Domain Audit HQ
← Back to Free Tools
GMAIL & APPLE MAIL VERIFIED LOGOS • FREE AUDITOR

BIMI Checker & VMC Validator: Instant SVG Preview

Validate your Brand Indicators for Message Identification (BIMI) DNS record, inspect SVG Tiny-PS compliance, and preview your brand logo across mobile and web inboxes.

Step 1: Inspect an Existing BIMI DNS Record

Query live DNS records at default._bimi.yourdomain.com to verify syntax and logo linkage.

Step 2: BIMI Record Builder & Inbox Avatar Preview

Must be served over HTTPS and adhere strictly to the SVG Tiny Portable/Secure (Tiny-PS) profile.
Required by Gmail and Apple Mail for blue verified checkmarks. Issued by DigiCert or Entrust.
SVG Tiny-PS Compliance Checklist:
  • Square 1:1 aspect ratio with centered graphic
  • Must not contain raster images (PNG/JPEG), scripts, or external links
  • File size must be strictly under 32KB
  • Requires baseProfile="tiny-ps" and version="1.2" in <svg> root
Gmail & Apple Mail Visual Inbox Simulator
BIMI Avatar Preview
Your Brand Name
Monthly Security & Audit Digest
Your verified organization domain report is ready for download...
10:48 AM
✓ Live SVG rendering inside standard inbox circular frame
DNS TXT HOST / NAME: default._bimi
v=BIMI1; l=https://example.com/logo.svg; a=;

How BIMI Works & DNS Mechanics

BIMI bridges email authentication with visual brand trust. When an incoming email passes SPF, DKIM, and DMARC alignment, the receiving mailbox provider issues a DNS query to default._bimi.yourdomain.com to fetch the brand logo and VMC proof.

The Prerequisites Pyramid

  • SPF: Passing SPF with domain alignment (aspf=r or aspf=s).
  • DKIM: 1024 or 2048-bit cryptographic key signing the email header.
  • DMARC: Strict policy of p=quarantine (pct=100) or p=reject with rua= configured.
  • Trademark: Registered trademark with an approved intellectual property office (USPTO, EUIPO, etc.).

BIMI Tag Specifications

  • v=BIMI1: Required version prefix declaration.
  • l=https://.../logo.svg: Public HTTPS URI hosting the SVG Tiny-PS compliant logo asset.
  • a=https://.../cert.pem: Public HTTPS URI serving the Verified Mark Certificate (VMC) PEM chain.

Step-by-Step Deployment Guide: Publishing BIMI Records

Deploying BIMI requires publishing a TXT record under the default._bimi selector in your authoritative DNS zone:

Cloudflare

Go to DNS > Records → Click Add Record → Select TXT → Set Name to default._bimi → Paste v=BIMI1; l=https://...; a=https://...; into Content → Set TTL to Auto → Save.

AWS Route 53

In Hosted Zones → Click Create record → In Record name, type default._bimi → Record type: TXT → In Value, enter "v=BIMI1; l=https://...; a=...;" (with quotes) → TTL: 3600 → Save.

GoDaddy / Namecheap

Navigate to DNS Management → Add record → Type: TXT → Host: default._bimi → TXT Value: Paste your generated BIMI string → Save.

Common BIMI Errors & Troubleshooting

1. SVG Not Tiny-PS Compliant

Cause: Standard web SVGs export with <style> blocks, raster image chunks, or unnecessary XML namespaces that mailbox spam filters reject.

Fix: Re-export your vector artwork using an SVG Tiny 1.2 converter, ensure baseProfile="tiny-ps" is present in the SVG header, remove external CSS, and keep file size under 32KB.

2. Missing or Untrusted VMC Certificate

Cause: Gmail and Apple Mail refuse to display logos unless an active Verified Mark Certificate issued by DigiCert or Entrust is referenced in the a= tag.

Fix: Obtain a VMC certificate from an authorized CA, upload the combined PEM chain to your HTTPS web server, and link it in the a= attribute.

3. DMARC Policy Not Enforced (p=none)

Cause: BIMI will completely ignore your record if your domain's DMARC policy is set to p=none or has a percentage rollout below 100% (pct<100).

Fix: Upgrade your DMARC record to p=quarantine; pct=100 or p=reject using our DMARC Generator.

Frequently Asked Questions About BIMI Records & VMC

Detailed guidance on brand avatar display, intellectual property certification, and inbox support.

What is a BIMI record and why is it important for brand trust?+
Brand Indicators for Message Identification (BIMI) is an email specification that allows organizations that have strictly enforced DMARC (p=quarantine or p=reject) to display their official trademarked logo directly next to incoming emails inside Gmail, Apple Mail, and Yahoo Mail. It increases open rates by up to 39% and shields subscribers from phishing.
What is a Verified Mark Certificate (VMC) and do I need one?+
A Verified Mark Certificate (VMC) is a digital certificate issued by an authorized Certificate Authority (DigiCert or Entrust) verifying that your organization owns the registered trademark for your logo. Google (Gmail) and Apple Mail require an active VMC in the "a=" tag of your BIMI record to display your logo and grant verified sender checkmarks.
What is the SVG Tiny Portable/Secure (Tiny-PS) format requirement?+
BIMI mandates that your logo be published in the SVG Tiny Portable/Secure (Tiny-PS) profile (RFC draft). The SVG must be square (1:1 aspect ratio), have a file size strictly under 32KB, contain baseProfile="tiny-ps", and contain zero external links, scripts, or embedded bitmap images (JPEG/PNG).
Where do I publish my BIMI TXT record in DNS?+
Your BIMI record must be published as a DNS TXT record at the subdomain selector default._bimi (e.g. default._bimi.yourdomain.com). The value follows the format: v=BIMI1; l=https://yourdomain.com/logo.svg; a=https://yourdomain.com/cert.pem;.
Why is my BIMI logo not showing up in Gmail despite publishing the record?+
The three most common reasons are: 1) DMARC is not enforced at p=quarantine (pct=100) or p=reject; 2) The logo SVG does not pass strict Tiny-PS validation; 3) The domain lacks a valid VMC certificate, or the mailbox provider reputation algorithms have not yet established high sender trust for your IP/domain.

Complementary Domain & Email Authentication Tools

Strengthen your client email infrastructure and DNS security perimeter with our free web tools.

🛡️

SPF Record Generator

Generate RFC 7208 compliant SPF TXT records with instant syntax validation.

Open Tool →
🧮

SPF Lookup Calculator & Flattener

Audit the 10-lookup limit and recursively inspect nested include: mechanisms.

Open Tool →
✉️

DMARC Policy Generator

Build custom p=reject or p=quarantine policies with aggregate reporting.

Open Tool →
🔑

DKIM Record Builder

Format cryptographic public key TXT records and selectors for email signing.

Open Tool →