If you only remember one thing: BIMI is a reward for already having your email authentication in order, not a shortcut to better delivery. It has a hard prerequisite — DMARC at enforcement — and for the version most people actually want (a logo and checkmark in Gmail) a paid certificate that verifies you own the logo. It won’t rescue mail that lands in spam; fix authentication and reputation first, then add BIMI as the finishing touch.
What BIMI actually does
BIMI is a standard that lets you publish your logo in DNS so that participating mailbox providers — Gmail, Apple Mail, Yahoo, Fastmail and others — can display it beside your messages instead of a generic monogram or coloured circle. In Gmail, when backed by a verified certificate, it also produces a blue checkmark next to the sender name indicating the brand is verified. The effect is recognition and trust in a crowded inbox: your mail visibly looks like it’s from you. What it is not is an inbox-placement lever — a message that fails filtering still goes to spam, logo or no logo. See how to add a BIMI logo to email for the full step-by-step setup.
The prerequisites
BIMI has four requirements, and you must satisfy them in order:
- DMARC at enforcement. Your domain’s DMARC policy must be
p=quarantineorp=reject—p=nonedoes not qualify (and Gmail specifically wants enforcement with full coverage, not a reducedpct). This is the single biggest gate; if you’re not there yet, follow how to move DMARC to reject safely first. - An SVG Tiny P/S logo. The logo must be in the specific SVG Tiny Portable/Secure profile — a locked-down subset of SVG with no scripts or external references — square, centred, with a solid background. A normal SVG export won’t validate; it has to be the P/S profile.
- The BIMI DNS record. A TXT record at
default._bimi.yourdomain.compointing to the logo (and, for Gmail, the certificate). - A VMC or CMC certificate. A Verified Mark Certificate (for a trademarked logo) or Common Mark Certificate (for logos in use but not registered as trademarks), issued by an authorised certificate authority after they verify you own the mark. Gmail requires this; some other providers will show a logo from the record alone.
The DNS record
The BIMI record ties the pieces together with two tags — l= for the logo location and a= for the certificate:
default._bimi.example.com TXT
"v=BIMI1; l=https://example.com/bimi/logo.svg; a=https://example.com/bimi/vmc.pem"v=BIMI1— the version, always first.l=— anhttps://URL to your SVG Tiny P/S logo file.a=— anhttps://URL to your VMC/CMC certificate (a PEM file). Required for Gmail; without it Gmail shows nothing even if the logo is valid.
Both files must be served over HTTPS from a reliable host. If you only want logos in the providers that don’t demand a certificate, you can publish a record with just the logo — but be clear this excludes Gmail:
default._bimi.example.com TXT
"v=BIMI1; l=https://example.com/bimi/logo.svg;"What it realistically costs
The DNS record and the logo file are free. The expense is the certificate: a VMC is an annual certificate issued by an authorised CA (such as those listed by the BIMI Group), and it typically runs on the order of a low four-figure sum per year. Getting one also requires that your logo be a registered trademark in a recognised jurisdiction — trademark registration itself takes months and has its own cost if you don’t already hold one. A CMC relaxes the trademark requirement for logos that are demonstrably in use, and is supported by a growing but smaller set of providers. Preparing the SVG Tiny P/S file may also cost designer time if your logo doesn’t convert cleanly. Treat BIMI as an ongoing annual line item, not a one-off.
Who it’s worth it for — and who should skip it
BIMI makes sense when the recognition is worth the money:
- Worth it: established consumer brands, retailers, banks and any high-volume sender whose logo people already recognise. The inbox logo and Gmail checkmark reinforce trust, can lift open rates modestly, and — because BIMI requires DMARC enforcement — signal you’ve locked down spoofing. Brands frequently impersonated in phishing get the most defensive value.
- Skip or defer: small senders, early-stage startups, personal or internal mail, and anyone not yet at DMARC enforcement. If you don’t have a registered trademark, the VMC path alone can outweigh the benefit. The money is almost always better spent first on list hygiene, authentication and reputation.
A useful rule of thumb: BIMI is the last 5% of an email program, not the first. If mail is still landing in spam or your DMARC is at p=none, BIMI can’t help and shouldn’t be on your list yet.
Set it up and verify
When your logo, record and certificate are ready, build the record with the BIMI Record Generator and confirm the whole chain — DMARC enforcement, a valid SVG Tiny P/S file, and the certificate — resolves correctly with the BIMI Checker. The authoritative resources are the BIMI Group (which maintains the standard and lists authorised certificate authorities) and Google’s BIMI documentation for Gmail’s specific requirements and the verified checkmark.