BIMI checker

Checks your BIMI record, validates the logo against SVG Tiny PS and shows whether Gmail, Apple Mail and Yahoo would display it.

Example: paypal.com, checked cached 10 min

BIMI ready

VMCDMARC p=reject

Gmail, Apple Mail and Yahoo can show paypal.com's logo. 5 checks: 5 pass, 0 warn, 0 fail.

v=BIMI1; l=https://www.paypalobjects.com/marketing/web/logos/paypal_ppe.svg; a=https://www.paypalobjects.com/marketing/web/logos/PPE_UK_DE_paypal_inc.pem;

5 checks5 pass0 warn0 fail

Record

Found

default._bimi.paypal.com

Logo

SVG Tiny PS

1 KB, square

Certificate

VMC

Until 2027-07-12

DMARC

p=reject

Enforced

Inbox preview

Your logo cropped to a circle, the way inboxes show it.

PayPal10:42

Your order has shipped - It's on its way and should arrive by Thursday.

GmailShows the logo. With your VMC.

Apple MailShows the logo. With your VMC.

YahooShows the logo. Record, logo and DMARC in place.

5 passed

Nothing to do here. Open it to see the evidence for each one.

One recordSyntaxDMARCSVG Tiny PSVMC

ShowHide

One BIMI record

Found at default._bimi.paypal.com.

default._bimi.paypal.com

Valid syntax

v=BIMI1 comes first and every URL is https://.

DMARC enforced

p=reject applies in full, so clients may show the logo.

DMARC checker

Logo is SVG Tiny PS

Square, with a title ("PayPal"), and nothing the profile forbids.

1 KB

VMC in date

Issued by C=US O=DigiCert\, Inc. CN=DigiCert Verified Mark RSA4096 SHA256 2021 CA1 to jurisdictionC=US jurisdictionST=Delaware businessCategory=Private Organization serialNumber=3014267 C=US ST=California L=San Jose street=2211 N 1st St O=PayPal\, Inc. CN=PayPal\, Inc. 1.3.6.1.4.1.53087.1.13=Registered Mark 1.3.6.1.4.1.53087.1.3=BX 1.3.6.1.4.1.53087.1.4=1510250, in date and issued for BIMI. Gmail and Apple Mail verify its chain to a mark authority, which this check doesn't.

until 2027-07-12

Build a BIMI record

Runs in your browser. Nothing is published until you paste it.

Logo URL (l=)An SVG Tiny PS file served over HTTPS.Certificate URL (a=), optionalThe PEM your VMC or CMC issuer gives you.

Your record add the TXT record on default._bimi

Type

TXT

Host

default._bimi

Value

v=BIMI1; l=https://www.paypalobjects.com/marketing/web/logos/paypal_ppe.svg; a=https://www.paypalobjects.com/marketing/web/logos/PPE_UK_DE_paypal_inc.pem

TTL

3600

Then: Publish it, then run the check again to see the logo.

DMARC checker

Then

Domain health check

Email me this report

Every check, where the logo shows today, the record to publish and a saved link that stays live for 90 days.

Full report as HTMLRecords, copy-paste readySaved link for 90 days

Ken sets up the domains it sends from.

SPF, DKIM and DMARC from day one, so a logo is one record away.

Start free - 1,000 credits, no card

What the BIMI checker does

BIMI lets mailbox providers show your logo next to your messages. It's a TXT record at default._bimi.yourdomain.com with v=BIMI1, an l= tag pointing to an SVG logo and an a= tag pointing to a mark certificate.

The checker reads the record, fetches the logo over HTTPS, validates it against the SVG Tiny Portable/Secure profile, looks for a VMC or CMC certificate, and confirms your DMARC policy is strict enough for BIMI to apply.

The requirements that usually fail

DMARC at enforcement. p=quarantine or p=reject, applied in full rather than in a test or partial mode, and a subdomain policy that isn't none. With p=none, no provider shows the logo.
The SVG Tiny PS profile. baseProfile tiny-ps, version 1.2, a title element, a square canvas, and no scripts, external references, embedded raster images or animation.
HTTPS for both the logo and the certificate.
A VMC or CMC certificate for Gmail. Yahoo can show logos without one for senders it trusts, and other providers set their own rules.

VMC or CMC

A Verified Mark Certificate needs a registered trademark for the logo, and Gmail shows a blue checkmark next to it. A Common Mark Certificate needs no trademark, only proof the logo has been in public use on your site for at least a year. Gmail has shown CMC logos since 2024, without the checkmark.

Both are paid, issued by a small set of certificate authorities, and renewed every year.

Should you set up BIMI for cold email?

On your main brand domain, BIMI is a nice extra once DMARC is at reject. On cold email sending domains it's rarely worth it. Each domain needs its own record and certificate setup, and BIMI only changes how a message looks once it's in the inbox. It adds no authentication of its own.

The prerequisite is the useful part. A domain that qualifies for BIMI has an enforced DMARC policy, and that's worth having on every domain you send from.

Questions

Does BIMI improve deliverability?

Not directly. BIMI displays a logo and requires DMARC at quarantine or reject first. The enforced DMARC policy is what protects your domain. The logo won't move a message out of spam.

Do I need a VMC for BIMI?

For Gmail you need a VMC or a CMC. Yahoo can show logos from a BIMI record without a certificate for senders with good reputation, and other providers set their own rules. Without a certificate, Gmail users won't see the logo.

Why is my BIMI logo not showing in Gmail?

The usual causes are DMARC at p=none or in test mode, an SVG that isn't Tiny PS, a missing VMC or CMC, or a certificate whose embedded logo doesn't match the SVG. The checker tests the first three. It doesn't compare the logo inside the certificate with your SVG, so if those pass, ask your certificate issuer to confirm the match.

How do I convert my logo to SVG Tiny PS?

Start from a vector SVG, not a traced PNG. Set baseProfile to tiny-ps and version to 1.2, add a title element with your brand name, make the canvas square, and remove scripts, external references, embedded images and animation. Keep the file small. The BIMI Group recommends under 32 KB.

What is the default._bimi record?

default is the BIMI selector most senders use, and receivers look it up unless a message names another one in a BIMI-Selector header. The record at default._bimi.yourdomain.com holds v=BIMI1, l= with the logo URL and a= with the certificate URL.