What the BIMI Checker looks at
A BIMI record is a TXT record at default._bimi.yourdomain. The tool checks it against the current BIMI specification, draft-brand-indicators-for-message-identification-14, and checks the DMARC policy BIMI depends on:
- The record. Exactly one record starting
v=BIMI1. If the domain has none, receivers fall back to the organizational domain's record. l=, the logo URL. A single HTTPS URL to an SVG file. An emptyl=anda=together mean the domain declines BIMI.a=, the evidence URL. An HTTPS URL to a mark certificate (a PEM file): a VMC or a CMC.- DMARC.
p=quarantineorp=reject, applied to all mail (nopctbelow 100), and nosp=none. The draft and Gmail's BIMI requirements both require this.
We read DNS only. We don't download your logo or your certificate, so we can't confirm the SVG profile or that the certificate is valid.
How to read the results
- Pass. That part meets the requirement.
- Warning. It may work for some providers but not others. The common case is no certificate.
- Fail. No provider will show your logo until this is fixed. A weak DMARC policy is the most common cause.
- Info. For context only. "No BIMI record" is Info, because BIMI is optional.
What mailbox providers require
Each provider sets its own rules. These are from their own documentation, checked in October 2026:
| Provider | Certificate | DMARC |
|---|---|---|
| Gmail | VMC or CMC required. A checkmark appears only with a VMC. | p=quarantine or p=reject, pct=100 |
| Apple Mail | A verified evidence document, such as a VMC | Enforced DMARC, as the BIMI specification requires |
| Yahoo | Not currently required; used if present | p=quarantine or p=reject, plus enough volume and reputation |
| Microsoft Outlook | Not supported for Exchange Online | — |
A VMC (Verified Mark Certificate) covers a registered trademark. A CMC (Common Mark Certificate) covers a logo with documented prior use, or a modified version of a registered trademark. Both are issued by certificate authorities under the BIMI Group's mark certificate requirements.
A working example
default._bimi.example.com. TXT "v=BIMI1; l=https://example.com/brand/logo.svg; a=https://example.com/brand/vmc.pem"
_dmarc.example.com. TXT "v=DMARC1; p=reject; rua=mailto:dmarc@example.com"
Gmail's help page also shows a form with an empty l= when the logo is embedded in the certificate file. The BIMI draft expects a logo URL, so we report that form as Info rather than an error.
Common problems and fixes
DMARC is at p=none. Move to quarantine and then reject only after your DMARC reports show every legitimate sender passes. Our guide moving DMARC from none to reject walks through it.
sp=none or pct below 100. Both stop BIMI. Remove sp=none (or set it to quarantine or reject) and finish your pct rollout.
Logo is a PNG or a normal SVG. BIMI logos must use the SVG Tiny PS profile. Most design tools need a conversion step.
Several URLs in l=. The current draft allows a single URL.
Limitations
- We don't fetch or validate the logo or the certificate.
- We check the DMARC policy that applies to the domain you enter. If you check a subdomain with its own DMARC record, the organizational domain must also be enforced.
- Even a perfect setup doesn't guarantee a logo. Providers also weigh volume, reputation and their own rules.
Related
Check your DMARC record in detail with the DMARC Checker, or see DMARC record examples.
Frequently asked questions
What is BIMI?
BIMI (Brand Indicators for Message Identification) is a DNS record that points to your logo, so supporting mailbox providers can show it next to your messages. It only works for domains that already enforce DMARC.
Do I need a VMC or CMC certificate?
For Gmail, yes: Google requires a Verified Mark Certificate or a Common Mark Certificate. Apple Mail needs a verified evidence document such as a VMC. Yahoo currently says it doesn't require a certificate, but it only shows logos for senders with enough volume and reputation.
My BIMI record is valid. Why is there still no logo?
Usually DMARC isn't enforced (p=none), the logo isn't in the SVG Tiny PS format, there is no certificate where the provider needs one, or the provider hasn't built enough reputation for your domain. Each provider decides for itself.
What does the BIMI Checker look at?
It reads your BIMI record, checks the logo and certificate URLs it points to, and checks whether your DMARC policy is strict enough for BIMI. It can't tell you whether a particular mailbox provider will show your logo; each provider decides that itself.
Which email apps show BIMI logos?
Support varies by mailbox provider. The BIMI Group lists Gmail, Apple Mail, Yahoo and Fastmail among the providers that show logos, and lists Microsoft as not supporting BIMI. Check the BIMI Group's list before you plan around a provider.
Related guides
BIMI explained: how to show your brand logo in the inbox
What BIMI is, what it needs (DMARC enforcement, an SVG Tiny PS logo, a VMC or CMC), which mailbox providers show the logo, what it costs and how to set it up.
8 min read SPF, DKIM & DMARCMoving DMARC from p=none to p=reject: a staged rollout for small businesses
A staged plan to move DMARC from monitoring to reject without blocking your own mail, including what changes when a filtering gateway sits in front.
9 min read SPF, DKIM & DMARCDMARC record examples, explained tag by tag
Copy-paste DMARC record examples for monitoring, quarantine and reject, with each tag explained and what RFC 9989 changed: pct removed, t, np and psd added.
9 min read