Email header analyzer

Paste the Authentication-Results header from a message you received and see what actually passed.

Paste the Authentication-Results header from a message you received.

Alignment is what fails

SPF and DKIM can both pass on a domain that is not the one in From, which is a DMARC failure however green the individual mechanisms look. That is why this leads with the two alignment rows rather than the three results.

A mismatched envelope domain on its own is normal: most providers bounce through their own domain. It only matters when DKIM does not align either.

Generate the records to fix a failure

Stop reading headers by hand.

Mail your agents send is signed and aligned on your own domain from the first message, and every send and reply is in one place with the delivery result attached.

Create an inbox Test a real message

3,000 emails a month, free, no credit card.