QWhat file format does a BIMI logo need to be?
BIMI requires a specific SVG Tiny Portable/Secure (PS) profile — a standard SVG file won't validate, so it must be converted or created to spec before publishing.
Free BIMI Record Checker & Logo Validator
Inspect published BIMI DNS records, validate SVG logo formatting, and verify VMC certificate compliance for Gmail and Yahoo inboxes.
Free, no sign-upLive results, nothing stored
Operational Workflow — Free BIMI Record Checker & Logo Validator
4-Stage Diagnostic ExecutionEnter your domain name (e.g. yourbrand.com or cnn.com) into the BIMI checker.
Click 'RUN AUDIT' to execute real-time DoH DNS query on 'default._bimi.[domain]'.
Review the SVG logo URL and verify HTTPS accessibility.
Check Verified Mark Certificate (VMC) status and DMARC enforcement prerequisites.
Email Authentication Architecture & RFC Verification Standards
Enterprise email delivery relies on a four-tier cryptographic and policy stack. This tool executes statelessly against public authoritative nameservers to audit each protocol layer in real time.
1RFC 7208 — SPF Envelope Validation
Validates the Return-Path against designated sending MTA IP ranges. Strictly calculates recursive lookup depth against the 10-DNS-query boundary to prevent delivery-breaking permerror statuses.
2RFC 6376 — DKIM Public Key Cryptography
Retrieves public RSA (2048-bit minimum) or Ed25519 public keys at selector DNS records, ensuring cryptographic non-repudiation and transit tamper detection for canonicalized body hashes.
3RFC 7489 — DMARC Policy Alignment
Enforces strict alignment between the visible From domain and SPF/DKIM authenticated identifiers. Dictates receiver disposition across none, quarantine, and reject policies.
4RFC 8461 & BIMI — Transport Encryption & Identity
Enforces TLS in transit via MTA-STS policy files and renders verified trademarked SVG Tiny PS brand logos under VMC certificates in Gmail, Yahoo, and Apple Mail inboxes.
Free BIMI Record Checker & Logo Validator — Key Questions & Technical Answers
Direct, peer-reviewed engineering answers to core deployment, troubleshooting, and compliance questions.
QDoes BIMI work in Gmail without a VMC?
No — Gmail specifically requires a Verified Mark Certificate for logo display, while some other providers have experimented with showing logos without one; a BIMI checker confirms which requirements your setup meets.
QWhat's a typical BIMI DNS record structure?
It's a TXT record at a "default._bimi" subdomain containing a "v=BIMI1" tag along with the logo URL (l=) and optional VMC certificate URL (a=).
QWhy isn't my logo appearing even though my BIMI record looks correct?
Mailbox providers can take days to weeks to start displaying logos after a valid record is published, and some apply additional sender reputation checks before showing it.
Technical & Diagnostic Reference (27 questions)
Reference Archive•Is there a cheaper alternative to a full VMC?
Some providers now offer a Common Mark Certificate (CMC) for uncertified logos at a lower cost, though support is currently more limited than full VMCs.
•Can small businesses realistically implement BIMI?
Yes, technically the DNS/logo setup is accessible to any business; the main barrier is typically the cost and process of obtaining a VMC through an authorized certificate authority.
•What is BIMI and why should my brand set it up?
BIMI (Brand Indicator for Message Identification) displays your verified logo next to your emails in supported inboxes, increasing recognition, open rates, and trust.
•What do I need before I can set up BIMI?
You need an enforced DMARC policy (quarantine or reject), an SVG Tiny PS logo file, and in most cases a Verified Mark Certificate (VMC) from an authorized certificate authority.
•Why isn't my logo showing up in Gmail or Yahoo Mail?
This usually means your BIMI DNS record is missing or malformed, your DMARC policy isn't strict enough, or you're missing the required VMC — a BIMI checker will pinpoint which.
•Does BIMI improve email deliverability?
BIMI itself doesn't directly boost deliverability, but its DMARC prerequisite does, and the visible logo increases trust and engagement once emails reach the inbox.
•Is BIMI free to implement?
The DNS record setup is free, but a Verified Mark Certificate (required by most major mailbox providers) typically involves a paid annual fee through an approved CA.
•Do Yahoo and Outlook support BIMI the same way as Gmail?
Support and requirements vary by provider — Yahoo has supported BIMI for longer with different certificate requirements, while Outlook/Microsoft support has historically been more limited, so check current provider-specific requirements before assuming universal display.
•How do I check my BIMI record using command line tools?
Use 'dig TXT default._bimi.yourdomain.com' to view the raw record, though a dedicated BIMI checker also validates the SVG logo format and VMC certificate link.
•Is there a tool to validate my logo file meets the BIMI SVG Tiny PS spec?
Yes, dedicated BIMI logo validators check that your SVG file conforms to the required Tiny Portable/Secure profile before you publish it, since a non-compliant file will fail even with a correct DNS record.
•Who are the current authorized providers for BIMI Verified Mark Certificates?
A small number of certificate authorities are authorized to issue VMCs; pricing and requirements change over time, so verify current authorized providers directly before purchasing.
•Can agencies check BIMI setup for multiple client domains in bulk?
Yes, some BIMI checker tools support bulk domain input, useful for agencies rolling out brand logo display across many client accounts at once.
•How is this different from MXToolbox's BIMI lookup?
Both check for a valid BIMI record; differences typically come down to whether the tool also validates the logo file format and VMC certificate chain, not just the DNS record's existence.
•What is BIMI, explained simply?
BIMI lets your verified brand logo appear next to your emails in supported inboxes like Gmail and Yahoo, increasing recognition and trust — but it requires strict DMARC enforcement first.
•Why do e-commerce brands specifically benefit from BIMI?
Visual brand recognition in a crowded inbox can meaningfully improve open rates for promotional and transactional emails, making BIMI a worthwhile investment for consumer-facing e-commerce brands.
•Is BIMI worth the cost for financial services companies?
Yes, especially given how frequently financial brands are targeted by spoofing — a verified logo helps customers visually distinguish legitimate emails from convincing fakes.
•Should nonprofits invest in BIMI given the VMC certificate cost?
It depends on budget and email volume — larger nonprofits with significant donor email programs may find the trust and recognition benefits worth the certificate cost, while smaller organizations may prioritize DMARC enforcement first.
•Can real estate brokerages use BIMI to build trust in an industry rife with email fraud?
Yes, a recognizable verified logo can help reassure clients that time-sensitive transaction emails are genuinely from the brokerage rather than an impersonator.
•Do law firms typically adopt BIMI, or is it more common in retail/consumer brands?
BIMI adoption remains most common among high-volume consumer and retail brands, though any organization with an enforced DMARC policy and brand recognition goals can implement it.
•What is BIMI and how does a BIMI checker work?
BIMI (Brand Indicators for Message Identification) allows your authenticated brand logo to display next to your emails in Gmail, Yahoo, Apple Mail, and Fastmail inboxes. A BIMI checker queries the 'default._bimi.[domain]' DNS TXT record, validates the SVG Tiny P/S logo URL, and checks Verified Mark Certificate (VMC) status.
•What are the requirements for BIMI in Gmail and Yahoo?
To enable BIMI: 1. You must have SPF and DKIM authentication active; 2. Your DMARC policy must be enforced at 'p=quarantine' (with pct=100) or 'p=reject'; 3. Your logo must be formatted as an SVG Tiny P/S file; 4. For Gmail and Apple Mail, you need a Verified Mark Certificate (VMC) from an approved Certificate Authority.
•What is a Verified Mark Certificate (VMC) and how to check VMC validity?
A VMC (Verified Mark Certificate) proves legal trademark ownership of your logo. IncogSay's BIMI validator inspects the 'a=' tag in your BIMI DNS record to verify whether an official VMC certificate chain is published.
•How to format an SVG logo for BIMI standards?
BIMI requires SVG Tiny 1.2 Portable/Secure (P/S) format. The SVG must be square (1:1 aspect ratio), less than 32KB, have no raster scripts or external references, and use a solid background color.
•How to add a BIMI record to DNS?
In your DNS management console, create a TXT record with Name 'default._bimi.yourdomain.com' and Value 'v=BIMI1; l=https://yourdomain.com/logo.svg; a=https://yourdomain.com/certificate.pem'.
•How long does it take for BIMI to display in Gmail after DNS setup?
Once published, DNS changes propagate within 24–48 hours. Gmail and Yahoo evaluate domain sender reputation and DMARC compliance before displaying the logo in user inboxes.
•Can I test BIMI without a paid VMC certificate?
Yes. Yahoo and Fastmail support self-asserted BIMI records (without a VMC) for testing. You can use IncogSay's free BIMI validator to verify your SVG formatting and DMARC prerequisites.
•Is IncogSay's BIMI inspector and logo checker free?
Yes, IncogSay provides a 100% free online BIMI checker, BIMI generator, and VMC certificate inspector.