Skip to content
Glossary · Authentication

BIMI

Brand Indicators for Message Identification: a DNS record pointing to a logo that supporting inboxes display next to mail that passes DMARC at enforcement.

What it means

BIMI lets a domain publish a logo for mailbox providers to show beside its messages. The domain publishes a TXT record at default._bimi with the location of an SVG logo and, where the provider requires one, of a mark certificate proving the right to use it. The receiver shows the logo only for mail that passes DMARC under a policy of quarantine or reject.

Gmail requires a Verified Mark Certificate (VMC) or a Common Mark Certificate (CMC), and shows a checkmark only with a VMC. Some providers, such as Yahoo and Fastmail, also accept self-asserted logos without a certificate, according to the BIMI Group.

BIMI is not an RFC: the specification is an individual IETF Internet-Draft. The AuthIndicators Working Group, which runs the BIMI Group site, publishes the guidance and the Mark Certificate Guidelines around it.

Example

default._bimi.example.com.  TXT  "v=BIMI1; l=https://example.com/brand/logo.svg; a=https://example.com/brand/vmc.pem"

On this site

Sources

What this definition rests on. The wording is ours; the facts are theirs.

All 432 terms in the glossaryThe wiki: blocklists and bounce codes

Beat · paid monitoring

A heartbeat for your email.

Beat runs every check on this site on a schedule: 41 checks, 25 blacklists and real inbox placement. The moment something breaks, it tells you what broke, why it matters, and the exact fix.

example.comWatching
  • SPFpass
  • DKIMpass
  • DMARCp=none
  • Blacklists0 of 25

Illustrative. Your domain, every few hours.

Also from us:Pulse: your own sending infrastructureConsulting: $65/hr, no retainer