Email header authentication results reviewer
Paste the headers of a test message to read the SPF, DKIM and DMARC results each mail system reported, plus the Received hops.
Runs locally in this browser; the text is not uploaded. Paste headers from a test message you received. Remove addresses and identifiers first. Header values can be forged and are not proof of authentication.
This shows reported authentication tokens grouped by each Authentication-Results field and its authserv-id, plus a few reported domain/selector clues with mailbox local parts redacted. These clues are not an alignment verdict. It also shows an approximate, header-reported Received timeline. “Copy reviewed auth notes” includes each field's domain-shaped authserv-id marked unverified; other label shapes are omitted. It copies only the displayed authentication tokens and sanitized identity clues, keeps fields separate, and excludes raw headers and Received routes. Review the selected receiving system before using notes in a report. For bounded output it reviews up to 20 Authentication-Results fields and the 50 earliest Received hops. It does not verify signatures, establish which relays are trustworthy, prove delivery or diagnose the full mail path.
Want every check in one go? Try the Email Health Check for MX, SPF, DMARC, DKIM, MTA-STS and DMARC report upload.