The From header is the line in an email's headers that shows who the message claims to be from, for example From: Jane Doe <jane@example.com>. It is the address a recipient sees in the inbox.
Why it matters
SMTP does not check that the From header is true, which is why email spoofing is easy without authentication. DMARC protects it: it requires SPF or DKIM to pass with a domain that matches the From domain. This makes the From header the domain that receivers and BIMI logos are tied to. Display names are free text and are a frequent phishing trick, such as a display name of a bank with an unrelated address.
Example
From: "Example Bank" <support@mail-example.xyz>
Return-Path: <bounce@mail-example.xyz>The name looks trustworthy but the address belongs to an unrelated domain. Mobile clients often show only the display name, so check the actual address before acting on a request.
Common mistakes
- Using a free-mail address (such as a consumer provider's domain) as the From for bulk mail; DMARC policies of that provider can cause rejection.
- Trusting the display name as proof of identity.
- Having multiple From headers in a message, which is invalid and used in some attacks.
Related
Get notified when this term updates
Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.
यह पेज सामान्य जानकारी है, जिसे हमारी संपादकीय टीम ने लिखा है और दस्तावेज़ीकरण बदलने पर अपडेट किया जाता है। सर्वर और प्रदाता अलग-अलग होते हैं, इसलिए बदलाव पहले सुरक्षित तरीके से जाँचें। देखें: संपादकीय नीति और अस्वीकरण.