Skip to content
MtrXTools

BIMI checker

Check a domain's BIMI record, the logo against the SVG Tiny PS profile, the Verified or Common Mark Certificate (domain, expiry, chain, embedded logo) and the DMARC enforcement BIMI needs, with an inbox preview.

What BIMI does

BIMI (Brand Indicators for Message Identification) lets a domain publish its logo so mailbox providers can show it next to messages that pass DMARC. It is a DNS TXT record at default._bimi.<domain> pointing at an SVG logo and, for most large providers, a mark certificate that proves the brand owns the logo.

Because the logo is only shown on authenticated mail, BIMI is the visible reward for enforcing DMARC: spoofed mail can't carry your logo.

What the checker tests

  • The record: exactly one, starting v=BIMI1, with an https l= logo URL and, optionally, an a= certificate URL. A subdomain without its own record uses the organisational domain's.
  • DMARC: p=quarantine or p=reject applying to all mail (no pct below 100), including the subdomain policy when the record is inherited.
  • The logo: served over HTTPS, at most 32 KB, and following SVG Tiny PS (version="1.2", baseProfile="tiny-ps", a <title>, no x/y on the root, no scripts, links, animation, external references or embedded images), ideally square.
  • The certificate: a Verified or Common Mark Certificate with the BIMI extended key usage, issued for the domain, unexpired, served with its issuing CAs in order, and embedding exactly the logo at l=.

Root trust and revocation of the mark certificate aren't checked; the chain is checked as served.

Getting the logo to pass

  • Export from your design tool as SVG 1.1 or Tiny, then edit the root element: set version="1.2" and baseProfile="tiny-ps", remove any x and y attributes, and keep a square viewBox.
  • Add <title>Your Company</title> straight after the opening <svg> tag.
  • Remove scripts, links and raster images, replace <style> blocks with attributes such as fill="#cc0000", and flatten text to paths.
  • Use a solid background: inboxes crop the logo to a circle or rounded square, often on a dark theme.
  • If you have a mark certificate, publish the exact SVG it was issued with; any edit breaks the match.

Questions

Do I need a Verified Mark Certificate?
For Gmail and Apple Mail, yes: they only show logos backed by a mark certificate. Yahoo Mail can show a self-asserted logo (no a= tag) for senders with enough volume and a good reputation.
What is the difference between a VMC and a CMC?
A Verified Mark Certificate needs the logo to be a registered trademark. A Common Mark Certificate is for logos without a registration that you can show you have used publicly, typically for at least a year. Gmail accepts both, but only a VMC earns the blue verified checkmark.
Everything passes. Why don't I see my logo?
Providers cache BIMI lookups, apply their own reputation and volume thresholds, and only show the logo on mail that passes DMARC with your domain aligned. Give it a few days after publishing, and send from the domain that holds the record.
Can I use a different logo for some mail?
Yes: publish another record under a different selector, such as brand2._bimi.example.com, and add a BIMI-Selector: v=BIMI1; s=brand2; header to that mail. Enter the selector above to check it.

Related tools