BIMI (Brand Indicators for Message Identification) is an email specification that allows organizations to display their brand logo next to authenticated emails in supporting email clients. It builds on DMARC and requires a published BIMI DNS TXT record with an SVG logo URL.

What are the BIMI requirements?

You need: (1) a DMARC policy with p=quarantine or p=reject, (2) a BIMI DNS TXT record with v=BIMI1, (3) an SVG Tiny 1.2 logo hosted over HTTPS, and (4) optionally a VMC certificate evidence file for full logo display support.

Does BIMI work without DMARC enforcement?

No. BIMI requires DMARC at p=quarantine or p=reject. p=none (monitoring-only) does not qualify for BIMI logo display in any supporting email client.

What SVG format does BIMI require?

BIMI requires SVG Tiny 1.2 (SVG Tiny Portable/Secure). The file must be under 32KB, have no external references, no scripts, and no animation. PNG, JPEG, or other formats are not accepted.

Is a VMC certificate required for BIMI?

Technically no — the BIMI spec does not mandate VMC. However, Gmail and other major providers require a valid VMC (Verified Mark Certificate) as evidence before displaying logos. Without it, your logo may not appear.

Is this BIMI validator free?

Yes, this tool is 100% free with no signup required. For automated BIMI monitoring, DMARC policy tracking, and VMC expiry alerts, upgrade to CyberFurl Pro.

What is a BIMI record?

Brand Indicators for Message Identification (BIMI) is a DNS record that allows you to display a verified brand logo next to your emails in supported inboxes, improving trust and brand visibility.

BIMI Validator & Brand Logo Checker

Cryptographically analyze your Brand Indicators for Message Identification (BIMI) deployment. Perform strict validation of SVG Tiny P/S payloads, Verified Mark Certificates (VMC), and verify DMARC enforcement prerequisites against RFC 8984 standards.

No signup

Instant results

100% free

What Is BIMI (Brand Indicators for Message Identification)?

BIMI (RFC 8984) is an emerging email specification that standardizes the display of corporate logos within supporting mail user agents (MUAs). It leverages existing email authentication frameworks—specifically requiring DMARC at enforcement (p=quarantine or p=reject)—to cryptographically tie brand identity to authenticated messages. By asserting a specialized TXT record at the `default._bimi` selector namespace, domains publish an assertion URL pointing to an SVG Tiny Portable/Secure (SVG P/S) formatted image.

Why BIMI Cryptographic Validation Matters

BIMI is not just visual branding—it is an assertion of robust email security architecture. Implementing BIMI requires a highly orchestrated interplay of DMARC enforcement, SPF/DKIM alignment, and strict SVG formatting verified through a Certificate Authority. Improper configuration or invalid VMCs can lead to rendering failures, squandering the trust and visibility benefits of authenticated brand indicators.

Critical BIMI Deployment Failures

Failing to enforce DMARC (p=none or pct<100), using standard SVG instead of SVG Tiny P/S profile, or missing a Verified Mark Certificate (VMC) in the a= tag are the most critical BIMI deployment failures.

BIMI_RECORD_FOUND

VMC_CERT_VALID

DMARC_ENFORCED

SVG_PS_SECURE

BIMI_VALIDATOR_V1

LOGO_DISPLAY_READY

How It Works

DNS Query

Queries DNS for the designated BIMI selector (default._bimi) and retrieves the v=BIMI1 TXT record.

Record Syntax Validation

Verifies the structural integrity and syntax of the v=BIMI1 TXT record against RFC 8984 guidelines.

DMARC Enforcement Check

Analyzes the DMARC policy of the organizational domain to confirm p=quarantine or p=reject enforcement.

VMC Chain Inspection

Retrieves the Verified Mark Certificate (VMC) and validates its cryptographic chain of trust and SAN extensions.

Strict RFC 8984 Compliance Check

Syntactically analyzes the BIMI TXT record, evaluating selector namespaces, `v=BIMI1` tags, and mandatory assertion formatting against RFC 8984 guidelines.

SVG Tiny P/S Schema Validation

Deep inspection of the asserted SVG payload, guaranteeing adherence to the SVG Tiny Portable/Secure profile to prevent XSS payloads or rendering anomalies in MUAs.

VMC Certificate Chain Inspection

Retrieves and validates the Authenticated Received Chain and Verified Mark Certificate (VMC) associated with the `a=` tag, confirming CA trust anchors and SAN alignment.

DMARC Enforcement Verification

Automatically queries the organizational domain's DMARC policy to confirm strict alignment and a minimum policy of p=quarantine at 100% pct.

Record Syntax & Namespacing

Validates the `default._bimi.<domain>` subdomain and parses the TXT record for deprecated or unsupported key-value attributes.

Header & Auth Alignment

Checks alignment preconditions across SPF and DKIM, ensuring the structural integrity necessary for BIMI logo assertion by mailbox providers.

Frequently Asked Questions

Why does my BIMI record require DMARC enforcement?

BIMI serves as a reward for robust email security. Mailbox providers mandate a DMARC policy of p=quarantine (at 100%) or p=reject to ensure that only cryptographically verified senders can utilize the brand's visual identity, preventing spoofing.

What is the SVG Tiny P/S profile requirement?

The SVG Tiny Portable/Secure profile (SVG P/S) restricts active content such as JavaScript or external references. This prevents malicious payloads from executing within the mail client when the BIMI logo is rendered.

What is a Verified Mark Certificate (VMC) and is it mandatory?

A VMC is a digital certificate issued by a CA that proves trademark ownership of the logo. While some mail providers (like Yahoo) may accept BIMI without a VMC, major providers (like Gmail) strictly require the a= tag in your BIMI record to point to a valid VMC.

How do I configure the BIMI selector in DNS?

BIMI relies on a TXT record placed at a specific subdomain selector, typically default._bimi.yourdomain.com. The record must start with v=BIMI1;, followed by the l= (logo) and a= (authority/VMC) tags.

Can I use standard PNG or JPEG files for my BIMI logo?

No, BIMI explicitly mandates the use of vector graphics formatted strictly to the SVG Tiny P/S specification. Raster images like PNG, JPEG, or standard SVGs containing forbidden XML elements will be rejected by mailbox receivers.

Why is my BIMI logo not displaying despite a valid record?

Logo rendering depends on the receiver's MUA support, domain reputation, strict DMARC compliance, and valid VMC presence. Even with perfect DNS syntax, low sender reputation or an invalid VMC chain will result in the logo being suppressed.

What happens if the BIMI logo URI is inaccessible?

Mail Transfer Agents (MTAs) and Mail User Agents (MUAs) will fallback to standard behavior—typically rendering a default avatar (like the sender's initials). The overall deliverability of the email remains unaffected by an unreachable BIMI logo.

Guru Guides

BIMI Explained

Display your verified brand logo in Gmail, Apple Mail, and Yahoo. Full requirements and failure guide.

DMARC Enforcement

BIMI requires strict DMARC p=quarantine or p=reject. Learn the safe rollout path.

Typosquatting

BIMI helps users identify your authentic emails, protecting against lookalike domains.

Related Security Tools

DMARC Checker

Verify DMARC policies

Audit Your BIMI Infrastructure Now

Ensure your domain meets strict DMARC, SVG Tiny P/S, and VMC prerequisites. Verify your BIMI records for flawless brand representation across global mailbox providers.

Start Free Trial View Pricing