What Is BIMI? How to Display Your Brand Logo in Email (2026)
BIMI lets you display your brand logo next to your emails in supported inboxes. This guide explains how BIMI works, what you need to set it up, and why it matters for brand trust and email deliverability.
What Is BIMI?
BIMI stands for Brand Indicators for Message Identification. It is an email specification that allows organizations to display their official brand logo next to authenticated emails in supporting inbox providers. Think of it as the verified checkmark of email — a visual indicator that the message genuinely comes from the brand it claims to represent.
BIMI was developed by the AuthIndicators Working Group, which includes major email providers like Google, Yahoo, and Fastmail. The standard builds on top of existing email authentication protocols — specifically DMARC, DKIM, and SPF — to add a visual trust layer to the inbox experience.
How Does BIMI Work?
BIMI works through a combination of a DNS record, an SVG logo file, and optionally a Verified Mark Certificate (VMC). Here is the step-by-step flow:
- The sender publishes a BIMI DNS record. This is a TXT record at
default._bimi.yourdomain.comthat points to an SVG logo file and optionally a VMC certificate. - The email passes DMARC authentication. BIMI only works when the sending domain has a DMARC policy of
p=quarantineorp=reject. Ap=nonepolicy is not sufficient. - The receiving mail server fetches the BIMI record. After the email passes DMARC, the receiving server looks up the BIMI TXT record for the sender's domain.
- The logo is displayed in the inbox. If everything checks out — valid BIMI record, proper SVG format, and (for Gmail) a valid VMC — the brand logo appears next to the email in the recipient's inbox.
A typical BIMI DNS record looks like this:
v=BIMI1; l=https://example.com/logo.svg; a=https://example.com/cert.pemThe l= tag points to your SVG logo, and the a= tag points to your VMC certificate (required by Gmail, optional for others).
BIMI Requirements: What You Need
Before you can implement BIMI, your domain must meet several prerequisites:
- DMARC with enforcement. Your domain must have a DMARC record with a policy of
p=quarantineorp=reject. This is the most critical requirement. - SPF and DKIM configured. Both SPF and DKIM must be properly set up and passing for your domain.
- SVG Tiny PS logo. Your logo must be in SVG Tiny Portable/Secure (SVG Tiny PS) format — a restricted SVG profile that does not allow scripts, animations, or external references. The file must be square and served over HTTPS.
- Verified Mark Certificate (VMC). Gmail requires a VMC issued by a certificate authority like DigiCert or Entrust. The VMC verifies that you own the trademark associated with the logo. VMCs typically cost between $1,000 and $1,500 per year.
- Registered trademark. To obtain a VMC, your logo must be a registered trademark with an approved intellectual property office.
Which Email Clients Support BIMI?
BIMI adoption has grown significantly since its introduction. Here are the major email clients that currently support BIMI:
- Gmail — Full BIMI support since 2021. Requires a VMC certificate. Displays the logo as the sender avatar in both web and mobile.
- Apple Mail — Supports BIMI on iOS 16+ and macOS Ventura+. Apple uses its own verification process alongside BIMI and does not strictly require a VMC.
- Yahoo Mail — One of the earliest BIMI adopters. Displays brand logos without requiring a VMC, though a VMC is recommended.
- Fastmail — Supports BIMI and was an early participant in the AuthIndicators Working Group.
- Microsoft Outlook — As of 2025, Microsoft has begun rolling out BIMI support in Outlook and Microsoft 365. Adoption is ongoing.
How to Set Up BIMI Step by Step
- Ensure DMARC enforcement. Verify that your DMARC policy is set to
p=quarantineorp=reject. Use our DMARC Checker to verify. - Prepare your SVG logo. Convert your brand logo to SVG Tiny PS format. The image must be exactly square, with no animations or external references. Tools like the BIMI SVG Converter can help with this.
- Host the SVG on HTTPS. Upload the logo to a publicly accessible HTTPS URL on your domain or CDN.
- Obtain a VMC (if targeting Gmail). Apply for a Verified Mark Certificate from DigiCert or Entrust. You will need proof of trademark registration.
- Publish the BIMI DNS record. Add a TXT record at
default._bimi.yourdomain.comwith the value:v=BIMI1; l=https://yourdomain.com/logo.svg; a=https://yourdomain.com/cert.pem - Verify your setup. Use our BIMI Checker to confirm your record is published correctly and your logo is accessible.
How to Check Your BIMI Record
You can verify your BIMI configuration using our free BIMI Checker tool. It will look up the BIMI TXT record for your domain, validate the SVG logo URL, check for a VMC certificate, and verify that your DMARC policy meets the minimum requirement. If any issues are found, the tool will provide specific recommendations.
Benefits of BIMI for Brand Trust
Implementing BIMI provides several tangible benefits beyond just displaying a logo:
- Increased brand recognition. Your logo appears prominently in the inbox, making your emails instantly recognizable among dozens of other messages.
- Higher open rates. Studies show that branded emails with logos see 10-40% higher open rates compared to emails without brand indicators.
- Reduced phishing risk. Because BIMI requires DMARC enforcement, implementing it also strengthens your domain against spoofing and impersonation attacks.
- Improved deliverability. Domains with strong authentication (SPF + DKIM + DMARC + BIMI) signal trustworthiness to inbox providers, which can improve inbox placement rates.
- Competitive advantage. BIMI adoption is still relatively low. Early adopters stand out in crowded inboxes and build stronger brand associations with their audience.
Verify Your Email Authentication
BIMI is the final layer of a complete email authentication stack. Use our free tools to verify each component:
- BIMI Checker — Verify your BIMI record, logo URL, and VMC certificate.
- DMARC Checker — Check your DMARC policy and reporting configuration.
- DKIM Checker — Verify your DKIM signatures and DNS records.