.

Try with physalisdesign.com, gmail.com

What this check covers

MX

Who receives

The servers listed in your DNS, in priority order. If the first fails, senders try the next.

STARTTLS

Encryption

The server offers to encrypt the connection. Without it, emails travel in the clear between servers.

MTA-STS

Enforced encryption

Optional. Tells senders to refuse delivery if encryption or the certificate fails.

Sending is another matter

This tool checks how you receive email. For what you send (SPF, DKIM, DMARC), see the SPF, DKIM & DMARC checker.