Tools
Free email tools, no account needed.
Small tools for the things that come up when you run email: reading a message’s headers, decoding what a mail client encoded, and checking what a domain publishes about who is allowed to send as it.
The tools that read a message you paste run entirely in your browser. Nothing you paste is uploaded, so there is nothing for us to log, leak, or be asked to hand over. The tools that look up a domain have to ask a DNS server, because that is what looking up a domain is.
Look at a message
Paste a message you already have. These run in your browser and nothing you paste is sent anywhere.
- Email header analyzerRuns in your browserPaste raw headers or a .eml file to see the route a message took, how long each hop held it, and what each server recorded about SPF, DKIM and DMARC.
- Email privacy checkerRuns in your browserPaste a .eml file to see what a message would report back about you — tracking pixels, remote images, rewritten links — and what its own headers already gave away about the sender.
- MIME decoderRuns in your browserOpen up a message's structure: every part, the encoding and charset it declared, the text it decodes to, and the files attached to it. Attachments are listed and measured, never opened.
- Unsubscribe checkerRuns in your browserDoes this message support one-click unsubscribe? Reads List-Unsubscribe and List-Unsubscribe-Post from pasted headers and says which mailbox providers will show the button.
- DMARC report readerRuns in your browserTurn a DMARC aggregate report into a table you can read: who sent as your domain, how much of it passed SPF and DKIM alignment, and what the receiver did with the rest.
- Email HTML previewerRuns in your browserPaste a message's HTML and see it drawn, in a frame with no permission to run a script, fetch an image or follow a link. Nothing is uploaded and nothing is fetched.
Write a record
Build a DNS record from answers, without memorising the syntax.
- SPF record generatorRuns in your browserBuild a valid SPF record from what you already know about who sends your mail, with the ten-lookup limit counted as you go.
- DMARC record generatorRuns in your browserBuild a DMARC record from answers, with plain explanations of what p, sp, pct and the report addresses will actually do to your mail.
- Email regex generatorRuns in your browserA copyable email pattern for the language you are working in — and an honest account of why a regular expression is the wrong way to decide whether an address is real.
Check a domain
Read what a domain publishes about how its mail is authenticated.
- MX record lookupLooks up a domainSee which servers accept mail for a domain, and in what order they are tried. Reads the domain's public DNS records — nothing about you is part of the question.
- SPF record checkerLooks up a domainRead the SPF record a domain publishes and see what it actually permits — including the ten-lookup budget counted across every include, which is the limit that breaks a working record silently.
- DKIM key checkerLooks up a domainLook up the public key a DKIM selector publishes, with its algorithm, its size, and whether it has been revoked or left in testing mode. You need the selector: they cannot be listed.
- DMARC record checkerLooks up a domainRead a domain's DMARC record in plain language — what p, sp and pct will do to its mail, and whether the addresses it asks for reports at are actually authorised to receive them.
- Email provider lookupLooks up a domainFind out who runs the mail for a domain by reading its MX records — the mailbox provider, or the filtering gateway sitting in front of one.
- Email address validatorLooks up a domainCheck an address's syntax and whether its domain publishes anywhere to deliver to. It does not contact the mailbox, and the page explains why no honest tool can tell you it exists.
What these do and do not do
In-browser means in-browser. 9 tools here parse a message you paste, and they do it with JavaScript running on your own machine. There is no upload step and no request to our API. A browser test with the network closed fails the build if that ever stops being true.
They report, they do not grade. A checker tells you what a record says and what the specification says about it. None of these scores an operator or judges anyone’s security.
No account, no sign-up wall. Every tool works without logging in. If you want an address that keeps your real one out of a form in the first place, that is what Maski does.