If you're running into problems setting up email forwarding using the steps above, it could be because several security checks that are inherent to the email protocol could be violated and are preventing the email from being successfully processed by HackerOne.

Here are some common problems and solutions users run into when setting up email forwarding:

Issue | Solution

----- | --------

You're using Gmail as an email provider and the confirmation code hasn't been entered. | In setting up email forwarding for Gmail, you need to enter a confirmation code that is sent to the email address you want to forward emails to. Because you don't have access to the inbox generated by HackerOne, you'll need to contact HackerOne to get the confirmation code to finalize the setup in your Gmail account.

You manually created a forwarding rule yourself instead following [these setup instructions](email-forwarding.html#set-up). When you manually create your own forwarding rule, this creates a new email object that doesn't contain the *H1-Forwarding-Nonce* header that HackerOne requires to verify the setup. | Please follow the setup instructions [above](email-forwarding.html#set-up) and also be sure to follow the instructions for the forwarding functionality of your email provider.

The *To* field is incorrect. This causes SPF and DKIM checks to fail, which means that HackerOne won't receive the forwarded email. | Make sure the *To* field matches the one you entered in step 3 [above](email-forwarding.html#set-up), and be sure to follow the instructions for the forwarding functionality of your email provider.

Here's an example of what your email headers should look when email forwarding is set up correctly:

Header | Value

------ | ------

To | [email protected]

From | "Reporter" <[email protected]>

Return-Path | [email protected]

Delivered-To | [email protected]

Received-SPF | pass(*)

DKIM-Signature | v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple; s=hsbnp7p3ensaochzwyq5wwmceodymuwv;d=server.com; t=12738181; h=Date:From:To:Message-1 D:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding:Feedback-ID; bh=2jh40/jnKOZNNY68AJSDID8IUovd714123JJzgOVWqFX4Q=; b=JASIOSD+89jYRJsmqDIEA621Xkz1cpHba6xikYasjid8JJoc KAidKMZ/O1VV/+LBI19tGajKAID882Lx8/CSAXMMiKlamK+ac+rOfqQKDIA88INOL /FBpVYM4nLOLLIPOPwxNrlvPWoouHw9kdDq171/dUs YO7E=

X-Forwarded-To | [email protected]

X-Forwarded-For | [email protected] security-9beOakdka [email protected]

H1-Forwarding-Nonce | 2a032918391e46cf7687e62ec42423ea3