Show your verified brand logo in supported inboxes using BIMI and Verified Mark Certificates. Build trust, improve open rates, and strengthen your email authentication strategy.
A straightforward process to verify your brand identity in customer inboxes.
Step 1
Set up SPF, DKIM, and DMARC with proper policy alignment.
Step 2
Create SVG Tiny P/S logo and verify trademark eligibility.
Step 3
Obtain verified mark certificate from an authorized issuer.
Step 4
Add BIMI TXT records and validate mailbox provider display.
Get Implementation HelpEnhance your email security and brand trust
Verified logo in inbox builds confidence and reduces phishing susceptibility.
Brand recognition and visual trust indicators improve email engagement metrics.
VMC proves ownership and prevents imposters from spoofing your identity.
Gmail / Google
Full BIMI support
Yahoo Mail
Full BIMI support
Microsoft Outlook
Rolling deployment
Apple Mail
Partial support
See the difference between BIMI alone and BIMI with VMC verification
| Feature | BIMI Only | BIMI + VMC |
|---|---|---|
| Logo Display | Limited support | Full support |
| Brand Verification | Verified badge | |
| Gmail Visibility | Partial | Full |
| DMARC Required | ||
| Implementation Cost | Free/Low | VMC certificate fee |
| Anti-spoofing Protection | Moderate | Maximum |
Step-by-step instructions to set up BIMI and VMC for your domain. Follow each section carefully to ensure proper configuration and maximum mailbox provider support.
BIMI display requires three email authentication mechanisms properly configured in your domain's DNS. Mailbox providers verify these before showing your logo.
SPF Record
Identifies authorized mail servers for your domain
v=spf1 include:... ~all
DKIM Signature
Cryptographically signs email messages
v=DKIM1; k=rsa; p=...
DMARC Policy
Enforces authentication alignment
v=DMARC1; p=quarantine
⚠️ Critical Requirement: DMARC policy must be set to p=quarantine or p=reject. A policy of p=none will not enable BIMI display in any mailbox provider.
SPF Alignment
Domain in SPF record Return-Path header must align with sending domain
DKIM Alignment
DKIM signature domain (d= tag) must align with From: header domain
DMARC Enforcement
Ensure at least 50% of email traffic passes DMARC authentication before enforcement
✓ Pre-BIMI Checklist:
Your logo must meet strict SVG format requirements and specifications. Non-compliant logos will be rejected by mailbox providers or fail to render properly.
SVG Format Requirements
Design Best Practices
SVG Technical Details
<svg viewBox="0 0 1000 1000" xmlns="http://www.w3.org/2000/svg">
✓ Use viewBox instead of fixed width/height
✓ Avoid style attributes; use presentation attributes only
✓ Validate using BIMI Group SVG checker (bimi.org)
⚠️ Common Mistakes: Using generic SVG tools that output standard SVG instead of SVG Tiny P/S. Request "SVG Tiny 1.2 P/S profile" from your designer explicitly. Many vector design tools default to standard SVG format which will fail BIMI validation.
✓ Logo Validation Checklist:
A VMC proves your brand ownership and enables full BIMI support in major mailbox providers. This requires trademark verification with an approved Certificate Authority.
Verify Trademark Registration
Search trademark databases to confirm you own an active, registered trademark matching your domain and brand.
Gather Required Documentation
Prepare documents for VMC issuer verification. CAs typically require:
Select Approved VMC Issuer
Only authorized Certificate Authorities can issue VMCs. Approved CAs include:
Entrust
Industry-leading VMC issuer
DigiCert
Global certificate authority
Sectigo
Comprehensive PKI provider
GoDaddy
Domain and certificate services
Apply & Verification Process
Submit your application to the CA. Expect 5-15 business days for verification including:
Receive & Install VMC
Once approved, the CA issues your VMC certificate. You'll receive a .pem file to host on your web server for BIMI DNS record reference.
VMC Benefits
VMC Timeline
ℹ️ Optional But Recommended: You can implement BIMI with just SPF/DKIM/DMARC, but support will be limited. VMC is required for reliable logo display across major providers. Cost is typically $50-200/year, a small investment for brand visibility.
Publish your BIMI record in the DNS zone for your domain. Mailbox providers query this record to retrieve your logo and VMC certificate.
default._bimi.yourdomain.com IN TXT "v=BIMI1; l=https://yourdomain.com/logo.svg; a=https://yourdomain.com/vmc.pem;"
Record Components Explained:
Standard BIMI record name (always "default._bimi")
Protocol version (always BIMI1)
Location of your SVG logo (HTTPS required, must be public)
URL to VMC certificate (optional if no VMC yet)
With VMC
default._bimi.example.com. IN TXT "v=BIMI1; l=https://example.com/brand-logo.svg; a=https://example.com/vmc.pem;"
Full BIMI with logo + verified certificate
Without VMC
default._bimi.example.com. IN TXT "v=BIMI1; l=https://example.com/brand-logo.svg;"
BIMI authentication-only (limited provider support)
Alternative Format
default._bimi.example.com TXT v=BIMI1 l=https://example.com/logo.svg
Some DNS providers use space-separated format
File Hosting Requirements
⚠️ Before Publishing: Verify URLs work by opening them directly in your browser. Test that files download correctly and display properly. Some DNS providers have TXT record length limits (255 chars/string)—your entire BIMI record must fit within DNS limits.
✓ DNS Configuration Checklist:
After publishing your BIMI DNS record, validate configuration and wait for mailbox provider adoption. Proper validation catches issues before they affect email display.
Validation Steps
Command Line Validation
# Check BIMI DNS record:
nslookup -type=TXT default._bimi.yourdomain.com
# Or using dig:
dig default._bimi.yourdomain.com TXT
# Expected output:
"v=BIMI1; l=https://... a=https://..."
DNS Propagation Timeline
Recommended Validators
Ongoing Monitoring
✓ Validation Checklist:
After configuration, systematically test BIMI across providers, identify issues, and optimize for best results.
Phase 1: Immediate Testing (Days 1-3)
Phase 2: Provider-Specific Testing (Days 3-14)
Common Issues & Solutions
Logo Not Displaying in Gmail
SVG File Rejected or Blank
VMC Not Recognized
Logo Looks Distorted or Low Quality
Optimization Tips
✓ Testing & Optimization Checklist:
Get answers to common questions about BIMI and VMC implementation
BIMI is the standard for displaying logos in email. VMC (Verified Mark Certificate) is the trusted credential that authorizes and verifies logo display. You can use BIMI without VMC, but full provider support requires VMC.
Yes. DMARC policy must be set to p=quarantine or p=reject for mailbox providers to display your logo. Basic DMARC monitoring (p=none) is not sufficient for BIMI display.
VMC issuance typically takes 5-15 business days, depending on the issuing CA and verification of your trademark registration.
Common reasons include SVG format issues, logo size/dimensions, DMARC alignment problems, or provider-specific delays. We provide testing and troubleshooting support.
Yes. Each domain publishes its own BIMI DNS records. You may need separate VMCs per domain depending on your trademark registrations.
Enhance your email security and brand trust today. Get expert implementation support and maximize your BIMI ROI.
No credit card required. Setup takes less than 5 minutes.