Tools
Email (.eml) analyzer.
Open an .eml file and inspect its SPF, DKIM, DMARC and alignment results. It runs entirely in your browser; nothing is uploaded.
This runs entirely in your browser.
Your message is read and parsed on your own device. Nothing is uploaded, so even a malicious file never touches our systems. Want to be sure? Open your browser's DevTools → Network tab and drop a file: you'll see zero requests. Or turn off Wi-Fi, it still works.
How this works →Analyzing
Authentication
Alignment
Headers
Attachments
Names and types only. Nothing is decoded, opened, or downloadable from here.
Links & addresses in the body
Shown as plain text and deliberately not clickable, so a hostile link can't be followed by accident. Any flags are structural hints read from the URL itself, not a reputation check; we never look anything up.
How to read your results
What we read. The analyzer parses the message's Authentication-Results header for SPF, DKIM, and DMARC, and checks alignment between the signing and envelope domains and the visible From address.
Fail but delivered? Forwarding breaks SPF, and some senders align on only one of SPF or DKIM. DMARC passes if either aligns, so a red badge isn't always a problem. The result shows which check carried the pass.
Nothing leaves your browser. The file is parsed locally and never uploaded.
Curious how that's possible? Why the .eml analyzer runs in your browser explains it, and SPF fails but DMARC passes covers the alignment case in depth.
Frequently asked questions
- What is an .eml file?
- An .eml file is a single email saved in its raw form, including all headers. Most mail clients let you export or save a message as .eml. It contains everything needed to check authentication.
- How do I analyze an email's headers?
- Export the message as an .eml file and drop it in above. The analyzer reads the SPF, DKIM, and DMARC results and the alignment straight from the headers, entirely in your browser.
- Is my email uploaded anywhere?
- No. The .eml analyzer runs entirely in your browser. The file never leaves your device and nothing is sent to a server.
- Why does an email show SPF or DKIM fail but still arrive?
- Forwarding breaks SPF, and some senders align on only one of SPF or DKIM. DMARC passes if either aligns, so the message can still be legitimate. The analyzer shows which check carried the pass.
This check is a snapshot. dmarcula watches your domain around the clock, reads the DMARC reports for you, and emails you when something changes. Free, no credit card.