What are email headers?

Email headers are metadata added to every email message as it travels from sender to recipient. They contain routing information, timestamps, authentication results, and server details that help trace the path and verify the legitimacy of an email.

How do I find email headers in Gmail?

In Gmail, open the email, click the three vertical dots (More) in the top-right corner of the message, and select 'Show original'. This displays the full email headers which you can copy and paste into our analyzer.

What do SPF, DKIM, and DMARC mean?

SPF (Sender Policy Framework) verifies the sending server is authorized. DKIM (DomainKeys Identified Mail) uses cryptographic signatures to verify the message wasn't altered. DMARC (Domain-based Message Authentication, Reporting & Conformance) combines SPF and DKIM to set domain-wide email authentication policies.

Can email headers reveal who sent a phishing email?

Email headers can reveal the originating IP address, the actual sending server (which may differ from what the email claims), authentication failures, and routing anomalies — all of which help identify phishing attempts and trace their origin.

Is it safe to share email headers?

Email headers generally contain routing and server information but not the email body content. However, they may contain IP addresses and internal server names. Our analyzer processes everything locally in your browser — no data is sent to any server.

📧 Email Header Analyzer

Paste raw email headers to trace routing, verify authentication (SPF/DKIM/DMARC), detect delays, and identify security issues. All analysis happens locally in your browser.

📧 Email Header Analyzer

How to find email headers: