Low SeverityDMARC

Fix: BIMI Record Not Configured

Your domain doesn't publish a BIMI record. BIMI (Brand Indicators for Message Identification) lets you display your logo next to authenticated emails in supporting inboxes, improving brand visibility and trust signals.

Quick Fix

Publish a BIMI TXT record at default._bimi.yourdomain.com pointing to a public SVG logo. For Gmail and Apple Mail, you also need a Verified Mark Certificate (VMC).

What This Error Means

BIMI is a standard that lets supporting mail clients display a brand logo next to messages that pass DMARC with a quarantine or reject policy. The logo is referenced via a DNS TXT record, hosted as an SVG over HTTPS. Gmail, Apple Mail, Yahoo, Fastmail, and others all support BIMI.

Why It Matters

BIMI requires DMARC enforcement (p=quarantine or p=reject) and SPF/DKIM authentication. So getting BIMI right means your email security is already strong. The visual benefit (logo in inbox) drives open rates and reduces phishing — recipients can immediately distinguish your real mail from spoofs. For consumer-facing brands, it's a meaningful trust signal.

Step-by-Step Fix

Confirm DMARC is at p=quarantine or p=reject

BIMI requires enforcement. Make sure your DMARC TXT record at _dmarc.yourdomain.com has p=quarantine or p=reject and pct=100. p=none does not qualify.

Prepare an SVG Tiny PS logo

BIMI requires SVG Tiny Portable/Secure (SVG TinyPS) format. Export your logo to SVG, then convert/strip per the BIMI Group spec. Square aspect ratio. Hosted on HTTPS with a valid certificate.

Optionally obtain a Verified Mark Certificate (VMC)

For Gmail and Apple Mail to display your logo, you need a VMC issued by a CA (DigiCert or Entrust currently). The VMC verifies you legally own the trademark on the logo. Cost ~$1,500/year.

Publish the BIMI TXT record

Add a TXT record pointing to your SVG logo (and VMC, if you have one).

Example

default._bimi.yourdomain.com  IN  TXT  "v=BIMI1; l=https://yourdomain.com/bimi/logo.svg; a=https://yourdomain.com/bimi/vmc.pem"

Verify with a BIMI test

BIMI Group provides a public testing tool. Confirm DNS resolution, SVG validity, and (if applicable) VMC verification all pass.

Common Gotchas

Without a VMC, Yahoo and some clients still display the logo, but Gmail and Apple Mail will not. The VMC is the practical requirement for major reach.
Standard SVG won't work — it must be the Tiny PS profile. Use a converter or follow the BIMI Group toolkit; raw export from Illustrator/Figma usually fails.
BIMI honors DMARC strictly. If your DMARC alignment fails for any reason, the logo doesn't display. Run aggregate report monitoring before going live.
The selector "default" is the most commonly supported. You can have multiple selectors, but for a single brand logo across all your mail, "default" is what you want.

Verify Your Fix

After making changes, use our free scanner to verify the fix is working correctly. DNS changes can take up to 48 hours to propagate, but most propagate within minutes.

Frequently Asked Questions

Do I need a Verified Mark Certificate for BIMI?

For Gmail and Apple Mail to display your logo, yes. Yahoo and some others display it without VMC. If your audience is primarily Gmail/Apple, the ~$1,500/year VMC is worth it.

What DMARC policy do I need for BIMI?

p=quarantine or p=reject, with pct=100. p=none and pct values below 100 do not qualify.

Can I use any SVG file for BIMI?

No. BIMI requires the SVG Tiny Portable/Secure (SVG TinyPS) profile, which restricts certain features for security and consistency. Use the BIMI Group's SVG validation tool or a known-good converter.

Keep Exploring

More DMARC resources — tools to verify, setup guides, deeper reading, and compliance context.