Raw RFC 822 Email Headers
Paste the complete headers including Received, Authentication-Results, and SPF lines.
How to Find Raw Email Headers
Instructions for copying raw message source in the most common email clients.
- Open the specific email.
- Click the More (three dots) menu next to Reply.
- Select Show original.
- Click Copy to clipboard.
- Double-click the email to open in its own window.
- Click File > Properties.
- Select and copy all text in the Internet headers box.
- Select the email in Apple Mail.
- Go to View > Message > Raw Source.
- Or press keyboard shortcut ⌥⌘U.
- Copy the complete displayed content.
Frequently Asked Questions
What are email headers and why are they important?
Email headers are metadata lines attached to every electronic message defined by RFC 822/2822. They record the sender, recipient, message ID, authentication protocols (SPF, DKIM, DMARC), and each intermediate mail transfer agent (MTA) relay hop the message traversed.
Can I find the true origin IP address of a sender using email headers?
Yes. By analyzing the chronologically earliest 'Received:' header line, you can identify the originating server or client IP address where the message was initially submitted.
What is the difference between SPF, DKIM, and DMARC in email headers?
SPF validates whether the sending server IP is authorized by the domain's DNS. DKIM cryptographically signs the message content to ensure it wasn't modified in transit. DMARC aligns SPF and DKIM with the visible From address and instructs receiving servers how to handle failures (none, quarantine, or reject).