← All checks

BIMI record check: show your logo in inboxes

BIMI info Email authentication · informational, no points

What it inspects

If DMARC is at enforcement (quarantine or reject at 100 percent), the TXT record at default._bimi.<domain>. PASS when it has an l= logo URL (an a= certificate is reported if present). Not applicable when DMARC is not enforced, no BIMI record exists, or the logo is empty. This check has weight 0: it never changes your score.

Why it matters

BIMI lets supporting mailbox providers display your logo next to authenticated mail. It requires DMARC enforcement, so it is also a sign your authentication is complete.

How to verify by hand

# bash
dig +short TXT default._bimi.example.com

# PowerShell
Resolve-DnsName -Name default._bimi.example.com -Type TXT | Select-Object -ExpandProperty Strings

How to fix

Optional. Once DMARC is enforced, publish a BIMI record with an SVG logo URL (and a certificate if your target providers require one).

  1. Publish the record:

    default._bimi.example.com.  IN  TXT  "v=BIMI1; l=https://example.com/logo.svg; a="

    Gmail and some other providers require a verified mark certificate in a=; others do not.

References

Scan your domain free