BIMI Record Checker

Check a domain's BIMI record and see the brand logo it publishes. Enter a domain and this tool queries default._bimi live, parses the record, shows the logo SVG and any VMC certificate it references, and previews the logo. BIMI is what makes your verified brand logo appear next to your emails in supporting inboxes — but only once DMARC is enforced, so this is the quick way to confirm the record is in place and complete.

Runs in your browser over DNS-over-HTTPS (Google / Cloudflare). The logo preview loads directly from the brand's host. Nothing is stored.

How to use the BIMI Record Checker

Enter a domain and press Check BIMI. The tool queries default._bimi.domain and reports:

  • Whether a BIMI record is published at the default selector.
  • The logo URL (the l= tag) and a small preview of the SVG.
  • Whether a VMC certificate (the a= tag) is present, which Gmail and Apple Mail require.

BIMI has a hard prerequisite: your domain must already have DMARC at enforcement (p=quarantine or p=reject). If DMARC is only at p=none, mailbox providers will not display the logo even with a perfect BIMI record, so check DMARC first.

What BIMI is

BIMI (Brand Indicators for Message Identification) is a standard that lets your brand's logo appear next to your messages in the inbox of supporting email clients. It is both a trust signal for recipients — a recognisable logo is harder to spoof than a name — and a small but real boost to brand visibility in a crowded inbox. The logo is published through a single DNS record.

The record is a TXT record at a selector name, normally:

default._bimi.example.com

It contains a few tag=value pairs:

  • v — the version, BIMI1.
  • l — the URL of the logo, which must be an HTTPS-hosted SVG in the strict SVG Tiny Portable/Secure (SVG P/S) profile. Ordinary SVGs exported from design tools usually need converting to this profile first.
  • a — the URL of a VMC (Verified Mark Certificate), an optional but often-required certificate that cryptographically proves you own the trademark on the logo.

The two things that most often block BIMI from working are not the record itself. First, DMARC must be at enforcement: BIMI only takes effect when your domain publishes a DMARC policy of quarantine or reject (with good coverage), because the whole premise is that the mail is already authenticated. Second, the major mailbox providers differ on the VMC: Gmail and Apple Mail require a valid VMC (a paid certificate from a provider like DigiCert or Entrust) before they will show the logo, while some other clients display the logo from the l= SVG alone. So a complete, widely-working BIMI setup means enforced DMARC, a correctly-formatted SVG P/S logo, and a VMC — and this checker shows you which of those pieces are in place.

Common use cases

  • Verifying a BIMI rollout — confirm the record is published at the default selector and parses correctly.
  • Checking the logo URL — see that l= points at a reachable HTTPS SVG and preview it.
  • Confirming the VMC — check whether an a= certificate is present for Gmail and Apple Mail support.
  • Debugging a missing logo — find out whether the BIMI record, or the DMARC prerequisite, is what is missing.
  • Auditing a brand's email — see whether a domain has adopted BIMI and how completely.

Why your logo is not showing yet

A valid BIMI record is necessary but not sufficient. If the logo still does not appear, check these in order:

  • DMARC is not enforced. This is the most common blocker. Move your DMARC policy from p=none to p=quarantine or p=reject (after confirming legitimate mail passes). Check it with the DMARC Record Checker.
  • No VMC. Gmail and Apple Mail require a Verified Mark Certificate. Without the a= certificate the record may validate but those clients will not render the logo.
  • The SVG is the wrong profile. The logo must be SVG Tiny P/S — square aspect ratio, no scripts, no external references. A regular SVG export will be rejected.
  • The logo URL is not HTTPS or not reachable. The l= URL must serve the SVG over HTTPS without authentication.
  • Caching. Mailbox providers cache BIMI assets; changes can take time to appear even once everything is correct.

To create the record once your assets are ready, use the BIMI Record Generator, then re-check it here.

Frequently asked questions

How do I check a BIMI record?
Enter the domain above and press Check BIMI. The tool queries default._bimi.domain, parses the record, shows the logo URL with a preview, and reports whether a VMC certificate is referenced.

Why is my brand logo not showing despite a BIMI record?
Almost always because DMARC is not at enforcement, or because Gmail and Apple Mail require a VMC certificate you have not added. BIMI only works when the domain has a DMARC policy of quarantine or reject.

Do I need a VMC certificate for BIMI?
For Gmail and Apple Mail, yes — they require a Verified Mark Certificate that proves trademark ownership. Some other clients display the logo from the SVG alone, but a VMC is needed for the widest support.

What image format does BIMI need?
The logo must be an SVG in the SVG Tiny Portable/Secure (SVG P/S) profile, hosted over HTTPS, square, with no scripts or external references. A standard SVG export usually needs converting to this profile.

Where is the BIMI record published?
In a TXT record at default._bimi.yourdomain.com (the default selector). The record holds the version, the logo URL (l=) and optionally the VMC certificate URL (a=).

Does this store the domains I check?
No. The lookup runs in your browser directly against Google or Cloudflare DNS-over-HTTPS. Nothing is sent to our server and nothing is logged.