BIMI Record Checker
Check the BIMI TXT record and its logo/certificate declarations.
BIMI (Brand Indicators for Message Identification) is a standard for displaying a sender brand's logo next to authenticated mail. This tool queries the TXT record at selector._bimi.domain in real time and checks whether the v=BIMI1 declaration, the logo tag (l) and the VMC certificate tag (a) are correctly configured.
Just enter a domain and a selector (default if unsure). If the record exists, the declared logo SVG URL is shown as a preview, and any VMC (Verified Mark Certificate) URL is listed alongside it. Lookups go to a public DNS resolver over DNS over HTTPS, and results are briefly cached.
Anatomy of a BIMI record
A BIMI record is a TXT record at selector._bimi.domain, typically of the form: v=BIMI1; l=https://example.com/logo.svg; a=https://example.com/vmc.pem
- v=BIMI1: the BIMI version identifier (required)
- l: the URL of the logo SVG to display (an SVG Tiny PS profile is recommended)
- a: the URL of a VMC (or CMC) certificate, required by Gmail, Apple and others
Prerequisites for BIMI to work
For a BIMI logo to actually appear, the domain must first enforce DMARC with an enforcing policy (p=quarantine or p=reject) (check the policy with DMARC Record Lookup), and SPF/DKIM alignment must pass. Many mail clients (notably Gmail and Apple Mail) also require a VMC, so you must declare a VMC issued after trademark registration in the a tag.
Logo file requirements
The logo must be a square (1:1) SVG conforming to the SVG Tiny Portable/Secure (SVG P/S) profile. It must be a static SVG with no scripts or external references, and be reachable over HTTPS.
BIMI support by mailbox provider
The same BIMI record can show a logo at one provider and nothing at another, because requirements differ on the receiving side. Here is how the major providers compare.
| Mailbox provider | VMC/CMC required | Minimum DMARC | Notes |
|---|---|---|---|
| Gmail (web & mobile) | Yes | quarantine or stricter, pct=100 | CMC also accepted (since 2024); DMARC must be on the sending domain |
| Apple Mail (iOS 16+, macOS Ventura+) | Yes | quarantine or stricter | Display speeds up if the recipient saves the sender as a contact |
| Yahoo / AOL | Recommended (may show without) | quarantine or stricter | Early BIMI adopter |
| Fastmail | No | quarantine or stricter | Renders from the l tag SVG alone |
| Microsoft 365 / Outlook.com | Rolling out | quarantine or stricter | Display timing varies by tenant and region |
Reading a record, step by step
Suppose the TXT record at default._bimi.example.com looks like this:
v=BIMI1; l=https://example.com/bimi/logo.svg; a=https://example.com/bimi/vmc.pem
v=BIMI1→ the version tag comes first, so this is recognized as a valid BIMI record (vmust always be the first tag).l=…/logo.svg→ if this SVG is HTTPS, square and SVG P/S compliant, the logo appears in the preview.a=…/vmc.pem→ because a VMC is declared, it becomes a display candidate at Gmail and Apple too. The certificate chain and trademark match are verified separately, though.
Conversely, if only l is present and a is empty (e.g. v=BIMI1; l=https://example.com/logo.svg), this tool will still report the record as well-formed, but Gmail and Apple will most likely not display the logo.
Common pitfall
- Uploading the logo as PNG or JPG. BIMI accepts SVG only, and not just any SVG — it must follow the SVG Tiny P/S profile (
baseProfile="tiny-ps", a<title>element, no scripts or external references). - Publishing the record at the
example.comroot or at_bimi.example.com. The correct location always includes the selector:default._bimi.example.com. - Adding BIMI while DMARC is still
p=none— the logo will never appear. Apctbelow 100 blocks it the same way.