Where do I find the raw email headers?

In Gmail, open the message, click the three-dot menu, and choose "Show original." In Outlook, open the message and select File then Properties to view internet headers. Apple Mail uses View then Message then Raw Source. Copy the entire block and paste it in.

What do SPF, DKIM, and DMARC tell me?

SPF checks whether the sending server is authorized to send for the domain, DKIM verifies a cryptographic signature proving the message was not altered, and DMARC ties those results to the visible From domain through alignment. A pass on all three is a strong signal the sender is genuine.

How are the routing hops read?

Each mail server that handles a message adds its own "Received" header at the top, so the hops are read from bottom to top to follow the message from origin to destination. The time gaps between hops show where delivery was delayed.

Is my email data private?

Yes. The header text is parsed entirely in your browser and is never sent to a server or stored, so you can safely analyze messages that contain sensitive routing or recipient information.

← All Tools

Email Header Analyzer

Email header analyzer that parses raw headers to reveal routing hops, SPF, DKIM, and DMARC results, delivery delays, and a spam score. Free and private.

Paste Email Headers

Copy the full raw headers from your email client and paste below.

What Is an Email Header Analyzer?

An email header analyzer (also called an email header parser) is a free tool that reads the technical metadata attached to every email message. These headers contain a complete log of the email's journey from sender to recipient — including every server it passed through, authentication checks, timestamps, and spam evaluation scores.

How to View Raw Email Headers

Every major email client lets you access raw headers. Here's how:

Gmail

Open email → ⋮ (More) → "Show original" → copy headers section

Outlook

Open email → File → Properties → copy text in "Internet headers" box

Apple Mail

View → Message → All Headers (⌥⌘H), then copy

Thunderbird

View → Headers → All, or Ctrl+U for source

Understanding the Key Email Headers

Received: Added by every mail server that handles the email. Reading them bottom-to-top traces the full delivery path.
From / To / Subject: Familiar sender and recipient information visible in your inbox.
Message-ID: A globally unique identifier assigned to the email.
Authentication-Results: Server-generated verdict of SPF, DKIM, and DMARC checks.
X-Spam-Score: A numeric score assigned by spam filters — higher means more suspicious.
DKIM-Signature: Cryptographic proof that the email was not tampered with in transit.

SPF, DKIM, and DMARC Explained

SPF

Sender Policy Framework

Validates that the sending server's IP is authorized to send email on behalf of the domain.

DKIM

DomainKeys Identified Mail

Uses cryptographic signatures to verify that the email content was not altered in transit.

DMARC

Domain-based Message Auth.

Sits on top of SPF/DKIM. Tells receivers what to do (quarantine, reject, none) when checks fail.

Why Analyze Email Headers?

Detect phishing and spoofing — SPF/DKIM/DMARC failures are a red flag for fraudulent emails.
Debug email deliverability — Trace exactly where an email got delayed or blocked.
Investigate spam — Identify the originating IP and mail relay chain.
Verify email marketing tools — Confirm your ESP is properly authenticating your sends.

About the Email Header Analyzer

An email header analyzer is a tool that reads the raw header block of an email and decodes it into readable details: the path the message took between mail servers, its authentication results (SPF, DKIM, and DMARC), timestamps, and a spam-likelihood score. Paste the full header from your client's "show original" or "view source" view, and it parses everything locally in your browser so nothing is uploaded.

Frequently asked questions

Where do I find the raw email headers?: In Gmail, open the message, click the three-dot menu, and choose "Show original." In Outlook, open the message and select File then Properties to view internet headers. Apple Mail uses View then Message then Raw Source. Copy the entire block and paste it in.
What do SPF, DKIM, and DMARC tell me?: SPF checks whether the sending server is authorized to send for the domain, DKIM verifies a cryptographic signature proving the message was not altered, and DMARC ties those results to the visible From domain through alignment. A pass on all three is a strong signal the sender is genuine.
How are the routing hops read?: Each mail server that handles a message adds its own "Received" header at the top, so the hops are read from bottom to top to follow the message from origin to destination. The time gaps between hops show where delivery was delayed.
Is my email data private?: Yes. The header text is parsed entirely in your browser and is never sent to a server or stored, so you can safely analyze messages that contain sensitive routing or recipient information.