Skip to content
Help · MoreBIMI record checker: will your logo show in the inbox?
Start here

BIMI record checker: will your logo show in the inbox?

Type a domain to read its BIMI record and DMARC policy, and see what stands between it and a logo beside your mail in Gmail and other inboxes. Free.

On this page · 6 sections

What BIMI is

BIMI, Brand Indicators for Message Identification, lets a domain publish its logo for inboxes to show beside its mail. The logo is a TXT record at default._bimi on your domain, pointing at an SVG file and, for most inboxes, a certificate that proves the logo is yours. [1][2]

It only works for mail that already passes DMARC under an enforced policy. BIMI isn't a way around authentication; it's the reward for finishing it. [1]

What a domain needs

DMARC
What it needs: p=quarantine or p=reject. Not p=none, no sp=none, and no pct= below 100. [1][2][3]
Checked above: Yes
BIMI record
What it needs: A TXT record at default._bimi.<your domain> that starts v=BIMI1. [1][2]
Checked above: Yes
Logo, l=
What it needs: An https:// link to your logo as an SVG in the SVG Tiny PS profile. [1][2]
Checked above: The link, not the file
Certificate, a=
What it needs: An https:// link to a Verified Mark Certificate (VMC) or Common Mark Certificate (CMC), as a PEM file. Gmail requires one. [2][3]
Checked above: The link, not the certificate

A record with no a= is a self-asserted logo. The BIMI Group says those have limited support across mailbox providers, and Gmail doesn't show them. [2][3] A VMC is based on a registered trademark; a CMC is for a logo you've used for at least a year without one. Both come from a certificate authority.

Google's two example records: with the logo inside the certificate, v=BIMI1;l=;a=https://…/certificate.pem; with a separate SVG, v=BIMI1;l=https://…/bimi-logo.svg. [3] A record with l= and a= both empty says the domain doesn't want a logo shown. [1]

Two real domains

Checked on November 6, 2026: paypal.com publishes a BIMI record with an SVG logo and a PEM certificate, and DMARC at p=reject, so it passes every check. github.com has DMARC at p=quarantine; sp=reject; pct=100, which BIMI accepts, but no BIMI record.

Fixing what the checker finds

  1. DMARC still at p=none? Read your reports until every service sending as you passes, then move to p=quarantine. The DMARC record generator builds the record.
  2. Make the SVG Tiny PS file. Ordinary SVG exports from design tools usually need converting; the BIMI Group lists tools for it. [2]
  3. Get a VMC or CMC from a certificate authority, and host the PEM file and the SVG on an https:// address. [2][3]
  4. Add the TXT record at default._bimi, with l= and a= pointing at the two files, then check again above.

Where Ayoh fits

When you connect a domain, Ayoh adds the SPF, DKIM and DMARC records your mail needs to pass. BIMI comes after that: once your DMARC policy is at quarantine or reject, the logo is the last step.

Sources

Read November 6, 2026.