MTA-STS Policy Generator

Fill in your MX hostnames and enforcement mode. We'll output both the DNS TXT record and the policy file you need to host at mta-sts.<your-domain>/.well-known/mta-sts.txt.

For Google Workspace: *.google.com. For Microsoft 365: *.mail.protection.outlook.com. Mismatches here break mail delivery.

604800 = 7 days (recommended).

Want continuous monitoring?

This tool is a one-shot check. PhishFence watches your domain 24/7 for DMARC changes, new lookalike registrations, and spoofing attempts.

Start free monitoring