gouv.fr email security: SPF, DKIM & DMARC
Is gouv.fr spoofable? See gouv.fr's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.
Last updated: August 9, 2026
DKIM
OKSelectors: google, default, selector1, selector2, k1, mandrill, dkim, mail, smtp, s1, s2, protonmail, protonmail2, protonmail3, zendesk1, zendesk2, resend, everlytickey1, cm, mxvault, zoho, zmail, fm1, fm2, fm3MX
MissingNo record found
Recommendations
1Change your DMARC policy from p=none to p=reject to block spoofing
With p=none, your DMARC record only monitors — it doesn't actually block spoofed emails. Attackers can still send emails as your domain and they'll be delivered normally. Switching to p=reject instructs receiving servers to drop fraudulent messages before they reach the inbox.
2Add an SPF record: yourdomain TXT "v=spf1 include:yourprovider -all"
SPF tells receiving servers which IP addresses are allowed to send email for your domain. Without it, any server in the world can send emails appearing to come from you. Adding SPF with -all (hardfail) means unauthorized senders will be rejected.
3Add MTA-STS to enforce TLS encryption for incoming emails
Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.
Need help securing your domain?
If you're not sure how to apply these fixes, get in touch and we'll help you out.
Contact usRun a live analysis
The results above are updated daily. For an instant check of gouv.fr, run a live analysis.
Analyze gouv.fr liveBadge for your website
Display your email security score on your website.
<a href="https://spoofchecker.online/en/email-security/gouv.fr" target="_blank" rel="noopener"><img src="https://spoofchecker.online/api/badge/gouv.fr?score=38&grade=D" alt="Email security score for gouv.fr" height="28"></a>Frequently asked questions about gouv.fr
Is gouv.fr spoofable?
Yes. gouv.fr does not enforce a strong DMARC policy, so attackers may be able to send emails that appear to come from gouv.fr. Email security score: 38/100 (grade D).
Does gouv.fr have an SPF record?
No SPF record was found for gouv.fr, which makes it easier to spoof.
What is gouv.fr's DMARC record?
gouv.fr publishes a DMARC record (_dmarc.gouv.fr) with a p=none policy.
Does gouv.fr use DKIM?
Yes, DKIM signatures were detected for gouv.fr.
Want to test another domain? Run a free email spoofing test.
Guides to understand these results
SPF Guide
Understand how SPF defines which servers are authorized to send emails for a domain.
DKIM Guide
Discover how DKIM cryptographically signs your emails to guarantee their authenticity.
DMARC Guide
Learn how DMARC orchestrates SPF and DKIM to protect your domain.
MTA-STS Guide
Learn how MTA-STS enforces TLS encryption to protect your emails in transit.
SPF vs DKIM vs DMARC
Compare the three protocols and understand how they work together.