BIMI record checker

v=BIMI1; l=https://example.com/logo.svg

Enter a domain to check everything a mail client needs before it shows your logo: an enforced DMARC policy, the BIMI record, the logo file in the SVG Tiny PS format and a mark certificate. The checker fetches the logo and the certificate from the addresses in the record and explains each problem with its fix.

What BIMI does

BIMI (Brand Indicators for Message Identification) lets a domain publish a logo that supporting mailbox providers show next to its authenticated messages. It is defined in an Internet-Draft, draft-brand-indicators-for-message-identification, and by the BIMI Group. The record is a TXT record at default._bimi.<domain>:

v=BIMI1; l=https://example.com/bimi/logo.svg; a=https://example.com/bimi/vmc.pem

l= is the logo, a= the mark certificate. A record with both empty declines BIMI.

The requirements, in order

1. DMARC at enforcement. Mail must pass DMARC, and the domain's policy must be p=quarantine or p=reject applied to all mail (no pct below 100), with subdomains not set to sp=none. For a subdomain, the organizational domain's policy must be enforced too. Check it with our DMARC checker.
2. A BIMI record at default._bimi.<domain> that starts with v=BIMI1. A subdomain without one uses the organizational domain's record (default._bimi.example.com for news.example.com), and so does this checker.
3. A logo in SVG Tiny PS (the SVG Tiny Portable/Secure profile), served over HTTPS: version="1.2" and baseProfile="tiny-ps" on the root, a <title>, a square viewBox, no scripts, images, links, animation or external references, and at most 32 KB.
4. A mark certificate at a=: a Verified Mark Certificate (VMC), which needs a registered trademark, or a Common Mark Certificate (CMC). Gmail shows BIMI logos only with one of the two (Google's BIMI help); other providers have their own rules.

The problems this checker finds

• DMARC missing, at p=none or sp=none, or applied to less than 100% of mail, on the domain or its organizational domain: no logo will show.
• No BIMI record, more than one, or v=BIMI1 not first.
• l= or a= not an HTTPS address, or a logo that does not end in .svg.
• A logo that fails SVG Tiny PS: wrong root attributes, a missing or long <title>, a non-square viewBox, forbidden elements or external references, or more than 32 KB. We also note logos without a solid square background, which mail clients crop to a circle or a rounded square.
• A certificate address that does not answer or does not return a PEM certificate. The checker confirms that a certificate is there; its issuer, the logo it covers and its validity are checked by each mailbox provider.

Logos also depend on the receiver's own reputation checks, so a correct setup is required but does not guarantee a logo everywhere. Build the record with our BIMI generator.

Checking email addresses rather than domains? Try our free email checker or see pricing for lists and the API.