DMARC guide
What BIMI needs before your logo shows in Gmail, Yahoo and Apple Mail, and how to publish the record.
BIMI (Brand Indicators for Message Identification) shows your logo next to your emails in supporting inboxes, including Gmail, Yahoo and Apple Mail. It’s a reward for strong email security: inboxes only show it when your domain is properly protected by DMARC.
| Requirement | Details |
|---|---|
| DMARC at enforcement | p=quarantine or p=reject, covering all your mail. p=none isn’t enough. |
| SPF and DKIM passing | Lined up with the domain in your From address. |
| Logo as SVG Tiny PS | A square logo in this special SVG format, hosted at an https address. |
| A certificate, for Gmail and Apple Mail | A Verified Mark Certificate (VMC) for a registered trademark logo. Gmail also accepts a Common Mark Certificate (CMC) for a logo you’ve used publicly for at least a year. |
| The BIMI record | A TXT record at default._bimi on your domain. |
Yahoo can show your logo without a certificate if your sending reputation is good. Gmail and Apple Mail need the certificate.
v=BIMI1; l=https://yourdomain.com/bimi/logo.svg; a=https://yourdomain.com/bimi/vmc.pem
Add it as a TXT record with the name default._bimi. l= points to your logo; a= points to your certificate file. Without a certificate, leave a= empty.
Get DMARC to quarantine or reject. This is the hard part; see how to enable your DMARC policy.
Convert your logo to SVG Tiny PS: square, simple, under about 32 KB, no scripts or external links.
Buy a VMC or CMC from a certificate authority that issues them, if you want the logo in Gmail.
Host the logo and certificate at https addresses on your site, then publish the BIMI record.
Check you're ready
BIMI starts with DMARC at quarantine or reject. Check where your policy stands.
