How do I verify a forwarded email?

Ask the mailbox owner to export the original email as a .eml file, then upload it to selfcheck.email. The DKIM signature on the original indicates whether the content is unchanged.

What does DKIM verification establish?

A valid DKIM signature establishes that the email content has not been altered since the sender's mail server signed it. It does not establish that the content is true or that a specific person wrote it.

Yes. You can verify up to 5 emails per hour without an account. Free accounts get 5 cases per month with timestamped PDF reports.

Does SelfCheck store my email?

No. The email file is processed in memory and deleted immediately. Only cryptographic hashes and the PDF report are retained.

← Guides

How to export an .eml file from Gmail, Outlook, and Apple Mail

3 min

Why you need the .eml file

To verify an email's DKIM signature, you need the original message file — not a forwarded copy or a screenshot. The .eml file preserves the cryptographic signature that indicates the email has not been changed.

Gmail (desktop)

1.Open the email you want to export

2.Click the three-dot menu (⋮) in the top-right corner of the message

3.Select "Download message"

4.Gmail saves a .eml file to your Downloads folder

That's it. The file name will be the email subject.

Outlook (desktop app)

1.Open the email

2.Go to File → Save As

3.Change the "Save as type" to Outlook Message Format - Unicode (.msg) or Text Only (.eml)

4.Choose a location and click Save

In Outlook on the web (outlook.com): click the three-dot menu on the message, then "View message source" — copy the full text and save it as a .eml file.

Apple Mail (macOS)

1.Select the email in Apple Mail

2.Go to File → Save As...

3.Choose "Raw Message Source" as the format

4.Save the file (it will have a .eml extension)

Alternatively, you can drag the email from Apple Mail directly to your Desktop — it will be saved as a .eml file.

What to do with the .eml file

Upload it to selfcheck.email. You can drop it directly on the homepage for an instant check (no account needed), or sign in and create a case for a timestamped report.

The file is processed in memory and deleted immediately after verification — SelfCheck does not store the original email.

Try it now

Drop an .eml file on the homepage for an instant verification — no account needed.

Verify an email