BIMI record checker
Check whether a domain is set up to show its logo next to its emails: the BIMI record, DMARC, the logo file and the mark certificate.
Choosing a check opens its page. With the keyboard, use the arrow keys, then press Enter.
What we check
We look up the domain's default BIMI record at default._bimi.<domain>, or at its organisational domain if it has none, and explain each tag. Then we check the three things mailbox providers need before they show a logo:
- DMARC is enforced: the policy is
quarantineorrejectfor all mail, at the domain and its organisational domain. - The logo is SVG Tiny PS: we fetch it over HTTPS (up to 32 KB) and check it is a safe, self-contained, square SVG with a title. We show it only if it passes every check.
- The mark certificate (VMC or CMC): we read who it was issued to and by, its dates and the domains it covers. We don't verify its chain of trust.
Common problems
- DMARC is still
p=none, or usespctbelow 100. - The logo was exported from a design tool and still has
x/yon the root, nobaseProfile="tiny-ps", or isn't square. - The certificate has expired, or was issued for a different domain.
Only the default selector is checked. A record of v=BIMI1; l=; a=; is a deliberate refusal to show a logo.
Frequently asked questions
What is BIMI?
Brand Indicators for Message Identification. A domain publishes a DNS record pointing to its logo, and mailbox providers that support BIMI may show that logo beside authenticated emails from the domain.
Why does DMARC matter for BIMI?
Mailbox providers only show a BIMI logo when the domain's DMARC policy is "quarantine" or "reject", applied to all mail. A "none" policy, or a reduced percentage, isn't enough.
What is SVG Tiny PS?
A restricted, secure form of SVG for BIMI logos: no scripts, animation, links or external files, a title, a square shape, and at most 32 KB. Ordinary SVG exports from design tools usually need small changes.
Do I need a VMC or CMC?
Gmail and Apple Mail show BIMI logos only with a mark certificate: a Verified Mark Certificate (VMC) for a registered trademark, or a Common Mark Certificate (CMC). Some other providers show logos without one.
Do you verify the certificate?
We read its details: who it was issued to and by, its dates, the domains it covers and whether it is a VMC or CMC. We don't verify its chain of trust, so this check can't tell you that a mailbox provider will accept it.
Why is the logo not shown?
We only show a logo that passes every safety and SVG Tiny PS check. Otherwise we list what needs fixing, without displaying the file.
Related tools
-
DMARC Checker
Find the DMARC policy that applies to a domain, see what each setting means, and spot mistakes that make receivers ignore it.
-
SPF Checker
Check that a domain's SPF record is valid, stays within the 10-lookup limit, and says what you expect about servers that may send its mail.
-
CAA Checker
See which certificate authorities a domain allows to issue its certificates.
-
MTA-STS Checker
Check whether a domain asks other mail servers to use secure, verified connections when they deliver its email.
-
DNS Lookup
Look up the DNS records published for a domain, one type or all common types at once, or the reverse DNS name of an IP address.
-
Website Health Check
Run the main website, DNS and email checks on one site at once and get a short report, area by area, with links to the full results.