TL;DR: BIMI (Brand Indicators for Message Identification) is what puts your logo next to your
emails in Gmail and other inboxes. It only works if your domain already enforces DMARC
(p=quarantine or reject), so authentication comes first. Then you publish your logo as an SVG and
a BIMI DNS record. Scan your domain free to see if you're eligible.
What BIMI is (and why it's worth it)
BIMI displays your verified brand logo as the avatar on your emails. It builds trust, lifts open rates, and makes your mail stand out from spoofs. But it's also a reward for good security: inboxes only show your logo once they trust your domain — which means you must authenticate properly first.
What you need before BIMI
- SPF and DKIM passing on your mail.
- DMARC at enforcement —
p=quarantineorp=reject. A policy ofp=noneis not enough; see moving DMARC to enforcement. - Your logo as a specific SVG Tiny PS file (square, simple).
- For Gmail and some others, a VMC (Verified Mark Certificate) — a paid certificate proving you own the trademarked logo.
How to set up BIMI
- Confirm DMARC is enforcing (this is the step most domains are missing).
- Create your logo in the required SVG Tiny PS format and host it over HTTPS.
- If you want the logo in Gmail, obtain a VMC from an authorised provider.
- Publish a BIMI TXT record at
default._bimi.yourdomain.compointing to your SVG (and VMC, if you have one). - Send a test and check whether your logo appears.
How to check your eligibility
Run a free scan — Kalenfy checks whether your DMARC is enforced (the gate for BIMI) and whether a BIMI record exists. If DMARC isn't at enforcement yet, that's the first thing to fix.
FAQ
Do I need a VMC?
For Gmail and Apple Mail, yes — they require a Verified Mark Certificate. Some other inboxes show BIMI logos without one. The VMC is a paid, trademark-verified certificate.
Why isn't my logo showing even though I set up BIMI?
The most common reason is DMARC not being at quarantine or reject. Without enforcement, BIMI
is ignored.
Is BIMI worth it for a small business?
The bigger win is the DMARC enforcement BIMI forces you to do — that's the real security upgrade. The logo is a nice bonus once you're there.
Not sure if you're eligible? Scan your domain, then reply to your report — we're developers and we'll get your DMARC to enforcement and your BIMI record set up for you.