What Is Authentication-Results header?
The Authentication-Results header records authentication assessments made by a mail-handling system, such as SPF, DKIM and DMARC results. Its value depends on trusting the system that added it; an untrusted sender can also write header text.
By LeadHaste Editorial · AI-assisted editorial review ·
A receiver's assessment
Authentication-Results gives mail-handling software a structured place to report authentication outcomes. A field may include a system identifier and results for methods such as SPF or DKIM, with properties describing the identities assessed. The exact set depends on the receiving system. An absent method is different from an explicit failure, and a pass should be interpreted against the identity actually tested.
The header is useful evidence only inside an appropriate trust boundary. A sender can insert text that looks like an authentication result before submitting a message. Receiving infrastructure therefore needs rules about which assessments it trusts and how it handles untrusted copies. Counting every occurrence of the word pass in raw headers is not an authentication analysis.
Read a result in context
For a controlled test, save the received message and identify the assessment added by the mailbox provider or gateway you trust. Note the evaluated domain, method, result and any explanatory reason. Compare those facts with the sender's actual configuration. A forwarding intermediary may see a different authentication situation from the final mailbox, which is another reason to keep the evaluating system visible.
Diagnose without overclaiming
Authentication outcomes can narrow an investigation, but they do not describe the recipient's entire filtering decision. A message can authenticate successfully and still be placed in spam or rejected for another reason. Conversely, a delivery observation alone does not reveal which individual method passed. Keep authentication, transport, acceptance and placement evidence separately labeled.
When sharing a diagnostic example, use a controlled message and remove unnecessary personal content. Preserve the relevant identities and trusted assessment accurately. The goal is a reproducible explanation of what a known receiver checked, rather than an impressive-looking header pasted into a report without an identified source of trust.
Sources
Useful next steps
Related terms
Put the pieces into a system you own.
Explore your ICP and campaign fit on a free discovery call, then decide what your outbound operation needs.
Book your free ICP review →