Where do I publish the BIMI record?

As a TXT record at default._bimi under your domain, for example default._bimi.example.com. In most DNS panels you enter default._bimi as the host.

Can I publish BIMI without a certificate?

Yes: leave a= empty. Some providers may then show the logo, but Gmail requires a Verified Mark Certificate or a Common Mark Certificate.

What format must the logo be?

An SVG file in the SVG Tiny Portable/Secure profile: version 1.2, baseProfile tiny-ps, a title, a square viewBox, no scripts or external references, served over HTTPS and under 32 KB.

BIMI record generator

TXT at default._bimi.your domain

v=BIMI1; l=https://example.com/bimi/logo.svg

Enter the addresses of your logo and your mark certificate to get the BIMI record to publish. The generator checks the record's form as you type; once it is published, our BIMI checker also fetches the logo and the certificate and checks your DMARC policy.

Before you publish

A BIMI record does nothing on its own. Mail clients show the logo only when:

your mail passes DMARC and your policy is p=quarantine or p=reject at 100% (check with the DMARC checker);
the logo is an SVG Tiny PS file served over HTTPS;
for Gmail, the record also names a Verified Mark Certificate (VMC) or a Common Mark Certificate (CMC) that covers the same logo; Apple Mail needs a VMC, while Yahoo may show a logo without one.

Prepare the logo

Start from a square version of your logo on a solid background. Most design tools export SVG 1.1, which is not enough: convert it to the SVG Tiny Portable/Secure profile (draft-svg-tiny-ps-abrotman). The file must have version="1.2" and baseProfile="tiny-ps" on the root element, a <title> with your brand name, a square viewBox and no x or y on the root, and must not contain scripts, embedded images, links, animation or references to other files. Keep it under 32 KB. The BIMI Group publishes conversion guides and a list of certificate authorities.

Get a certificate

VMC (Verified Mark Certificate): for a logo that is a registered trademark. Issued by an authorised certificate authority after it verifies your organization and the trademark.
CMC (Common Mark Certificate): for a logo you have used publicly for at least a year without a registered trademark; accepted by Gmail.

The authority gives you a PEM file. Host it over HTTPS, on your own domain or wherever the authority suggests, and put its address in a=.

Publish it

In your DNS host, add a TXT record with the host default._bimi and the record as its value.
Keep one BIMI record on that name.
Run the BIMI checker: it confirms the DMARC policy, fetches and checks the logo, and confirms that the certificate address returns a certificate.

The selector default is what receivers look up unless a message names another one in a BIMI-Selector header, which few senders need.

Checking email addresses rather than domains? Try our free email checker or see pricing for lists and the API.