BIMI Checker

Check a BIMI record

BIMI lets supporting inboxes show your logo next to authenticated mail. Check the record, the logo and certificate URLs, and the DMARC policy it depends on.

Guide

What the BIMI checker tests

BIMI (Brand Indicators for Message Identification) is a TXT record at default._bimi.your domain pointing at an SVG logo and, usually, a mark certificate proving you own it.

default._bimi.example.com.  TXT  "v=BIMI1; l=https://example.com/logo.svg; a=https://example.com/vmc.pem"
  • DMARC at enforcement. BIMI only applies when DMARC is at quarantine or reject for the whole domain, and a subdomain policy is not none.
  • The record. v=BIMI1 first, an https:// logo URL in l=, and optionally a certificate URL in a=.
  • The certificate. Gmail and Apple Mail only show logos backed by a Verified Mark Certificate (VMC) or Common Mark Certificate (CMC).

The logo's SVG Tiny PS profile and the certificate's contents are on other hosts a browser cannot read, so they are marked not verifiable.

FAQ

BIMI: common questions

What is BIMI?

BIMI (Brand Indicators for Message Identification) is a DNS record that points to a brand logo in SVG format. Mailbox providers that support it display the logo next to messages that pass DMARC, including Gmail, Apple Mail and Yahoo.

What do I need before BIMI works?

DMARC at enforcement (p=quarantine or p=reject) on your domain, a logo in the SVG Tiny Portable/Secure format, and for Gmail and Apple Mail a Verified Mark Certificate or Common Mark Certificate.

Is a VMC required for BIMI?

Not by the record format, but in practice yes for the largest inboxes: Gmail and Apple Mail only show logos backed by a VMC or CMC. Some providers, such as Yahoo, show logos without one.

Guides

Learn more

  • Moving DMARC from p=none to p=reject A safe rollout plan for DMARC: start monitoring, read the aggregate reports, fix legitimate senders, and step up to quarantine and reject without losing mail.