BIMI record checker: will your logo show in the inbox?
Type a domain to read its BIMI record and DMARC policy, and see what stands between it and a logo beside your mail in Gmail and other inboxes. Free.
On this page · 6 sections
What BIMI is
BIMI, Brand Indicators for Message Identification, lets a domain publish its logo for inboxes to show beside its mail. The logo is a TXT record at default._bimi on your domain, pointing at an SVG file and, for most inboxes, a certificate that proves the logo is yours. [1][2]
It only works for mail that already passes DMARC under an enforced policy. BIMI isn't a way around authentication; it's the reward for finishing it. [1]
What a domain needs
- DMARC
- What it needs:
p=quarantineorp=reject. Notp=none, nosp=none, and nopct=below 100. [1][2][3] - Checked above: Yes
- BIMI record
- What it needs: A TXT record at
default._bimi.<your domain>that startsv=BIMI1. [1][2] - Checked above: Yes
- Logo,
l= - What it needs: An
https://link to your logo as an SVG in the SVG Tiny PS profile. [1][2] - Checked above: The link, not the file
- Certificate,
a= - What it needs: An
https://link to a Verified Mark Certificate (VMC) or Common Mark Certificate (CMC), as a PEM file. Gmail requires one. [2][3] - Checked above: The link, not the certificate
A record with no a= is a self-asserted logo. The BIMI Group says those have limited support across mailbox providers, and Gmail doesn't show them. [2][3] A VMC is based on a registered trademark; a CMC is for a logo you've used for at least a year without one. Both come from a certificate authority.
Google's two example records: with the logo inside the certificate, v=BIMI1;l=;a=https://…/certificate.pem; with a separate SVG, v=BIMI1;l=https://…/bimi-logo.svg. [3] A record with l= and a= both empty says the domain doesn't want a logo shown. [1]
Two real domains
Checked on November 6, 2026: paypal.com publishes a BIMI record with an SVG logo and a PEM certificate, and DMARC at p=reject, so it passes every check. github.com has DMARC at p=quarantine; sp=reject; pct=100, which BIMI accepts, but no BIMI record.
Fixing what the checker finds
- DMARC still at
p=none? Read your reports until every service sending as you passes, then move top=quarantine. The DMARC record generator builds the record. - Make the SVG Tiny PS file. Ordinary SVG exports from design tools usually need converting; the BIMI Group lists tools for it. [2]
- Get a VMC or CMC from a certificate authority, and host the PEM file and the SVG on an
https://address. [2][3] - Add the TXT record at
default._bimi, withl=anda=pointing at the two files, then check again above.
Where Ayoh fits
When you connect a domain, Ayoh adds the SPF, DKIM and DMARC records your mail needs to pass. BIMI comes after that: once your DMARC policy is at quarantine or reject, the logo is the last step.
Sources
Read November 6, 2026.
- [1] IETF, Brand Indicators for Message Identification (BIMI), draft 15 (opens in a new tab) (Internet-Draft, October 31, 2026): the record, its tags and the DMARC requirement.
- [2] BIMI Group, Implementation guide (opens in a new tab): DMARC at enforcement, SVG Tiny PS, VMC and CMC.
- [3] Google Workspace Admin Help, Set up BIMI (opens in a new tab): DMARC values, VMC or CMC, and example records.