BIMI record generator
A BIMI record generator builds the DNS TXT record that points inboxes to your brand logo. Enter your domain, the HTTPS URL of your SVG Tiny PS logo and, for Gmail, your VMC or CMC certificate. You get the host (default._bimi.yourdomain.com) and the value (v=BIMI1; l=…; a=…), plus a check that DMARC is ready.
Sample result
Your BIMI record for acme.example is ready to publish at default._bimi.
- TXT record
- default._bimi
- Logo
- https://acme.example/logo.svg
- Certificate
- vmc.pem
What this means for you
Add it as a TXT record in your DNS so inboxes that support BIMI can show your logo.
- Record value and the host name to publish at
- Flags non-HTTPS, non-SVG and non-PEM URLs
- Warns when no mark certificate is given
- Preflight reads your live DMARC policy
- BIMI
- TXT record
- DMARC
By SimpleVerifier Team · Last updated
How do I generate and publish a BIMI record?
- Enter your domain. Leave the selector as default unless you send a BIMI-Selector header.
- Paste the HTTPS URL of your SVG Tiny PS logo and, if you have one, the URL of your VMC or CMC .pem file.
- Press Generate BIMI record, then copy the host and value into a new TXT record at your DNS host.
- Run the DMARC preflight. Publish once DMARC is at quarantine or reject, then test the live record with the BIMI checker.
Example
- You enter
- The domain
acme.example, the logo URLhttps://acme.example/logo.svgand the certificate URLhttps://acme.example/vmc.pem. - You get
- A TXT record to publish at
default._bimi.acme.examplewith the valuev=BIMI1; l=https://acme.example/logo.svg; a=https://acme.example/vmc.pem, plus a preflight that reads the domain's live DMARC policy. - Limits
- The record is built in your browser. The DMARC preflight is one lookup, 10 a minute per connection; the logo and certificate aren't downloaded.
What is a BIMI record?
A BIMI record is a TXT record at default._bimi.yourdomain.com that tells receiving mail servers where your logo and mark certificate live. It has three tags: v=BIMI1, l= for the logo URL and a= for the certificate URL, as in v=BIMI1; l=https://yourbrand.com/bimi/logo.svg; a=https://yourbrand.com/bimi/vmc.pem. The format is set out in the BIMI specification draft.
The record alone shows nothing. Mailbox providers check that the message passes DMARC with an enforced policy, that the logo meets the SVG Tiny PS profile, and that a certificate vouches for it: Gmail accepts a Verified Mark Certificate (VMC) or a Common Mark Certificate (CMC), and the BIMI Group lists Apple Mail as requiring a VMC. Google sets out its rules in Set up BIMI. Our BIMI setup guide covers the whole sequence.
How do I create a BIMI record?
Host the logo and certificate, then publish one TXT record. Save your logo as SVG Tiny PS (square, with a <title>, no scripts or external links; Google recommends 32 KB or less) and put it on an HTTPS URL you control. If you have a certificate, host the .pem file the issuer gave you the same way. Then fill the form above and add a TXT record with the host and value it gives you.
At most DNS hosts you enter only default._bimi as the name, because the domain is appended for you; typing the full name creates default._bimi.yourdomain.com.yourdomain.com. Publish one BIMI record per selector: two v=BIMI1 records at the same name is an error.
Can I have a BIMI record without a VMC?
Yes, but fewer inboxes will show the logo. Without a=, the record is valid and some providers may use it: the BIMI Group's sender FAQ notes that Yahoo may display a logo without a certificate for bulk senders that meet its other requirements. Gmail requires a VMC or CMC and the BIMI Group lists Apple Mail as requiring a VMC, so without one your logo won't appear there.
An empty l= with no a= is also valid: it declares that the domain doesn't take part in BIMI. The generator warns when you leave both empty, so you don't publish a decline by accident.
What DMARC policy does BIMI need?
Quarantine or reject, applied to all mail. Google's guide says BIMI doesn't support p=none and that pct must be 100; a p=none policy is monitoring only, so a spoofer's mail would still be delivered and could carry your logo. If your domain is still at p=none, follow moving DMARC from none to reject first. The preflight button reads your live DMARC record and says whether it qualifies (RFC 7489 defines the tags).
Do I need a VMC or a CMC?
| VMC | CMC | No certificate | |
|---|---|---|---|
| Needs a registered trademark | Yes | No (prior use of the logo) | No |
| Gmail shows the logo | Yes, with a checkmark | Yes, without the checkmark | No |
| Apple Mail (per the BIMI Group) | Yes | Not listed | No |
| Record has a= tag | Yes | Yes | No |
Per Google's Set up BIMI page and the BIMI Group's FAQ; check both before buying, as provider support changes.
Who uses this tool, and for what?
- Brand and marketing teams
- Turn the logo and certificate files from your designer and certificate issuer into the exact record IT has to publish.
- Email and IT admins
- Build the record with the right host name for your DNS provider and confirm DMARC is enforced before going live.
- Agencies
- Prepare BIMI records for clients who've just reached p=quarantine, with a preflight to show what's still blocking the logo.
What can’t this tool tell you?
- It builds the record and checks the URLs' shape; it doesn't download the logo or certificate. Use the BIMI checker after publishing for that.
- A correct record makes the logo eligible, not guaranteed: each mailbox provider decides whether to show it, partly on your sending reputation.
- It can't issue a VMC or CMC; those come from certificate authorities after a trademark or prior-use check.
- The DMARC preflight reads the record as published now, from a public resolver; recent changes may take time to show.
Common questions
- What is a BIMI record?
- A DNS TXT record at default._bimi.yourdomain.com with v=BIMI1, the URL of your SVG logo (l=) and optionally the URL of your mark certificate (a=). Supporting inboxes use it to show your logo beside authenticated mail.
- How do I create a BIMI record?
- Host your SVG Tiny PS logo and any VMC or CMC on HTTPS URLs, enter them in the generator above, and publish the TXT record it gives you at default._bimi under your domain.
- What is a BIMI record example?
- v=BIMI1; l=https://yourbrand.com/bimi/logo.svg; a=https://yourbrand.com/bimi/vmc.pem, published as a TXT record at default._bimi.yourbrand.com.
- What does "BIMI record not published" mean?
- The receiving system or checker found no TXT record at default._bimi under the From domain, or at the organisational domain. Either the record hasn't been added, it was added at the wrong name, or DNS hasn't propagated yet.
- Can I have a BIMI record without a VMC?
- Yes. The record is valid without a=, and the BIMI Group says Yahoo may show the logo for qualifying bulk senders, but Gmail needs a VMC or CMC, and Apple Mail a VMC.
- What does BIMI stand for?
- Brand Indicators for Message Identification: a standard for showing a sender's verified logo in the inbox.
Sources
Authentication and capacity are half of deliverability.
The other half is who you send to. Every hard bounce counts against the domain and inboxes you are sending from, and nothing in DNS can tell you which addresses on your list are dead.
- Bulk verification with real SMTP mailbox checks
- Hard bounces removed before a send, not discovered after
- Catch-all, disposable and role detection on every row
One plan, cancel anytime, no contract. Sign in with Google and your first 100 email checks are free, no card. The free tools stay free either way.