Free email header analyzer & checker — SPF, DKIM, DMARC
Read email headers, Received hops and reported SPF, DKIM and DMARC results locally. No header uploads, account or external API needed.
What this tool tells you
An email header analyzer makes raw message metadata easier to read. This tool unfolds header lines, separates message fields, shows Received hops in their claimed delivery order and displays reported authentication fields. It parses text locally; it does not verify that the text or authentication claims are trustworthy.
How to use it
- Open “Show original”, “View source” or message properties in your email app.
- Copy the header section only and paste it here. You can use the sample first.
- Review the sender fields, reported authentication and route. Use Clear to remove the text.
Read the result in context
Headers can be forged. Trust only authentication results added by a receiving system you trust. This tool performs no cryptographic verification, IP reputation checks or network lookups. It ignores a body after the first blank line and accepts up to 200,000 characters. Encoded header words remain as supplied.
Useful answers
How do I find the full email header in Gmail?
In Gmail on a computer, open the message, open the More menu beside Reply, and select Show original. Copy the header section above the first blank line into the analyzer. It includes fields such as Received and Authentication-Results. Use the original message: forwarding it normally creates a new set of outer headers.
What should I check when analyzing an email header?
Compare From, Reply-To and Return-Path, then review Received hops and Authentication-Results. These fields describe different parts of delivery, so different addresses do not automatically mean fraud. Use results added by your trusted receiving provider and compare the signing domain with the visible From domain.
Can an email header checker explain why a message went to spam?
It can surface reported authentication failures and routing clues, but it cannot see a provider’s complete filtering decision. Start with SPF, DKIM and DMARC results, check your domain’s current DNS records, and compare another test message. A passing result does not guarantee inbox placement.
Are my headers uploaded?
No. Analysis happens in the current browser tab. This tool has no upload endpoint, persistent history or external parser. Clear the input or close the tab when finished; do not paste content you are not permitted to inspect.
Does SPF=pass mean the message is safe?
No. A reported pass is not a verdict on message content or identity. The result may be untrusted, and even a genuine authenticated sender can send harmful messages. Inspect context and the trusted receiver’s results.
Give your business its own email address.
Bring your domain, create team mailboxes and manage email in one workspace. Review the current free and paid plan limits.