Verdicts, not messages.

EmailAuthLab is designed to be safe to use for a basic test email. Even so, do not send sensitive information, attachments, customer data, passwords, or financial or health content to a test address.

What a test stores

A test result stores the authentication verdict only: the SPF, DKIM, and DMARC outcomes, the sending domain, and technical provenance such as the sending network and signing key strength. We do not retain message bodies, subjects, or attachments, we show domains rather than full addresses, and the sending IP is stored masked. Results expire on their own, and every result page has a delete button that removes it immediately.

Share links are opt-in

A result is private to whoever holds its link until you choose to share it. A share link contains the grade and verdict only, hides your domain unless you switch it on, and expires after 90 days. The Wall lists only domains whose owners chose to publish.

The header analyzer stores nothing

Headers pasted into the analyzer are processed transiently to produce the verdict on screen and are not stored.

We never use your headers or content for advertising, model training, or marketing. EmailAuthLab is operated by TrustYourInbox.