BIMI Record Checker

What the BIMI checker looks at

BIMI (Brand Indicators for Message Identification) lets supporting mailbox providers show your logo next to authenticated mail. The checker reads the TXT record at default._bimi.<domain> and checks everything a receiver needs before it will show the logo:

• Record: one record starting with v=BIMI1, with l= (logo URL) and optionally a= (certificate URL).
• DMARC at enforcement: the domain's DMARC policy must be p=quarantine or p=reject with pct=100, and sp must not be none.
• Logo URL: it must be HTTPS and answer 200 with image/svg+xml, and the file must start with an <svg> element using baseProfile="tiny-ps" and no scripts. The checker reads only the first 4 KB and never renders the file.
• Certificate URL: an HTTPS URL that serves a PEM certificate (a Verified Mark Certificate or Common Mark Certificate).

How to read the result

Each URL is listed with its HTTP status, content type and size. Problems stop the logo from showing. A missing certificate is only a warning, because some providers show self-asserted logos, but Gmail and Apple Mail require a VMC or CMC.

Common problems

• DMARC still at p=none: this is the most common blocker. Move to quarantine or reject first.
• Wrong SVG profile: logos exported from design tools are ordinary SVG. Convert them to SVG Tiny P/S, with a square aspect ratio, a solid background and no external references.
• Logo served as text/xml or behind a redirect to a login page: host it as a static file with the correct content type.

Check your policy with the DMARC Record Checker.