1. Home
  2. Free tools
  3. Email deliverability tools
  4. BIMI checker

BIMI record checker: record, logo, certificate and DMARC

BIMI shows your logo beside your emails in supporting inboxes. It needs a BIMI record, a TXT record at default._bimi.yourdomain.com pointing to an SVG Tiny PS logo, DMARC at quarantine or reject, and, for Gmail and Apple, a mark certificate. This BIMI checker reads the record, tests the logo and certificate, confirms DMARC and previews the logo.

Sample result from the BIMI checker
Show the sample result as

Sample result

acme.example has a BIMI logo record, but no mark certificate yet.

BIMI record
default._bimi.acme.example
DMARC
p=quarantine
Logo
SVG over HTTPS

What this means for you

Gmail needs a mark certificate before it shows your logo; some other inboxes don't.

Next step:Validate the logo file
  • Finds the record, inherited ones included
  • Checks DMARC is at quarantine or reject
  • Validates the SVG Tiny PS logo file
  • Reads the VMC or CMC mark certificate
  • BIMI
  • DMARC
  • VMC

By SimpleVerifier Team · Last updated

How do I test my BIMI record?

  1. Enter your domain, or any email address at it.
  2. Press Check BIMI. The checker reads the BIMI and DMARC records, then fetches the logo and certificate URLs from the record.
  3. Read each check. Fails stop the logo from showing anywhere; warnings may stop it in some inboxes.
  4. Fix the failures in order: DMARC first, then the SVG, then the certificate. Run the check again after DNS changes have propagated.

Example

You enter
The domain acme.example, or any address at it.
You get
The BIMI record at default._bimi.acme.example is found, DMARC passes at p=quarantine, and the logo is an SVG over HTTPS, but there is no a= mark certificate, so the result warns that Gmail won't show the logo yet.
Limits
One domain per check and 10 checks a minute per connection. Only the default selector is read.

What is a BIMI record, and what else does BIMI need?

A BIMI record is a DNS TXT record at default._bimi.yourdomain.com that points to your logo and, optionally, your mark certificate, such as v=BIMI1; l=https://…/logo.svg; a=https://…/cert.pem. BIMI needs three more things, per the BIMI Group's sender FAQ and Google's Set up BIMI guide. DMARC at enforcement: Google says BIMI doesn't support p=none and that pct must be 100. A logo in the SVG Tiny PS profile, served over HTTPS. And, for Gmail and Apple Mail, a mark certificate at the a= URL.

Each mailbox provider sets its own rules on top. The BIMI Group notes that Yahoo may show a logo without a certificate for bulk senders that meet its other requirements, while Gmail and Apple require one. Passing every check makes the logo eligible; whether it appears is still the provider's decision.

How do I check a BIMI SVG logo?

Test the file against the SVG Tiny PS profile, which the checker does for the logo your record points to. A normal SVG from a design tool fails BIMI. Google requires baseProfile="tiny-ps" and version="1.2" on the root element, a <title>, absolute dimensions of at least 96 pixels, and no scripts, external references, animation or x=/y= on the root element. The BIMI Group adds a square viewBox and no embedded raster images, and Google recommends a file of 32 KB or less. The checker tests each of these and shows the logo cropped to a circle the way many inboxes display it.

It doesn't render-test every SVG feature against the full Tiny PS specification. If every check passes and a provider still rejects the logo, test the file with the BIMI Group's own tools at bimigroup.org, which check the complete profile.

Do I need a VMC or CMC certificate for BIMI?

For Gmail and Apple Mail, yes: one or the other. A Verified Mark Certificate (VMC) proves you own a registered trademark for the logo. A Common Mark Certificate (CMC) covers a logo without a registered trademark, based on evidence that you've used it. Google accepts both, recommends a VMC where possible, and shows a checkmark only beside VMC senders. Both are issued by a certificate authority, embed the logo itself, and last at most 398 days, so renewal is a yearly job. The checker reads the certificate, confirms it's issued for BIMI and in date, and names its type where the certificate states it.

BIMI rewards good sending more than it creates it. A domain with DMARC at enforcement and a clean reputation gets the logo; a domain with high bounce or complaint rates may not, whatever its records say. Our BIMI setup guide walks through the whole process, and the DMARC checker shows where your policy stands now.

VMC, CMC or no certificate: what does each get you?

VMCCMCNo certificate
Based onA registered trademarkEvidence of prior use of the logoNothing
GmailLogo and checkmarkLogo, no checkmarkNo logo
YahooEligible for a logoEligible for a logoMay show a logo for qualifying bulk senders
ValidityAt most 398 daysAt most 398 daysNone needed

Who uses this tool, and for what?

Marketers
Confirm the logo will be eligible before the brand team pays for a VMC, and check each year that the certificate hasn't lapsed.
Agencies
Audit a client's BIMI setup and hand back the failures in the order to fix them: DMARC with the DMARC generator, then the SVG, then the certificate.
IT admins
Check the record and DMARC policy after moving a domain to quarantine or reject, and confirm subdomains aren't left at sp=none.
SaaS teams
Make product and billing email recognisable in Gmail and Apple Mail, where a logo beside the sender helps customers tell real receipts from phishing.

What can’t this tool tell you?

  • It checks the published setup. Whether a provider actually shows the logo also depends on your reputation, which no DNS check can see.
  • The SVG checks cover the common Tiny PS failures, not every rule in the full profile.
  • It reads the certificate's type, dates and BIMI usage, but doesn't validate its chain against a trusted authority or compare its embedded logo with your SVG.
  • Only the default selector is checked. A record under a custom selector won't be found.

Common questions

How do I check my BIMI record?
Enter your domain above. The checker looks up the TXT record at default._bimi.yourdomain.com, fetches the logo and certificate it names, checks DMARC, and reports each requirement as pass, warning or fail.
How do I add a BIMI record?
In your DNS, add a TXT record with the host default._bimi and a value such as v=BIMI1; l=https://yourdomain.com/logo.svg; a=https://yourdomain.com/cert.pem. The l= tag is the logo URL and a= the certificate URL; a= is optional in the record, but Gmail and Apple Mail need it.
Do I need a VMC for BIMI?
For Gmail and Apple Mail, you need a mark certificate: Gmail accepts a VMC or a CMC, and shows a checkmark only for a VMC. Yahoo may show a logo without one for bulk senders that meet its other requirements.
Why isn't my BIMI logo showing in Gmail?
Usually DMARC (p=none or pct below 100), a logo that isn't SVG Tiny PS, or no VMC or CMC. If all of those pass, Gmail may still hold back the logo for a domain with poor sending reputation, and new setups can take time to appear.
My BIMI record is published but the logo isn't appearing. What's wrong?
A published record is only one of the requirements. Run the check above: the usual blockers are DMARC at p=none, an SVG that isn't Tiny PS, or a missing certificate. If everything passes, the provider is choosing not to show it yet, often because of the domain's reputation.
What is SVG Tiny PS?
A restricted profile of SVG for BIMI logos. The root element declares baseProfile="tiny-ps" and version="1.2", the file has a title, and it can't contain scripts, external references, embedded images or animation. Most design tools need a converter or manual edits to produce it.
Does BIMI improve deliverability?
Not directly. It needs DMARC at enforcement, which does protect your domain from spoofing, and the logo can make your emails easier to recognise. Providers use reputation to decide whether to show it, so it follows good deliverability rather than causing it.

Sources

Authentication and capacity are half of deliverability.

The other half is who you send to. Every hard bounce counts against the domain and inboxes you are sending from, and nothing in DNS can tell you which addresses on your list are dead.

  • Bulk verification with real SMTP mailbox checks
  • Hard bounces removed before a send, not discovered after
  • Catch-all, disposable and role detection on every row

One plan, cancel anytime, no contract. Sign in with Google and your first 100 email checks are free, no card. The free tools stay free either way.

Clean your next list before it bounces

100 free email checks when you sign in with Google, no card. Then one flat monthly price, or a one-time pack.

7-day money-back guarantee Cancel anytime Secure payment by Stripe