# BIMI Record Generator: Build a BIMI Record

URL: https://email-validation.org/tools/bimi-generator/
Updated: 2026-11-06

> Documentation index: https://email-validation.org/llms.txt

Enter the addresses of your logo and your mark certificate to get the BIMI record to publish. The generator checks the
record's form as you type; once it is published, our [BIMI checker](https://email-validation.org/tools/bimi-checker/) also fetches the logo and
the certificate and checks your DMARC policy.

## Before you publish

A BIMI record does nothing on its own. Mail clients show the logo only when:

- your mail passes DMARC and your policy is `p=quarantine` or `p=reject` at 100% (check with the
  [DMARC checker](https://email-validation.org/tools/dmarc-checker/));
- the logo is an SVG Tiny PS file served over HTTPS;
- for Gmail, the record also names a Verified Mark Certificate (VMC) or a Common Mark Certificate (CMC) that covers
  the same logo; Apple Mail needs a VMC, while Yahoo may show a logo without one.

## Prepare the logo

Start from a square version of your logo on a solid background. Most design tools export SVG 1.1, which is not
enough: convert it to the SVG Tiny Portable/Secure profile
([draft-svg-tiny-ps-abrotman](https://datatracker.ietf.org/doc/draft-svg-tiny-ps-abrotman/)). The file must have
`version="1.2"` and `baseProfile="tiny-ps"` on the root element, a `<title>` with your brand name, a square `viewBox`
and no `x` or `y` on the root, and must not contain scripts, embedded images, links, animation or references to other
files. Keep it under 32 KB. The [BIMI Group](https://bimigroup.org/) publishes conversion guides and a list of
certificate authorities.

## Get a certificate

- **VMC** (Verified Mark Certificate): for a logo that is a registered trademark. Issued by an authorised certificate
  authority after it verifies your organization and the trademark.
- **CMC** (Common Mark Certificate): for a logo you have used publicly for at least a year without a registered
  trademark; accepted by Gmail.

The authority gives you a PEM file. Host it over HTTPS, on your own domain or wherever the authority suggests, and put
its address in `a=`.

## Publish it

1. In your DNS host, add a **TXT** record with the host `default._bimi` and the record as its value.
2. Keep one BIMI record on that name.
3. Run the [BIMI checker](https://email-validation.org/tools/bimi-checker/): it confirms the DMARC policy, fetches and checks the logo, and
   confirms that the certificate address returns a certificate.

The selector `default` is what receivers look up unless a message names another one in a `BIMI-Selector` header,
which few senders need.

Checking email addresses rather than domains? Try our [free email checker](https://email-validation.org/email-checker/) or see [pricing](https://email-validation.org/pricing/) for lists and the API.

## Frequently asked questions

### Where do I publish the BIMI record?

As a TXT record at default._bimi under your domain, for example default._bimi.example.com. In most DNS panels you enter default._bimi as the host.

### Can I publish BIMI without a certificate?

Yes: leave a= empty. Some providers may then show the logo, but Gmail requires a Verified Mark Certificate or a Common Mark Certificate.

### What format must the logo be?

An SVG file in the SVG Tiny Portable/Secure profile: version 1.2, baseProfile tiny-ps, a title, a square viewBox, no scripts or external references, served over HTTPS and under 32 KB.