100% Client-Side - Email headers never leave your browser

Email Header Analyzer

Paste email headers to check SPF, DKIM, DMARC authentication, trace routing hops, detect spoofing, and analyze delivery path.

Authentication Results
Email Summary
Routing Hops

How to get email headers

  • Gmail: Open email - click 3 dots menu - "Show original" - copy all
  • Outlook: Open email - File - Properties - copy "Internet headers"
  • Apple Mail: View - Message - All Headers
  • Thunderbird: View - Headers - All

What does SPF, DKIM and DMARC mean?

  • SPF (Sender Policy Framework) - verifies that the sending server is authorized to send email for the domain. A pass means the email came from an authorized server.
  • DKIM (DomainKeys Identified Mail) - a cryptographic signature that proves the email content was not altered in transit and was sent by the domain owner.
  • DMARC (Domain-based Message Authentication) - a policy that ties SPF and DKIM together and tells receivers what to do with emails that fail authentication.

If all three show pass, the email is very likely legitimate. If any fail, the email may be spoofed or the domain may be misconfigured.