Analyze SMTP Logs for Email Encryption Issues
For email security administrators and developers who need to audit SMTP logs for encryption compliance. Paste your logs and instantly see which sessions used TLS, which TLS versions were negotiated, and which messages were sent in plaintext — so you can flag risky transmissions before they become a breach.
Results update live as you type — no button needed. The Example button fills a sample input.
🔒 You've used your 20 free runs for today
Every tool is free up to 20 conversions a day. Get Pro — $4.99 one-time to unlock every tool with no daily limit.
💳 Buy Pro — $4.99 🔓 I have a code
Free runs reset at midnight (UTC).
Why use Email Encryption Analyzer?
Instantly detect STARTTLS and TLS handshake events in raw SMTP logs
Identify plaintext (unencrypted) email sessions that expose message content
Report negotiated TLS versions to spot outdated or weak protocols
Map encryption status per connection and per message transaction
Runs entirely in your browser — no logs are uploaded or stored
FAQ
What log formats are supported?
The analyzer works with common SMTP server log lines that include connection events, STARTTLS commands, TLS handshake results, MAIL FROM, RCPT TO, DATA, and status codes. Postfix, Exim, and similar text-based logs are supported.
How does it determine if a session is encrypted?
It looks for STARTTLS commands followed by successful TLS handshake lines (for example, 'TLSv1.2 handshake successful'). Sessions with mail transactions but no TLS handshake are flagged as plaintext.
Are my logs sent to a server?
No. All analysis happens locally in your browser. Your SMTP logs never leave your device and are not stored anywhere.
Can it detect weak TLS versions?
Yes. The report lists the TLS versions found in handshake lines, so you can quickly see if deprecated versions like TLSv1.0 or TLSv1.1 are still in use.
Is this a replacement for a full email security audit?
No. It is a fast triage tool to highlight encryption gaps in SMTP logs. Use it alongside your broader compliance and security review processes.
Example input
Try it with this sample — paste it into the box above:
2024-05-20 10:15:23 SMTP connection from [192.168.1.100]:54321 2024-05-20 10:15:24 STARTTLS 2024-05-20 10:15:25 TLSv1.2 handshake successful 2024-05-20 10:15:26 MAIL FROM:<sender@example.com> 2024-05-20 10:15:27 RCPT TO:<recipient@example.com> 2024-05-20 10:15:28 DATA 2024-05-20 10:15:30 250 OK 2024-05-20 10:16:00 SMTP connection from [10.0.0.5]:12345 2024-05-20 10:16:01 MAIL FROM:<user@domain.com> 2024-05-20 10:16:02 RCPT TO:<admin@domain.com> 2024-05-20 10:16:03 DATA 2024-05-20 10:16:05 250 OK
How to use Email Encryption Analyzer
- Enter or paste your data into the SMTP Server Logs box above.
- The result appears instantly in the Encryption Analysis Report box — everything runs in your browser, nothing is uploaded.
- Use Copy or Download to keep the result, or Example to load a sample first.
More Security & Forensics tools
Base64 Strings Extractor - Decode Every Blob in Forensic Text Dumps
Extract and decode every Base64 blob hidden in Cellebrite UFED exports, hex dumps or logs.
Code Deobfuscator - Decode Obfuscated Code Online
Free online code deobfuscator. Instantly decode URL-encoded obfuscation to reveal readable
Comcast Bill Analyzer - Compare Bills & Spot Hidden Changes
Compare two Comcast bills, terms, or emails side by side. Instantly highlight differences
Cron Time Analyzer - Cron Expression to Human Readable
Convert cron expressions to human-readable schedules and get warned about the risky 2-3 AM
Related tools
EchoSpoofing Email Spoofing Analyzer | SMTP Log Parser
Paste SMTP logs to instantly detect EchoSpoofing and email spoofing red flags. Free analyz
Email Guard MCP Converter - SMTP Log Analyzer
Convert raw SMTP and email guard logs into a clear security report. Instantly see blocked
LLM Proxy Log Inspector: Audit Logs & Headers for Leaks
Scan LLM proxy logs and request headers for leaked model names, prompts, and user metadata
Log Action Analyzer - SMTP Log Parser & Report
Paste raw SMTP or server logs and get a structured action report with anomalies, a key-eve
Salesforce Phishing Analyzer - SMTP Log & Email Threat Scanner
Analyze SMTP logs and email headers for Salesforce phishing. Extract malicious links, send
SMTP Log Analyzer: Decode Obfuscated URLs in Email Logs
Paste SMTP logs to instantly decode obfuscated URLs hidden in email traffic. Reveal phishi
← All tools · Security & Forensics