
HeaderCheck
Auth verdicts on your device.
0 ratings
Free
In-App Purchases
Rating summary
About
HeaderCheck reads the hidden headers of an email and tells you, in plain language, whether the sender's domain checked out.
Paste the headers and HeaderCheck shows clear Pass, Fail, Softfail or Missing results for SPF, DKIM and DMARC, explains whether the domains line up, and points out anything worth a second look. It does the work on your iPhone or iPad. There's no account and no sign-in, and your headers are never uploaded.
WHAT YOU GET FOR FREE
• Header analysis for SPF, DKIM and DMARC
• Simple explanations of each result
• Domain alignment notes
• A built-in guide to finding and copying headers
HEADERCHECK PRO (ONE-TIME PURCHASE)
• Reputation hints: see if the sender's domain comes from a throwaway or free email provider, and which public servers handed the message along
• Optional live DNS checks: look up those servers on the SpamCop and PSBL block lists, and check whether the sender's domain publishes SPF, DMARC and MX records. Off until you turn it on in Settings
• Open email files from Mail, Files or other apps
• Copy a plain-text summary or export a PDF report, hints included
• Unlimited History
Reputation hints are just that: extra context to help you decide. They never call a message good or bad on their own.
PRIVATE BY DESIGN
• Analysis happens on your iPhone or iPad
• No account, no analytics, no tracking
• Headers and message content are never sent to us
• Live DNS checks are optional. When they're on, only server addresses and the sender's domain are looked up through your device's normal DNS
Available in 14 languages.
HeaderCheck reports what's in the headers you give it. It can't promise that a message is safe, and it isn't legal advice.
Privacy policy: https://headercheck.app/privacy
Support: https://headercheck.app/support
Show more
What's New in HeaderCheck
1.1
October 11, 2026
New in HeaderCheck Pro: reputation hints. See whether the sender's domain is a throwaway or free email address, and which servers passed the message along. Optional live DNS checks (off until you turn them on in Settings) look up those servers on public block lists and check the domain's SPF, DMARC and MX records. Hints appear in Copy Summary and PDF reports. Plus layout and accessibility improvements.
More1
Subscriptions & In-App Purchases
$2.99
HeaderCheck Pro
Unlock PDF export, analysis history, and eml import






