BIMI Lookup & Generator

Check BIMI (Brand Indicators for Message Identification) records for any domain, preview the brand logo, and build your own v=BIMI1 TXT record.

Selector
Most domains use the default selector. Some use custom selectors like bimi or brand.
Try:

Frequently Asked Questions

BIMI (Brand Indicators for Message Identification) is an email specification that allows brands to display their official logo next to authenticated emails in supported email clients such as Gmail, Yahoo Mail, Apple Mail, and Fastmail. It is published as a DNS TXT record at default._bimi.yourdomain.com and links to an SVG logo file. BIMI requires a strong DMARC policy (p=quarantine or p=reject) to be in place before it will activate.
A Verified Mark Certificate (VMC) is an X.509 digital certificate issued by an accredited authority (currently DigiCert and Entrust) that binds your logo to your domain and legal entity. It is referenced in the a= tag of your BIMI record. Gmail and Apple Mail require a VMC to show the verified checkmark. Without a VMC your BIMI record may still work in some clients (like Yahoo Mail) but the logo display is not guaranteed across all providers. VMCs typically cost $1,000–$1,500/year.
BIMI requires the logo to be in SVG Tiny P/S (Portable/Secure) format — a restricted subset of SVG designed for security and consistent rendering. Requirements include: hosted on HTTPS, square aspect ratio, viewBox attribute defined, no JavaScript or event handlers, no external references or linked images, no animations. Use the BIMI Group's SVG conversion tools to convert your logo.
As of 2025, BIMI is supported by: Gmail (requires VMC), Yahoo Mail (does not require VMC), Apple Mail iOS 16+/macOS Ventura+ (requires VMC), Fastmail, and La Poste. Outlook/Microsoft 365 uses its own BIMI implementation. Check the BIMI Group's client list for the latest status.
The most common reasons are: (1) No VMC — Gmail requires a VMC in the a= tag. (2) DMARC policy is p=none — BIMI requires p=quarantine or p=reject. (3) SVG format issues — the logo isn't valid SVG Tiny P/S. (4) Logo not hosted on HTTPS — HTTP URLs are rejected. (5) DNS propagation — the record is new and hasn't propagated. (6) Non-square logo — the aspect ratio must be 1:1.
A VMC is required by Gmail and Apple Mail to display the verified sender logo with a blue checkmark badge. Without a VMC, your BIMI record still works in Yahoo Mail and some other clients — your logo can appear without the verified badge. VMCs are issued by two accredited Certificate Authorities: DigiCert and Entrust, and typically cost $1,000–$1,500 per year. They require your logo to be a registered trademark. For smaller organizations, starting with a VMC-free BIMI record for Yahoo is a cost-effective first step.
BIMI displays your brand's logo as the sender avatar in supporting email clients — the visual that appears in the inbox list next to your sender name, even before the email is opened. Studies by the BIMI Group have shown that emails with displayed logos can see up to 21% higher open rates. The verified checkmark (with VMC) adds a trust signal similar to social media verified badges, signalling the email is genuinely from your organization.
Use this BIMI Lookup tool — enter your domain to instantly verify your BIMI DNS record, DMARC prerequisite, logo URL, and VMC status. Additionally: (1) send a test email to a Yahoo Mail address (Yahoo supports BIMI without VMC) and check if your logo appears in the inbox; (2) send a test to a Gmail account — if you have a VMC, the verified checkmark should appear; (3) use the BIMI Group's inspector for a detailed diagnostic.
BIMI requires your logo in SVG Tiny P/S (Portable/Secure) format — a strict security-hardened subset of SVG. Key requirements:

Required: HTTPS hosting at a stable URL, square aspect ratio (1:1) with viewBox defined, solid background filling the full canvas, no external file references, served with Content-Type: image/svg+xml.

Not allowed: JavaScript, event handlers, CSS animations, embedded fonts, <image> elements referencing external files, or <script> tags.

Use the BIMI Group's free SVG validator to verify your logo before publishing the BIMI record.

About This BIMI Lookup & Generator

This free BIMI tool has two modes. The Lookup tab queries the {selector}._bimi.{domain} DNS TXT record, parses every tag, and previews the brand logo if a valid SVG URL is present. The Generator tab builds a valid BIMI record interactively. Note: BIMI requires an active DMARC policy of p=quarantine or p=reject — without it, email clients will not display the logo.

Standards & References

How BIMI Works

Authenticate Email

Your domain must have SPF, DKIM, and DMARC (p=quarantine or p=reject) all passing correctly.

Prepare SVG Logo

Convert your logo to SVG Tiny P/S format. Host it at a public, stable HTTPS URL — it should never change or move.

Publish BIMI Record

Add a TXT record at default._bimi.yourdomain.com pointing to your logo (and optionally your VMC).

Logo Appears in Inbox

Supporting email clients fetch your logo and display it in the sender avatar area — building trust and brand recognition.

The email authentication chain: SPF verifies the sending IP → DKIM verifies the message signature → DMARC ties them together with a policy → BIMI displays your brand logo once all three pass.

BIMI Tag Reference

TagNameRequiredDescription
vVersion Yes Always BIMI1. Must be the first tag.
lLogo URL Yes HTTPS URL to the SVG Tiny P/S logo file. Must be publicly accessible and stable. Set to empty string (l=) to opt out of BIMI without removing the record.
aAuthority (VMC) Optional HTTPS URL to the PEM-encoded Verified Mark Certificate (VMC). Required by Gmail and Apple Mail to show the verified checkmark. Issued by DigiCert or Entrust.

Why Implement BIMI?

Instant Brand Recognition

Your logo appears as the sender avatar before the email is even opened — making your brand immediately recognizable in a crowded inbox and boosting open rates.

Verified Checkmark Badge

With a VMC, Gmail and Apple Mail display a blue verified checkmark alongside your logo — signalling to recipients that this email is genuinely from your brand, not a spoof.

Forces Strong Authentication

To implement BIMI you must have SPF, DKIM, and a DMARC policy of p=quarantine or p=reject — so pursuing BIMI naturally results in a fully hardened email security posture.

Higher Deliverability

The strong authentication chain required for BIMI significantly improves sender reputation with major mailbox providers, reducing the chance of landing in spam folders.

Phishing Protection for Recipients

Legitimate emails carry your visual logo; phishing attempts don't. Recipients learn to expect and trust your logo, making spoofed emails without it immediately suspicious.

No Cost for Basic BIMI

A basic BIMI record with just l= costs nothing beyond hosting an SVG file — and already works in Yahoo Mail. Only the VMC (for the verified checkmark in Gmail) requires a paid certificate.

SVG Logo Requirements for BIMI

BIMI enforces strict SVG requirements to ensure consistent, safe rendering across all email clients. Your logo must comply with SVG Tiny P/S (Portable/Secure).

Required
  • File format: SVG Tiny P/S (IETF RFC profile)
  • Hosted on HTTPS at a stable, permanent URL
  • Square aspect ratio (1:1) with viewBox defined
  • Full-bleed design — logo should fill the entire canvas
  • Background fills the entire viewBox (no transparent backgrounds)
  • Content-Type: image/svg+xml served by the web server
Not Allowed
  • JavaScript or event handlers (onclick, onload, etc.)
  • External references, <image> tags, or linked resources
  • Animations (<animate>, CSS animations, SMIL)
  • Embedded fonts or @font-face declarations
  • Non-square aspect ratio or missing viewBox
  • HTTP URLs (insecure hosting)
Use the BIMI Group's free SVG validator or tools like Inkscape (export as Plain SVG and remove unsupported features) to prepare a compliant logo.

Verified Mark Certificate (VMC) Providers

VMCs are required by Gmail and Apple Mail to display the verified sender checkmark. They are currently issued by two accredited Certificate Authorities:

DigiCert

One of the two accredited VMC issuers. DigiCert is a well-established CA offering VMC certificates for BIMI, including logo validation and trademark verification.

Typical cost: ~$1,000–$1,500 / year
Entrust

The other accredited VMC CA. Entrust provides VMC issuance as part of its identity and certificate portfolio, with logo validation and an audit process.

Typical cost: ~$1,000–$1,500 / year
VMC prerequisites: Your logo must be a registered trademark in the relevant jurisdiction(s). The CA will verify trademark ownership as part of the issuance process. Allow 2–4 weeks for validation and issuance. The VMC embeds your SVG logo and must be renewed annually.

The Email Authentication Stack

BIMI is the final, visible layer of the email authentication stack. It only activates once SPF, DKIM, and DMARC are all correctly in place.

ProtocolWhat it authenticatesDNS RecordOur Tool
SPFThe sending server's IP address is authorized to send for the domainTXT at root domain SPF Lookup & Generator
DKIMThe message was cryptographically signed by an authorized sender and not alteredTXT at {selector}._domainkey.{domain} DKIM Checker
DMARCSPF/DKIM alignment with the visible From: header — sets enforcement policy and reportingTXT at _dmarc.{domain} DMARC Lookup & Generator
BIMIDisplays the domain's brand logo in supporting email clients once SPF, DKIM, and DMARC all passTXT at default._bimi.{domain}This tool
MXWhere inbound email for the domain should be deliveredMX at root domain MX Lookup

Related Email Authentication Tools

SPF Lookup & Generator DKIM Checker DMARC Lookup Blacklist Checker

Related Articles

In-depth guides and technical articles.

View all →
Internet Jun 29, 2026
A BIMI Logo Doesn't Stop Phishing — What BIMI's Security Model Actually Protects Against
BIMI's logo signals trademark ownership and DMARC enforcement — not email quality or sender reputation. It protects against spoofing the exact registered domain, not against lookalike domains (examp1e.com). Here's BIMI's four-layer authentication stack context, what VMC vs CMC actually certifies (trademark ownership, not email quality), why DMARC p=reject is the real security benefit in the BIMI requirement chain, and why major brands remain the primary BIMI adopters.
Internet Jun 23, 2026
Why BIMI Rejects Your SVG Logo — SVG Tiny 1.2 Requirements Explained
BIMI doesn't accept standard SVG files — it requires SVG Tiny 1.2, a restricted profile that prohibits CSS style blocks, external references, filters, and often gradients and text elements. Most SVG files exported from Figma, Illustrator, or Sketch will fail BIMI validation. Here's the exact SVG structure required, why the circular crop means corner-content gets clipped, and the validator errors you're most likely to encounter.
Internet Jun 13, 2026
BIMI Display Adoption: Why Your Perfectly-Configured Logo Might Still Not Show Up
A perfectly-configured BIMI setup — valid SPF/DKIM/DMARC, correctly-formatted SVG, even a VMC certificate — can still show no logo in most inboxes, because each mailbox provider independently decides whether and when to display BIMI logos. Here's the provider-by-provider adoption patchwork, why SVG Tiny PS (BIMI's restricted SVG profile) commonly rejects design-tool exports, and why "specification-compliant" and "logo actually displays" are genuinely different claims.
Internet Jun 12, 2026
BIMI Certificates Explained: VMC, CMC, and the Trademark Verification Chain
A BIMI logo in an inbox is the endpoint of a verification chain that can include a Verified Mark Certificate — a specific X.509 certificate type tied to trademark registration, issued by a small number of specialised Certificate Authorities. Here's what's actually in a VMC, the CMC alternative, BIMI's restricted SVG logo format, and how it all depends on DMARC enforcement underneath.
Internet Jun 9, 2026
Email Deliverability Beyond Authentication: Reputation, Engagement, and IP Warming
SPF, DKIM, and DMARC prove you're legitimate — but engagement rates, complaint rates, list hygiene, and domain age determine whether you land in inbox or spam. Here's the deliverability signals major providers actually use, IP warming schedules, and the 2024 Google/Yahoo requirements in practice.