Email Header Privacy Analyzer

See what an email header reveals

Email headers carry a lot beyond the subject and sender, including tracking signals, authentication results and IP information. This tool lets you paste email headers to detect tracking bits, the SPF and DKIM authentication results, and IP leaks, so you can see what a message reveals about its origin and about you.

What the headers tell you

Headers record the path a message took and the checks it passed. SPF and DKIM results tell you whether the sender is authenticated, which is central to spotting spoofing and phishing. Received headers can expose IP addresses along the route. Tracking elements reveal whether the sender is monitoring opens. Reading these turns an opaque message into evidence: is it really from who it claims, and what is it trying to learn about you. That is a genuinely useful skill for spotting phishing.

Read the evidence

The tool runs entirely in your browser, so nothing you paste is uploaded, which is exactly what you want when the input is your own security-sensitive data.

Related tools

• Password Strength Checker — Measure password strength by entropy and pattern analysis rather than character-class rules. Checked entirely in your browser.
• Password Generator — Generate strong random passwords and passphrases in your browser using the Web Crypto API. Nothing is transmitted, logged or stored.
• Hash Generator — Generate MD5, SHA-1, SHA-256 and SHA-512 hashes in your browser. Compare checksums and verify file integrity with nothing uploaded to a server.
• Base64 Encoder/Decoder — Encode and decode Base64 in your browser, including URL-safe Base64 and UTF-8 text. Handles files and data URIs locally with nothing uploaded.