EML Preview
Open an .eml file to see who sent it, to whom and when, the SPF/DKIM/DMARC results, how the message looks with all remote content blocked, where its links really go, its attachments, headers and source.
- Runs in your browser
- Free to use
About this tool
EML files are the raw form of an email, and opening them in a mail client can trigger tracking pixels, external content or worse. EML Preview parses the message entirely in your browser: it shows the subject, sender, recipients, date and size, reads the SPF, DKIM and DMARC results from the authentication headers, and renders the body in a sandboxed frame after removing scripts, forms, frames and every remote resource. The tabs expose the plain text, the attachments (downloadable as inert files), every link with its real destination, the decoded headers and the source.
Follow up on a suspicious sender with the Email Header Tracer and check links with Unshorten URL and the Domain Reputation Check.
How to use it — quick steps
- 01
Add the .eml file
Drop the message on the dashed area or choose it; exports from Gmail, Thunderbird and Outlook all work.
- 02
Check the summary
Subject, sender, recipients, date, size and the SPF, DKIM and DMARC results are shown on top.
- 03
Browse the tabs
Rendered view without remote content, plain text, attachments to download, links, headers and source.
Key features of this tool
Safe by design
The body is sanitised and shown in a sandboxed frame with scripts, forms, frames and remote images removed; there is no option to load them.
Authentication at a glance
SPF, DKIM and DMARC results are read from the Authentication-Results headers; a spoofed display name is flagged.
Links and attachments
Every link with its real target and a warning when the visible text names another domain; attachments listed with type and size and downloadable as plain files.
Frequently asked questions
Why are the images missing?
Remote images are always blocked: loading them would contact the sender's server and reveal your IP address and that the message was opened. Images embedded in the message (cid: and data URLs) are shown.
Is it safe to open a phishing email here?
Yes. The message is parsed in your browser, scripts, forms, iframes, objects and event handlers are stripped, and the result is displayed in a sandboxed frame with its own Content-Security-Policy. Links are never followed automatically.
Can I open .msg files from Outlook?
No, .msg is a binary Outlook format. Save the message as .eml (or drag it to the desktop from Outlook on the web) first.
What do SPF, DKIM and DMARC mean here?
They are the results your mail server recorded when it received the message. "pass" means the sender is authenticated; "fail" or "n/a" means the message could be forged.
Are my files or data uploaded?
No. The tool is plain JavaScript that runs in your browser; the files or data you provide here are never uploaded to our servers.