Email authentication
BIMI record generator
Create and validate the DNS record that displays your brand logo beside your emails in the inbox, or paste an existing BIMI record to review its settings in plain English.
What is BIMI?
BIMI (Brand Indicators for Message Identification) is a DNS record that tells supporting inboxes such as Gmail, Apple Mail, Yahoo, and Fastmail to display your brand logo next to the messages you send. Showing your verified mark in the avatar slot makes legitimate emails easier for recipients to recognize and harder for phishers to impersonate.
BIMI builds on top of your existing email authentication. Supporting mailbox providers display your logo once your messages pass DMARC with an enforcement policy of quarantine or reject. The BIMI record itself points to two hosted files: your SVG logo and an optional certificate proving you own the mark.
DMARC enforcement
Your domain needs an active DMARC policy set to quarantine or reject before mailbox providers will display a BIMI logo.
SVG logo
Host a square brand logo in the SVG Tiny Portable/Secure profile over HTTPS so supporting inboxes can fetch and render it reliably.
Verified Mark Certificate
Gmail and Apple Mail require a Verified Mark Certificate (VMC) from a recognized certificate authority to confirm you own the trademark for your logo.
Publish the generated value as a TXT record at default._bimi.yourdomain.com with your DNS provider. After DNS propagation finishes, mailbox providers cache and refresh logos on their own schedules.
Build your record
Enter the HTTPS URL for your SVG logo and your certificate if you have one, and the DNS record updates live on the right. You can also paste an existing BIMI record to populate the form and check its syntax.
Record builder
Fill in your logo and certificate. The record updates live.
Logo
lThe HTTPS link to your brand logo. It must be an SVG Tiny Portable/Secure file: a square, single-path mark on a solid background. This is the one thing BIMI can't work without.
Verified Mark Certificate
aA VMC proves you own the trademark on your logo. Gmail and Apple Mail won't show the logo without one, but you can publish the record first and add the certificate later.
DNS record
Publish this TXT record at your domain.
Add this as a new record at your DNS provider. “Type” and “Host” are the fields it asks for. Some providers want just default._bimi in the host field and add the domain for you.
Paste an existing record here and the builder updates to match.
- No a tag — Gmail and Apple Mail need a Verified Mark Certificate to display your logo.
Put it into practice.
Continue with the documentation, guides and examples for this topic.