gov.uk email security: SPF, DKIM & DMARC
Is gov.uk spoofable? See gov.uk's SPF, DKIM, DMARC and MTA-STS records and find out if this domain is protected against email spoofing.
Last updated: August 6, 2026
SPF
OKv=spf1 -allDKIM
OKSelectors: google, default, selector1, selector2, k1, mandrill, dkim, mail, smtp, s1, s2, protonmail, protonmail2, protonmail3, zendesk1, zendesk2, resend, everlytickey1, cm, mxvault, zoho, zmail, fm1, fm2, fm3DMARC
OKv=DMARC1;p=reject;sp=none;np=reject;adkim=s;aspf=s;fo=1;rua=mailto:dmarc-rua@dmarc.service.gov.ukMX
MissingNo record found
Recommendations
1Add MTA-STS to enforce TLS encryption for incoming emails
Without MTA-STS, an attacker performing a man-in-the-middle attack can downgrade the connection between mail servers to plaintext, intercepting emails in transit. MTA-STS tells sending servers to only deliver via TLS with a valid certificate, preventing downgrade attacks.
Run a live analysis
The results above are updated daily. For an instant check of gov.uk, run a live analysis.
Analyze gov.uk liveShow off your score
Show visitors that gov.uk is protected against email spoofing — the badge links to your live report.
<a href="https://spoofchecker.online/en/email-security/gov.uk" target="_blank" rel="noopener"><img src="https://spoofchecker.online/api/badge/gov.uk?score=80&grade=B" alt="Email security score for gov.uk" height="28"></a>Frequently asked questions about gov.uk
Is gov.uk spoofable?
No. gov.uk is protected against email spoofing with a robust configuration. Email security score: 80/100 (grade B).
Does gov.uk have an SPF record?
Yes, gov.uk publishes an SPF record (-all qualifier).
What is gov.uk's DMARC record?
gov.uk publishes a DMARC record (_dmarc.gov.uk) with a p=reject policy.
Does gov.uk use DKIM?
Yes, DKIM signatures were detected for gov.uk.
Want to test another domain? Run a free email spoofing test.
Guides to understand these results
SPF Guide
Understand how SPF defines which servers are authorized to send emails for a domain.
DKIM Guide
Discover how DKIM cryptographically signs your emails to guarantee their authenticity.
DMARC Guide
Learn how DMARC orchestrates SPF and DKIM to protect your domain.
MTA-STS Guide
Learn how MTA-STS enforces TLS encryption to protect your emails in transit.
SPF vs DKIM vs DMARC
Compare the three protocols and understand how they work together.