BIMI checker
Check the BIMI logo record, the DMARC policy it needs and the verified mark certificate. Reads public DNS only, and does not download the logo.
Related guides
DMARC p=none vs reject
DMARC quarantine vs p=none and reject, in plain EnglishWhat each DMARC policy does to fake email, and a safe path from p=none to p=reject.
Guide
SPF, DKIM and DMARC explained: the complete guide for MSPsHow the three email authentication records fit together, with real examples, alignment explained and a rollout plan that does not break mail.
DMARC aggregate report explained
DMARC aggregate (rua) reports explained, with a worked exampleA worked example of one report, what each field means, and how to use the reports to move a domain safely to p=reject.
How BIMI checking works
The checker reads the record at default._bimi and the DMARC policy at _dmarc. It does not fetch the logo file, so check that it is an SVG Tiny PS image before you publish.
Frequently asked questions
What is BIMI?
BIMI (Brand Indicators for Message Identification) lets a mail provider show your logo next to your messages, from a record at default._bimi. It is a display feature and does not change whether mail is delivered.
Why does BIMI need DMARC?
Providers only show a logo for a domain whose mail is protected. A DMARC policy of quarantine or reject shows that the domain controls how its mail is checked.
What is a VMC?
A verified mark certificate ties your logo to a trademark. Some providers, including Gmail, require one before they show the logo. Certificate authorities issue them for a fee.