How to view full email headers
Email headers are the hidden lines at the top of every email that show who really sent it, which servers it passed through and whether it passed the anti-fake checks (SPF, DKIM and DMARC). You need them to check a suspicious email, or when IT support asks “can you send me the headers?”. Here’s where to find them in each email app. Once copied, paste them into the email header analyzer for a plain-English answer.
Gmail (computer)
- Open the email.
- Click the three dots (⋮) next to the Reply arrow, top right of the message.
- Choose Show original. A new tab opens with a summary (SPF, DKIM, DMARC) and the full headers.
- Click Copy to clipboard.
The Gmail app on Android and iPhone can’t show headers. Open Gmail in a browser on a computer, or forward the email to yourself and check it later on a computer.
Outlook on the web, Outlook.com and the new Outlook for Windows
- Open the email.
- Click the three dots (More actions) at the top of the message.
- Choose View → View message details.
- Select everything in the box (Ctrl+A) and copy it (Ctrl+C).
Classic Outlook for Windows (Microsoft 365, 2016–2024)
- Double-click the email so it opens in its own window.
- Click File → Properties.
- The headers are in the Internet headers box at the bottom. Click inside it, press Ctrl+A, then Ctrl+C.
Apple Mail (Mac)
- Select the email.
- Choose View → Message → All Headers (Shift+Command+H) to show them above the message, or View → Message → Raw Source (Option+Command+U) to see the full source.
- Copy the header lines (everything above the first blank line).
Yahoo Mail
- Open the email.
- Click the three dots (More) in the toolbar.
- Choose View raw message and copy the text that opens.
iPhone, iPad and Android mail apps
Most phone apps don’t show full headers. The easiest route: on a computer, sign in to the same mailbox in a browser (Gmail, Outlook.com, Yahoo or your company webmail) and follow the steps above. Forwarding the email to someone else doesn’t keep the original headers, so if IT asks for them, send the email “as an attachment” (Outlook: More actions → Forward as attachment; Gmail: tick it, then ⋮ → Forward as attachment).
What to look for once you have them
- Authentication-Results:
spf=pass,dkim=passand especiallydmarc=passmean the email really came from the domain in the From line. - From vs Reply-To: if replies go to a different address (often a Gmail one), be very careful.
- Received lines: read from the bottom up; each one is a server the email passed through, with a time stamp.
The email header analyzer reads all of this for you, shows the route and the sending server on a map, and gives a one-line verdict. Nothing you paste is stored.
Frequently asked questions
Is it safe to share my email headers?
Mostly yes: headers don’t contain your password or the email’s text. They do show your email address, the sender’s address, the subject and the servers involved, so only share them with people you trust, like your IT support. FernTool’s analyzer doesn’t store what you paste.
Why can’t I see headers in the Gmail app?
Google only offers “Show original” in Gmail on the web. Open gmail.com in a browser on a computer (or in desktop mode on your phone’s browser) to get it.
What is the difference between headers and the message source?
The headers are the technical lines at the top. The message source (or “original”, or “raw message”) is the whole email: headers, then a blank line, then the body and attachments. For checking who sent an email, the headers are all you need.
More guides
- What is IPv6?
- How to find your IP address (every device)
- Public vs private IP address
- What is CGNAT (carrier-grade NAT)?
- How to hide your IP address
- How to find your PS5 IP address
- How to find your Xbox IP address
- How to find your smart TV’s IP address
- How to find your router’s IP address
- What is a good internet speed?
- Why is my internet slow at night?
- How to change DNS on Windows 11 and 10
- How to change DNS on a Mac
- How to change DNS on your router
- Public DNS servers compared
- Why port forwarding isn’t working
- Keeping your internet on during load-shedding
- Fibre vs LTE vs 5G in South Africa
- How to check if a port is open
- How to create a strong password
- What is a user agent?
- How to find your MAC address
- What is a good ping?
- Subnet mask cheat sheet (CIDR table)
- How to find who owns an IP address
- How to find who owns a domain
- How to flush your DNS cache
- How to check if an IP address is a VPN
- What is an ASN (autonomous system number)?
- How to fix DNS_PROBE_FINISHED_NXDOMAIN
- How to set up DMARC (step by step)
- Why are my emails going to spam?
- How to spot WhatsApp and SMS scams
- How to fix SPF “too many DNS lookups”
- What to do if you’ve been scammed (South Africa)
- How to tell if an email is fake
- What is CIDR notation?
- IPv6 subnet cheat sheet (prefix chart)
- What is an IP address?