Free BIMI Record Checker
BIMIChecker
Enter any domain to check its BIMI record. We validate your logo format, inspect your VMC certificate, check DMARC prerequisites, and show you how your brand will appear in supported inboxes.
What Your Results Mean
Understanding Your BIMI Check
Here's what each result means and what to do next.
BIMI Pass BIMI Warning BIMI Fail
BIMI Pass
Your BIMI record is valid and your logo is ready to display.
A passing result means your BIMI record is published correctly, your logo meets the SVG Tiny PS format requirements, and your DMARC policy is set to quarantine or reject. Supported inbox providers can now display your brand logo next to authenticated messages. If you also have a VMC, Gmail will display your logo as well.
- Valid BIMI record found
- Logo is in SVG Tiny PS format
- DMARC enforcement prerequisite met
- Logo is publicly accessible via HTTPS
BIMI Warning
Your record works but has issues that limit where your logo appears.
A warning means your BIMI record exists and is technically valid, but there are issues limiting where your logo appears or how reliably it displays. The most common warning is a missing VMC, which means Gmail will not show your logo even though Yahoo and Apple Mail will. Other warnings include SVG format issues or a DMARC policy that meets the minimum but could be stronger.
- Missing VMC certificate (Gmail won't show logo)
- SVG format issues detected
- DMARC policy is only p=quarantine
- Logo file not optimally sized or centered
BIMI Fail
Your BIMI configuration has issues that prevent your logo from displaying.
A failing result means no inbox provider will display your brand logo. The most common causes are a missing BIMI record, a DMARC policy that is not set to quarantine or reject, or a logo URL that is broken or not publicly accessible. BIMI requires all its prerequisites to be in place before it works, so start by confirming your DMARC enforcement and then set up the BIMI record.
- No BIMI record found
- DMARC policy is p=none or missing
- Logo URL is broken or inaccessible
- SVG file is not in Tiny PS format
Common BIMI Problems and How to Fix Them
These are the BIMI problems we see most often. If your check flagged any of these, here's what they mean and how to fix them.
No BIMI Record Found
No logo can be displayed.
Without a BIMI record in DNS, inbox providers have no way to find your brand logo. BIMI requires a TXT record published at default._bimi.yourdomain.com that contains a URL pointing to your SVG logo file. Until that record exists, no provider will display your logo regardless of how well your email authentication is configured.
- No TXT record at default._bimi.yourdomain.com
- Inbox providers have no logo to display
- Fix: publish a BIMI TXT record with your logo URL
DMARC Not Enforcing
BIMI's most common blocker.
BIMI is built on top of DMARC enforcement. If your DMARC policy is set to p=none (or missing entirely), no inbox provider will display your logo. This is the single most common reason BIMI fails. You need to progress your DMARC policy to at least p=quarantine before BIMI will work. Use your DMARC reports to identify all senders and align them before tightening the policy.
- BIMI requires DMARC at p=quarantine or p=reject
- p=none does not satisfy the BIMI prerequisite
- Fix: progress your DMARC policy to at least quarantine
Wrong SVG Format
Standard SVG won't work.
BIMI requires logos in SVG Tiny PS (Portable/Secure) format, which is a restricted subset of SVG designed for security. Standard SVG files exported from tools like Illustrator or Figma will not work. The image must be square, use a solid background, contain no scripts or external references, and be hosted on an HTTPS URL. Many BIMI failures come down to a logo file that looks fine in a browser but doesn't meet the Tiny PS specification.
- Standard SVG files are rejected by inbox providers
- Logo must be SVG Tiny PS with no scripts or external refs
- Fix: convert your logo to SVG Tiny PS format
Missing VMC Certificate
Gmail won't display your logo without one.
A Verified Mark Certificate (VMC) is a digital certificate that proves you own the trademarked logo in your BIMI record. Gmail requires a VMC before it will display your brand logo. Yahoo Mail, Apple Mail, and Fastmail do not require a VMC. If you don't have a registered trademark, you cannot obtain a VMC. In that case, your logo will still appear in non-Gmail clients that support BIMI.
- Gmail requires a VMC to display your logo
- VMCs are issued by DigiCert or Entrust for trademarked logos
- Fix: obtain a VMC or accept that Gmail won't show your logo
Why BIMI Matters for Your Business
BIMI is where email security meets brand visibility. It turns your DMARC enforcement into a visual trust signal that recipients see in every inbox.
Your Emails Look Generic in the Inbox
Without BIMI, your emails show a generic initial or placeholder icon next to the sender name. In a crowded inbox, that makes your messages easy to overlook. BIMI lets you replace that placeholder with your actual brand logo, so recipients recognize your emails instantly.
Recipients Can't Tell Real Emails from Fakes
Phishing emails that impersonate your brand look identical to your real messages in the inbox. BIMI provides a visual trust signal by displaying a verified brand logo that attackers cannot replicate. When your logo appears, recipients know the message is genuinely from you.
You're Missing a Competitive Advantage
Brands that adopt BIMI early stand out visually in every inbox that supports it. As more providers adopt the standard, having your logo displayed becomes a baseline expectation. Getting BIMI configured now means you're already ahead when Outlook and other providers add support.
Your DMARC Investment Goes Unnoticed
You put in the work to reach DMARC enforcement, but recipients don't see that effort. BIMI is the visible payoff for your email authentication investment. It turns an invisible security layer into a brand asset that recipients see with every message.
Complete Protocol Coverage
Check Your Full Email Authentication with iO™ DMARC
SPF is one piece of the puzzle. Use these tools to check the rest of your email authentication stack.
SPF Checker
Validate your SPF record and confirm which servers are authorized to send on your behalf. SPF is one of the authentication layers BIMI depends on.
DKIM Checker
Verify your DKIM signature to make sure outgoing emails are cryptographically signed. DKIM alignment is required for the DMARC policy that BIMI needs.
DMARC Checker
Check your DMARC policy and alignment. BIMI requires a DMARC policy of quarantine or reject, this tool confirms you meet that threshold.
MTA-STS Checker
Check whether your domain enforces encrypted email delivery. MTA-STS ensures your authenticated, BIMI-branded messages are protected in transit.
TLS-RPT Checker
Verify your TLS reporting setup. TLS-RPT alerts you when sending servers fail to establish secure connections with your domain, so you catch delivery issues early.
Email Authentication Audit
Get a complete picture of your SPF, DKIM, DMARC, BIMI, and MTA-STS configuration in one report. See what’s working, what’s broken, and what to fix first.
Learn More
Learn About BIMI
Want to go deeper? These guides explain how BIMI works, what the prerequisites are, and how to get your brand logo displaying in supported inboxes.
What Is BIMI and How to Set It Up
A complete guide to BIMI: what it is, how it works, the prerequisites you need, and step-by-step instructions for publishing your BIMI record and getting your logo into inboxes.