What’s the difference between envelope-from and header-from domain reputation?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
If you've ever wondered why your emails look like they're coming from your brand but bounce notifications go somewhere else entirely, you're already halfway to understanding this distinction.
The envelope-from (also called the Return-Path or bounce address) is the domain used during the actual SMTP conversation between servers. It's invisible to your recipients. This is where bounce messages go and where SPF authentication checks happen.
The header-from is the domain your recipients actually see in their inbox's From field. It's your brand name, your identity. This is what DMARC aligns against and what inbox providers increasingly use to judge your sender reputation.
These two domains build separate reputation tracks. When an ESP like Mailchimp or Twilio SendGrid sends on your behalf, they often use their own domain as the envelope-from while showing your branded domain in the header-from. That means your bounces feed their reputation history, not yours.
This split matters for two reasons. First, SPF passes against the envelope-from domain. If your ESP's domain is listed there, SPF validates against their records. Second, DMARC requires either SPF or DKIM to align with the header-from domain. If you're only relying on SPF alignment and your ESP controls the envelope-from, that alignment will fail unless DKIM is also in place signing with your domain.
Which one should you focus on? The header-from, honestly. It's what your recipients trust, it's what DMARC cares about, and it's where inbox providers are anchoring long-term reputation signals. Make sure DKIM is signing with your own domain so alignment passes through that route, and set up DMARC even at a monitoring-only policy to start seeing how both domains are performing.
If you're unsure whether your current setup is passing alignment correctly, you can check your DMARC reports with our free DMARC Parser. Or if things look broken and you want a human to walk through it with you, our SOS hotline is free.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.
