How to Use the BIMI Checker
Enter a domain, adjust the selector only if you use one, and read the record, DMARC, logo and certificate checks in order.
- Enter the domain that appears in the From address of your mail.
- Keep the default selector unless your messages send a BIMI-Selector header with another one.
- Select Check BIMI and work through any failed record, DMARC, logo or certificate checks.
What the BIMI Checker Checks
The BIMI checker tests the four things a receiver needs before it shows your logo: the record, DMARC enforcement, the SVG file and the mark certificate.
BIMI Record Check
The tool reads the TXT record at default._bimi.<domain>, or at the selector you enter, and requires v=BIMI1 as the first tag. It checks that l= is a single HTTPS URL of the logo and that a=, when present, is an HTTPS URL of a PEM file. A record with empty l= and a= is reported as a declination, which tells receivers to show no logo.
BIMI Record Requirements
BIMI only works for domains that enforce DMARC, so the tool reads the DMARC record with the same parser as the DMARC Checker. The policy must be quarantine or reject, sp must not be none, and pct must be absent or 100. A subdomain without its own DMARC record is judged by its parent’s policy.
BIMI Logo Requirements
The logo must be an SVG in the Tiny Portable/Secure profile: a root svg element with baseProfile="tiny-ps" and version="1.2", a title, and no x or y on the root. Scripts, animation, external references and embedded images are not allowed, the shape must be square and the file should stay under 32 KB. When the logo host blocks cross-origin reads, the tool reports the logo as not verifiable from the browser rather than failed.
BIMI VMC Certificate
The a= tag points to a PEM file with a Verified Mark Certificate (VMC) or Common Mark Certificate (CMC), which ties the logo to your organization. The tool fetches that file where the server allows it and counts the certificates it contains. It does not validate the certificate chain or compare the embedded logo with the SVG.
BIMI VMC vs CMC
Both certificates are issued by authorized certificate authorities after an identity check; they differ in the proof the logo needs.
| Certificate | Proof required for the logo | Display in supporting inboxes |
|---|---|---|
| Verified Mark Certificate (VMC) | A registered trademark | Logo, with a verified checkmark at some providers |
| Common Mark Certificate (CMC) | Public use of the logo for at least one year, no trademark needed | Logo without the verified checkmark |
Frequently Asked Questions
What Is a BIMI Record?
A BIMI record is a DNS TXT record at default._bimi.<domain> that tells mailbox providers where to find your brand logo. Supporting providers show that logo next to authenticated messages from your domain.
How Do You Create a BIMI Record?
Move DMARC to quarantine or reject first, then publish your logo as an SVG Tiny PS file at an HTTPS URL. Add a TXT record such as v=BIMI1; l=https://example.com/logo.svg; a=https://example.com/vmc.pem, and leave a= empty if you have no certificate yet.
What Does BIMI Record Not Published Mean?
It means a receiver or checker found no v=BIMI1 TXT record at the name it queried, usually default._bimi.<domain>. Check the record name in your DNS zone and make sure the value starts with v=BIMI1.
Is BIMI Required?
No, BIMI is optional and does not decide whether your mail is delivered. It only adds a logo in supporting inboxes, and some providers show it only when the record carries a VMC or CMC.
Related Email Tools
Continue with the guide What Is DMARC. Policies, alignment and reports explained.