Bulk BIMI checker: record, DMARC, logo and certificate for up to 500 domains
In short: Paste domains and see each one's BIMI record, whether DMARC is at quarantine or reject, whether the SVG logo loads and passes our format checks, and whether a mark certificate is named and valid. Limit: A passing check doesn't guarantee a logo: each provider decides based on reputation and its own rules.
A bulk BIMI checker looks up the BIMI record of many domains at once and checks what Gmail and Yahoo need before they can show a logo. Paste up to 100 domains, or 500 after a free Google sign-in; each row shows the default._bimi record, whether DMARC is at quarantine or reject, whether the SVG logo loads and passes our format checks, and the mark certificate. CSV out.
Price: this tool is free. Checking a whole email list is from $9/mo, and the first 100 checks are free with Google, no card. Check your list free nowSee pricing
Sample result
acme.example has a BIMI record and DMARC at reject, but no mark certificate for Gmail.
- Domain
- acme.example
- DMARC
- p=reject
- Logo
- SVG checks run
What this means for you
Gmail shows a BIMI logo only with DMARC enforced and a VMC or CMC in the record.
- default._bimi record found or inherited
- DMARC at quarantine or reject
- SVG Tiny PS logo checks
- VMC or CMC type and expiry
- BIMI
- VMC
- DMARC
By SimpleVerifier Team · Last updated
Also in: Português (Brasil) · Español · Deutsch · Français · Türkçe · 简体中文 · Русский · Nederlands · Italiano · Tiếng Việt · Bahasa Indonesia · Polski · العربية · Українська · Čeština · Magyar · 日本語 · 한국어
Is a logo in the inbox the goal? Clean the list first.
- Gmail and Yahoo only show a BIMI logo on mail that passes DMARC from a sender with a good reputation, and bounces hurt that reputation. Upload your list at /verify to remove addresses that would bounce.
- The first 100 email checks are free with a Google sign-in, no card. Each row comes back valid, invalid or risky, with the reason.
How do I check BIMI on many domains at once?
- Paste domains, one per line, up to 100 a run, or 500 after a free Google sign-in. Email addresses and URLs work too; the domain is taken from each.
- Press Check BIMI. Each domain's
default._bimiand_dmarcTXT records are read; when a BIMI record names a logo or certificate, each is fetched once over HTTPS, five domains a request. - Read each row: Ready, Needs work, No BIMI record or Lookup failed, with the DMARC policy, the logo checks and the certificate type and expiry.
- Filter to domains that need work and download the CSV with every check's result.
Example
- You enter
- Two domains:
acme.example(BIMI record, DMARC p=reject, no certificate) andglobex.example(no BIMI record). - You get
- acme.example: Needs work, since the logo checks run but no a= mark certificate is named, which Gmail requires. globex.example: No BIMI record. Download the CSV with every check.
- Limits
- Up to 100 a run without an account and 500 when signed in with Google, counted over a minute. 5 domains a request; DNS plus up to two HTTPS fetches (logo and certificate) per domain.
What does a BIMI check look at?
BIMI (Brand Indicators for Message Identification) is a TXT record at default._bimi.<domain> that points to a logo (l=) and, usually, a mark certificate (a=). For each domain this tool finds that record, falling back to the parent domain the way receivers do, and reads the DMARC record, because BIMI only works when DMARC is at enforcement.
When the record names a logo, the SVG is fetched once and checked against the points the BIMI Group and Google list: an SVG of the Tiny PS profile, a title, no scripts or external references, a square shape and a small file. When it names a certificate, the PEM file is read for its type (VMC or CMC), its validity dates and whether it embeds a logo.
Why does DMARC decide whether BIMI works?
Mailbox providers show a BIMI logo only on mail that passes DMARC from a domain whose policy is quarantine or reject. Google says p=none isn't supported, and that pct must be 100 (or left out). So a domain with a perfect BIMI record and p=none still shows no logo.
The DMARC column shows the policy each domain publishes and whether it qualifies. To see where each domain's DMARC stands in more detail, run the bulk DMARC checker.
Do I need a VMC to show a logo?
For Gmail, yes: Google requires a Verified Mark Certificate (VMC) or a Common Mark Certificate (CMC), which you buy from an authorised certificate authority. Some other providers, such as Yahoo, may show a logo without one for senders that meet their own criteria.
The certificate column says whether an a= certificate is named, whether it loads, its type and its expiry date. A record without a= is marked as needing work for Gmail, not as broken.
Does a passing BIMI check guarantee a logo in the inbox?
No. A passing check means the records and files are in the form providers ask for. Each provider still decides on its own whether to show the logo, based on the sender's reputation and volume, and some don't support BIMI at all.
For one domain, with the logo preview and every check explained, use the single BIMI checker.
How is this different from the single BIMI checker?
| Bulk BIMI checker | BIMI checker | |
|---|---|---|
| Domains per run | 100, or 500 signed in | One |
| Logo preview | No | Yes |
| Record, DMARC, logo and certificate checks | One row per domain | Each check explained |
| CSV export | Yes | No |
Who uses this tool, and for what?
- Brand and marketing teams
- Check that every sending domain and subdomain has the BIMI record, logo and certificate in place.
- Agencies
- Audit BIMI across client domains in one run and flag which are blocked by DMARC at p=none.
- Email admins
- Catch an expired mark certificate or a logo URL that stopped loading.
- Deliverability consultants
- Add a BIMI column to a domain audit next to SPF, DKIM and DMARC.
What can’t this tool tell you?
- A passing check doesn't guarantee a logo: each provider decides based on reputation and its own rules.
- The certificate is read for type, dates and logo, not validated against the full chain.
- Only the default selector is checked.
- Logo and certificate URLs that block automated requests can fail here while loading in a browser.
- Up to 100 domains a run without an account, 500 signed in.
Common questions
- How do I check BIMI for many domains?
- Paste the domains into a bulk BIMI checker like this one. Each row shows the BIMI record, the DMARC policy, the logo checks and the certificate, with a CSV download.
- Is this bulk BIMI checker free?
- Yes. Up to 100 domains a run without an account, and up to 500 a run when you sign in with Google, with no card.
- Why does a domain with a BIMI record show Needs work?
- Usually because DMARC is at p=none or pct below 100, the logo fails a format check, or no mark certificate is named, which Gmail requires. The row lists each problem.
- Does BIMI work with p=none?
- No. Google says BIMI doesn't support p=none. The domain's DMARC policy must be quarantine or reject.
- Does this tool check the certificate fully?
- It reads the certificate's type, validity dates and embedded logo. It doesn't verify the full certificate chain the way a mailbox provider does.
- What is a CMC?
- A Common Mark Certificate, a newer and cheaper alternative to a VMC that doesn't require a registered trademark. Gmail accepts both.
Sources
A tidy list can still be full of dead addresses.
Extracting, deduplicating and syntax checks all work on the text of an address. None of them can tell whether the mailbox exists. Only the server that hosts it can answer that, through an SMTP check, and that is what the paid product does.
- Upload the cleaned file as it is: CSVs up to 100,000 rows
- A real SMTP mailbox check on every row, with catch-all detection
- Small list? Starter at $9/mo covers 2,500 emails a month, cancel anytime
Plans from $9 a month, cancel anytime, no contract. Sign in with Google and your first 100 email checks are free, no card. The free tools stay free either way.