PDF download Download Article
Learn how to read and understand email headers
PDF download Download Article

Learning to read email headers is a skill used when trying to determine the path an email follows from the sender to the recipient. This skill can be applied in several facets, from helping an email provider recognize spam emails to aiding in recognizing a scam or virus delivered by email. In this article we teach you how to open your email headers, as well as how to analyze them to learn more about the message and if it's trustworthy.

How to View and Read Email Headers

First, open the email header by clicking the three-dot menu on the email and choosing Show original / View message details / View headers . You can paste the message header into an analyzer to view it more easily if you prefer. Check for a "PASS" on SPF, DKIM, and DMARC to ensure the email is trustworthy.

Part 1
Part 1 of 2:

Opening Email Headers

PDF download Download Article
  1. 1
    Open the email you want to view the header of. You can view email headers in any major email provider, such as Gmail, Outlook, Yahoo Mail, and Proton Mail.
  2. 2
    Open the email header. How you do this varies depending on what email provider you're using:
    • Gmail: Click the â‹® button next to the reply arrow, then click Show original . The interpreted email header will be shown at the top of the page, with the full email header underneath it. [1]
      • Click Copy to clipboard to copy the email header.
    • Classic Outlook: Click File > Properties and check the "Internet headers" box. [2]
    • Web Outlook: Click the ••• button next to the forward and reply arrows, then click View > View message details . [3]
    • New Outlook: Click the ••• button at the top of the message, then click View > View message details . [4]
    • Yahoo Mail: Click the ••• button and click View Raw Message . [5]
    • Proton Mail: Click the ••• button next to the trash can button, then click View headers . [6]
    Advertisement
  3. 3
    Use an email header analyzer (optional). While you can simply scroll through your email header to find information, it's much easier to use an email header analyzer. There are a number of options available, but this analyzer is easy to use and displays the most information of all the websites we found.
  4. Advertisement
Part 2
Part 2 of 2:

Reading Email Headers

PDF download Download Article
  1. 1
    Check an email's authenticity with SPF, DKIM, and DMARC. SPF (or Sender Policy Framework), DKIM (DomainKeys Identified Mail) and DMARC (Domain-based Message Authentication, Reporting & Conformance) are headers that can help you identify if an email is spam, or if you can trust the sender. SPF and DKIM are required for all emails, and DMARC is required for senders that send bulk emails (or over 5,000 emails per day). [7]
    • If the email headers for SPF, DKIM, and DMARC all say "PASS," the email has been authenticated and can be trusted. If any of these say "FAIL," do not interact with the email and report it to your email provider.
  2. 2
    Search for the term "Precedence". If you see the "Precedence" header, that means the sender marked their email as bulk, which keeps the message from being sent to your spam folder. You might see this on marketing emails or newsletters to improve inbox placement. [8]
  3. Because email headers are listed in reverse chronological order, the bottom header will provide you with information about the original sender. You can learn the sender's email address, the date and time that the message was sent, as well as server and domain information, such as their IP address.
    • This is helpful if you're trying to identify spam email or if you're getting email from an unwanted sender.
    • You can use a website like WhatIsMyIPAddress to look up the sender's IP.
  4. The "Received" tag will tell you when your email server received the message. If this happened a long time before you saw the message arrive in your inbox, there may be an issue with your server. Contact your Internet Service Provider or network administrator if this happens frequently.
  5. The "Received: from" and "Message ID" tags reference information about the sender's email provider, such as the server, date, time, and method.
  6. 6
    Check if the email was sent to more than one person. In the "To" field, see if there are other emails listed. If so, you'll be able to see if the sender sent this email to a number of people, or if they only sent it to you.
  7. 7
    See if you were blind carbon copied on an email. Search the header to see if you were blind carbon copied (Bcc'd) on an email. This is typical when an email is sent to a large group of people.
    • You may also see that the email was sent to "undisclosed-recipients." If this is the case, you won't be able to see everyone that the email was sent to.
  8. Advertisement

Community Q&A

Search
Add New Question
  • Question
    What does the X stand for?
    Community Answer
    X is just something placed there by the server.
Ask a Question
      Advertisement

      Video

      Tips

      • Read email headers before marking a message as spam. This will help avoid blacklisting where unnecessary.
      • If given the option to unsubscribe, choose to do that rather than mark a message as spam. Spam filters are designed to be trained, and may categorize newsletters you wish to read as spam if you do not do this.
      Submit a Tip
      All tip submissions are carefully reviewed before being published
      Name
      Please provide your name and last initial
      Thanks for submitting a tip for review!
      Advertisement

      About This Article

      Thanks to all authors for creating a page that has been read 121,967 times.

      Is this article up to date?

      Advertisement