BIMI record setup guide

Requirements

1. DMARC at enforcement: p=quarantine or p=reject, pct=100, and no sp=none. Check with the DMARC checker.
2. Logo in SVG Tiny Portable/Secure (SVG Tiny PS): a square image, solid background, no scripts or external references, with the baseProfile="tiny-ps" attribute and a title element. Most design tools need a conversion step.
3. A mark certificate (needed by Gmail and Apple Mail): a Verified Mark Certificate (VMC), which requires a registered trademark for the logo, or a Common Mark Certificate (CMC), which requires showing the logo has been in use for at least a year. Issued by authorised certificate authorities such as DigiCert and Sectigo.
4. Good reputation: mailbox providers only show logos for senders they trust.

The BIMI record

Publish a TXT record at default._bimi.yourdomain.com:

v=BIMI1; l=https://yourdomain.com/bimi/logo.svg; a=https://yourdomain.com/bimi/vmc.pem

• l= HTTPS URL of the SVG Tiny PS logo.
• a= HTTPS URL of the certificate PEM file (omit it, or leave it empty, if you have no certificate).

Use the generator on the BIMI checker to build it, then check it.

Where logos appear

Mailbox	Shows BIMI logos	Certificate
Gmail	Yes	VMC or CMC
Apple Mail (iOS 16+, macOS Ventura+)	Yes	VMC
Yahoo Mail / AOL	Yes	Not required for eligible senders
Fastmail	Yes	Not required
Outlook.com / Microsoft 365	No BIMI support	—

Troubleshooting

• Logo not showing: confirm DMARC enforcement, that the SVG validates as Tiny PS, and that the certificate covers the same logo.
• Changes can take days to appear because providers cache BIMI data.

Frequently asked questions

Related tools