Tools
Free email tools, no account needed.
Small tools for the things that come up when you run email: reading a message’s headers, decoding what a mail client encoded, and checking what a domain publishes about who is allowed to send as it.
The tools that read a message you paste run entirely in your browser. Nothing you paste is uploaded, so there is nothing for us to log, leak, or be asked to hand over. The tools that look up a domain have to ask a DNS server, because that is what looking up a domain is.
Look at a message
Paste a message you already have. These run in your browser and nothing you paste is sent anywhere.
- Email header analyzerRuns in your browserPaste raw headers or a .eml file to see the route a message took, how long each hop held it, and what each server recorded about SPF, DKIM and DMARC.
- Email privacy checkerRuns in your browserPaste a .eml file to see what a message would report back about you — tracking pixels, remote images, rewritten links — and what its own headers already gave away about the sender.
- MIME decoderRuns in your browserOpen up a message's structure: every part, the encoding and charset it declared, the text it decodes to, and the files attached to it. Attachments are listed and measured, never opened.
- Unsubscribe checkerRuns in your browserDoes this message support one-click unsubscribe? Reads List-Unsubscribe and List-Unsubscribe-Post from pasted headers and says which mailbox providers will show the button.
- DMARC report readerRuns in your browserTurn a DMARC aggregate report into a table you can read: who sent as your domain, how much of it passed SPF and DKIM alignment, and what the receiver did with the rest.
- Email HTML previewerRuns in your browserPaste a message's HTML and see it drawn, in a frame with no permission to run a script, fetch an image or follow a link. Nothing is uploaded and nothing is fetched.
Write a record
Build a DNS record from answers, without memorising the syntax.
- SPF record generatorRuns in your browserBuild a valid SPF record from what you already know about who sends your mail, with the ten-lookup limit counted as you go.
- DMARC record generatorRuns in your browserBuild a DMARC record from answers, with plain explanations of what p, sp, pct and the report addresses will actually do to your mail.
- Email regex generatorRuns in your browserA copyable email pattern for the language you are working in — and an honest account of why a regular expression is the wrong way to decide whether an address is real.
Check a domain
Read what a domain publishes about how its mail is authenticated.
What these do and do not do
In-browser means in-browser. 9 tools here parse a message you paste, and they do it with JavaScript running on your own machine. There is no upload step and no request to our API. A browser test with the network closed fails the build if that ever stops being true.
They report, they do not grade. A checker tells you what a record says and what the specification says about it. None of these scores an operator or judges anyone’s security.
No account, no sign-up wall. Every tool works without logging in. If you want an address that keeps your real one out of a form in the first place, that is what Maski does.