Back to Free Tools

    BIMI Record Checker

    Validate your BIMI record, SVG logo URL, VMC certificate, and DMARC enforcement so your logo shows in supporting inboxes.

    Check a BIMI record

    Try:

    BIMI records live at <selector>._bimi.<domain>. Most domains use the default selector.

    What is a BIMI record?

    A BIMI record is a DNS TXT record that points supporting mailbox providers to your brand logo (an SVG Tiny P/S file) and the certificate that authenticates it. It lives at<selector>._bimi.<domain>and is only honoured when the message also passes DMARC at enforcement.

    A typical BIMI record looks like this:

    v=BIMI1; l=https://example.com/brand/logo.svg; a=https://example.com/brand/vmc.pem

    What this BIMI checker validates

    • Whether a TXT record exists at <selector>._bimi.<domain>
    • That the record parses as v=BIMI1 with valid tags
    • That the logo URL (l=) is HTTPS, reachable, and served as image/svg+xml
    • That the VMC/CMC URL (a=) is HTTPS, reachable, and returns the expected Content-Type
    • That DMARC on the domain (or its organizational parent) is at p=quarantine or p=reject with pct=100
    • Logo size sanity check (warn if > 32 KB)

    BIMI tag reference

    TagRequiredMeaning
    vYesVersion. Must be BIMI1 and appear first.
    lYesHTTPS URL to the SVG Tiny P/S logo.
    aRecommendedHTTPS URL to the VMC / CMC PEM certificate chain. Required for Gmail, Apple, Yahoo.

    How to fix common BIMI problems

    • Move DMARC to p=quarantine or p=reject with pct=100 before publishing BIMI
    • Convert your logo to SVG Tiny 1.2 P/S — strip scripts, external refs, animations, and use a square viewBox
    • Serve the logo over HTTPS with Content-Type: image/svg+xml
    • Buy a VMC (or CMC) from a participating CA and publish it via the a= tag
    • Keep both the logo and VMC URLs publicly reachable — Gmail re-fetches periodically
    • If you don't want a VMC yet, leave a= off — but expect Gmail and Apple to ignore the record

    Frequently asked questions

    References

    Go beyond one-off checks

    Safer Sender continuously monitors your domain's DMARC, SPF and DKIM, classifies every sender, and guides you safely from p=none to p=reject.