Back to Free Tools
BIMI Record Checker
Validate your BIMI record, SVG logo URL, VMC certificate, and DMARC enforcement so your logo shows in supporting inboxes.
Check a BIMI record
Try:
BIMI records live at <selector>._bimi.<domain>. Most domains use the default selector.
What is a BIMI record?
A BIMI record is a DNS TXT record that points supporting mailbox providers to your brand logo (an SVG Tiny P/S file) and the certificate that authenticates it. It lives at<selector>._bimi.<domain>and is only honoured when the message also passes DMARC at enforcement.
A typical BIMI record looks like this:
v=BIMI1; l=https://example.com/brand/logo.svg; a=https://example.com/brand/vmc.pemWhat this BIMI checker validates
- Whether a TXT record exists at
<selector>._bimi.<domain> - That the record parses as
v=BIMI1with valid tags - That the logo URL (
l=) is HTTPS, reachable, and served asimage/svg+xml - That the VMC/CMC URL (
a=) is HTTPS, reachable, and returns the expected Content-Type - That DMARC on the domain (or its organizational parent) is at
p=quarantineorp=rejectwithpct=100 - Logo size sanity check (warn if > 32 KB)
BIMI tag reference
| Tag | Required | Meaning |
|---|---|---|
v | Yes | Version. Must be BIMI1 and appear first. |
l | Yes | HTTPS URL to the SVG Tiny P/S logo. |
a | Recommended | HTTPS URL to the VMC / CMC PEM certificate chain. Required for Gmail, Apple, Yahoo. |
How to fix common BIMI problems
- Move DMARC to
p=quarantineorp=rejectwithpct=100before publishing BIMI - Convert your logo to SVG Tiny 1.2 P/S — strip scripts, external refs, animations, and use a square viewBox
- Serve the logo over HTTPS with
Content-Type: image/svg+xml - Buy a VMC (or CMC) from a participating CA and publish it via the
a=tag - Keep both the logo and VMC URLs publicly reachable — Gmail re-fetches periodically
- If you don't want a VMC yet, leave
a=off — but expect Gmail and Apple to ignore the record
Frequently asked questions
Related free tools
References
Go beyond one-off checks
Safer Sender continuously monitors your domain's DMARC, SPF and DKIM, classifies every sender, and guides you safely from p=none to p=reject.