Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

When I send out emails using gmail, is my IP address being recorded? can the recipient of my gmail message knows my IP address and thus infer where I am located?

share|improve this question
1  

5 Answers 5

up vote 11 down vote accepted

Send yourself an email (at a non-gmail email address) via gmail and read the "full header" or "message source", especially "X-Originating-IP".

Compare this with your own external IP address (google [my ip is]).

The header of an email which I sent from my own gmail address to my own gmail address ("Show Original") did not contain an originating IP address, or any IP address except a reserved address in the 10.x.x.x range (in other words no IP address that would be identifiable as mine).

Then, I sent an email from my gmail address to myself at another email provider. The header of this email had an X-Originating-IP address which resolves to Google, Inc. It contained several IP addresses, none of which were identifiable as mine.

In appropriate cases a subpoena, search warrant or other lawful process directed to Google, Inc. would, of course, unmask your IP address and reveal your general location (and more legal process would force your ISP to reveal the IP address subscriber's name and address).

Your IP address was recorded by Google when you sent the email, and by God knows what other spooks inhabit the interwebs between you and your ISP, and between your ISP and Google, but it was not sent to your mail recipient(s).

share|improve this answer
8  
Readers beware that this answer is specific to GMail. Other mail providers might behave differently, especially when you use a real mail client and not a web interface. –  Philipp May 9 at 8:14
    
More generally, this answer assumes neither the sender nor the recipient are running their own mail server. –  Colin Pickard May 9 at 11:00

Select the message you want to view, click on "More" (beside the reply button) and select "Show original". It will open a new window with the email header information. Under the "Received" section will be your IP address and all the corresponding mail transfer agent (MTA) information that the email traveled through.

So the recipient may roughly guess your geographical location via your IP address information provided you are not using either VPN or webmail. If the sender had used Google webmail, then the IP address will point to the Google's mail service rather than your IP address. A further check with Google or your VPN service provider is needed to determine the IP address from their log files. Finally, with the IP address, cross referencing from your ISP's DHCP records can determine exactly who sent the email.

share|improve this answer

Google/Gmail strips the originating IP address (among other things) from outgoing messages - so the receiver cannot see the IP to indicate where you are, or more correctly, where the email originated from.

Other online email services (Yahoo...) leave the originating IP in the header. You could use a VPN to obfuscate the IP.

For privacy this IP stripping is great, for doing illegal stuff, then don't use email.

share|improve this answer

If you use Gmail in as webmail (by sending emails on gmail.com), your IP address and hostname will not be leaked.

But if you use Outlook or Thunderbird like mail client to send gmail by using SMTP, then your IP address and hostname will be travel with your email.

share|improve this answer

2014, June 26: I used the GMail web interface to open an email sent from a GMail account to a GMail account, clicked next to the "Reply" icon, and selected "Show original" and I was able to see the originating IP. In this case it was the IP address assigned from my ISP to my router at home (which I needed because it changed and I wasn't using any dynamic DNS tool)

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.