Breach CheckIs this email real?
The sender name can be faked at will – the email header tells the truth. Paste it here and see who really sent the email.
- Free
- No upload
- Runs only in your browser
Check email header
- Sender
- Domain
- Reply to
- Subject
- SPF · DKIM · DMARC
- Checked by
Route of the email
For information
We only evaluate the topmost check entry, as only that one reliably comes from your mail provider. No guarantee of accuracy.
The text stays in your browser. We send and store nothing.
How to find the email header
Every email has a header, but it is hidden. Copy it completely – the more, the better.
- Gmail in the browserOpen the email → three-dot menu at the top right → “Show original” → copy the whole text.
- Outlook on WindowsOpen the email with a double click → File → Properties → copy the text from “Internet headers”.
- Outlook on the webOpen the email → three-dot menu → View → “View message details” → copy the text.
- Apple Mail on a MacSelect the email → “View” menu → “Message” → “All Headers” → copy the header.
- Other providersLook for “Source”, “Show original” or “Show headers” in the menu of the opened email.
- On a smartphoneNot possible in most apps. Open the email on a computer or in the browser.
What SPF, DKIM and DMARC mean
- SPFChecks whether the sending server is authorised for the sender domain.
- DKIMA digital signature: it shows that the email was not altered on the way and which domain signed it.
- DMARCLinks both to the visible sender address. “Passed” means the displayed domain really sent the email.
Next steps
Suspicious email? Also check the link in it – or get help if you have already clicked.