Email headers are metadata in every email containing sender, recipient, sending path, timestamps, and authentication results. They can be used to trace the true origin and transmission path of an email.
Gmail: Open email → click three dots → Show Original → copy header content. Outlook: Open email → File → Properties → Internet Headers. Apple Mail: View → Message → Raw Content.
SPF (Sender Policy Framework) verifies if the sending server is authorized. DKIM (DomainKeys Identified Mail) verifies the email has not been tampered with. DMARC sets policies based on SPF and DKIM results. Together they prevent email spoofing and phishing.
No. All email header parsing is done locally in your browser. No data is sent to any server. Your email privacy is fully protected.
Check these indicators: 1) Does SPF pass? 2) Does DKIM pass? 3) Does DMARC pass? 4) Does the sender domain match the Reply-To address? 5) Does the IP in Received headers match the sender domain? If multiple checks fail, the email may be forged.