BIMI gets a lot of attention these days, and after working on email programs across hundreds of brands, I think most of that attention is deserved. But the way it gets talked about often creates the wrong expectations.
People hear “logo in the inbox” and assume it is a quick configuration win. It is not. BIMI is the final layer on top of a mature authentication stack. Getting there takes real work. But if you put that work in, the payoff is a verified visual presence at exactly the moment someone is deciding whether to open your email.
Here is how it actually works, what it requires, and how to think about whether it is worth pursuing for your program.
What Is BIMI in Email Marketing
BIMI stands for Brand Indicators for Message Identification. In plain terms, it is a DNS-based standard that allows your verified brand logo to appear next to authenticated emails in supported inboxes.
When a subscriber opens Gmail or Apple Mail, they see a small avatar next to the sender’s name. Without BIMI, that is typically a generic initial or a favicon pulled from your domain. With BIMI, it becomes your actual verified logo, a signal that this email is genuinely from you.
For providers like Gmail, showing that logo requires a Verified Mark Certificate. That certificate proves trademark ownership before the logo can be displayed. BIMI does not handle authentication on its own. It is the visual layer that surfaces the identity you have already established through SPF, DKIM, and DMARC.
How BIMI Works Step by Step
When an email arrives at a supporting inbox, here is what happens before your logo appears:
Authentication check: The inbox verifies that SPF, DKIM, and DMARC all pass and align. If any of those fail or if DMARC is not set to enforcement, the process stops there.
BIMI record lookup: If authentication passes, the inbox queries the DNS record published at default._bimi.yourdomain.com. That record points to your logo file and, where required, your VMC.
Logo and certificate validation: The inbox checks that the logo meets the technical format requirements and that the VMC is valid and issued by an approved certificate authority.
Logo display: If everything checks out, your verified logo appears next to the sender’s name.
Every step depends on the one before it. BIMI is the last check, not the first.
Why Implement BIMI for Your Email Program
How BIMI Improves Brand Recognition in the Inbox
Most email programs invest heavily in subject lines and preview text. Those matter. But before a subscriber reads either one, they scan sender names and visual cues. BIMI puts a verified logo in that scan path. It is brand recognition before the open, which is the part of the funnel nobody talks about enough.
How BIMI Affects Email Open Rates and Subscriber Trust
At InboxArmy, working with brands across sectors, I have seen this across hundreds of email programs. When a verified logo appears consistently, subscribers develop a visual shortcut: that logo equals legitimate email. Open rates reflect it. Brands that implement BIMI correctly tend to see measurable engagement lifts once the logo is stable and visible across Gmail, Yahoo, and Apple Mail.
How BIMI Helps Protect Against Email Phishing
A spoofer can copy your sender name and your subject line, but they cannot fake a BIMI-verified logo. Your subscribers start to associate that logo with trusted email from you. When it is missing, that absence is itself a signal. Over time, this is one of the most practical anti-phishing benefits an email program can build.
How DMARC Enforcement Supports BIMI Deliverability Benefits
You cannot reach BIMI without DMARC at enforcement. That enforcement alone, before the logo ever appears, improves sender trust with mailbox providers and reduces false spam flags. The programs I work with that invest in the full authentication stack consistently outperform their peers on deliverability, and BIMI is what gives them the visible payoff for that investment.
Why Early BIMI Adoption Still Has a Competitive Advantage
The majority of brands have not implemented BIMI. In most inboxes, the default is still a generic initial or favicon. A verified logo stands out in that environment. That window will not stay open indefinitely.
BIMI Requirements: What You Need Before Setup
There are no shortcuts here. These requirements exist for every domain, and all of them must be in place before any inbox will display your logo.
1. Email Authentication Requirements for BIMI
Your domain must authenticate all outbound mail with SPF, DKIM, and DMARC. More importantly, SPF and DKIM must both align with the domain your DMARC record is protecting. Alignment is what DMARC uses to verify the message is genuinely from your domain, not just passing individual checks.
2. DMARC Enforcement Requirement for BIMI
This is the most common blocker I see. Inbox providers require DMARC to be set at p=quarantine or p=reject. A policy of p=none means you are monitoring but not enforcing, and that is not enough for BIMI.
The policy also needs to apply to all mail. A partial rollout using pct=50 or similar will not qualify. Full enforcement across all sending sources is required.
3. How to Publish a BIMI DNS Record
Your domain needs a TXT record at default._bimi.yourdomain.com. That record tells inbox providers where to find your logo and, when required, your VMC.
4. What Is a Verified Mark Certificate and Do You Need One
Some providers will display a self-asserted logo without a VMC. Gmail and Apple Mail will not. A VMC is issued by an approved certificate authority and confirms that the logo is legally yours through trademark verification. Without one, your BIMI setup will work on a limited set of providers only.
BIMI Logo Requirements: SVG Format Specifications
This is the part that catches a lot of teams off guard. BIMI does not accept a standard SVG or any raster format like PNG or JPEG. It requires a specific file format called SVG Tiny Portable/Secure (SVG P/S or SVG Tiny 1.2).
This format exists to remove anything that could be exploited or modified: no scripts, no animation, no external references, no interactive elements. What it leaves is a clean, static, secure graphic that inbox providers can render predictably.
SVG Tiny PS Format Requirements for BIMI
- Use the SVG Tiny 1.2 base with version=”1.2″ and baseProfile=”tiny-ps” in the root tag
- Include a <title> element with your brand name
- Exclude x= and y= attributes from the root <svg> tag
- Contain no scripts, animation, or external references
- Be under 32 kilobytes
- Use a square aspect ratio with your logo centered
- Have a solid background (transparent backgrounds do not render reliably across providers)
- Use LF line endings
Most design tools do not export SVG P/S directly. The BIMI Group now provides official conversion tools for Windows, macOS, and Illustrator.
Trademark Matching Requirements for BIMI Logo Validation
If your trademark registration includes a specific border, shield, or surrounding element, your BIMI logo must reflect that exact mark. Providers verify logo-to-trademark alignment during VMC validation. This is not the place to use a simplified or alternate version of your logo.
How to Set Up BIMI
Once your authentication is in place and your logo is ready, the setup itself is straightforward.
Step 1: Confirm full authentication and DMARC enforcement. Run a DMARC check before you do anything else. If your policy is not at quarantine or rejected across all mail streams, fix that first. BIMI built on top of a partial or unenforced DMARC record will not display.
Step 2: Prepare your SVG Tiny PS logo. Build or convert your logo to SVG P/S format: square, under 32 KB, solid background, no scripts, or external references. Validate the file structure before hosting it.
Step 3: Host the logo at a stable, public HTTPS URL. Inbox providers fetch the logo directly from the URL in your BIMI record. If the hosting is unreliable, uses redirects, or is served over HTTP, providers cannot retrieve the file, and the logo will not display.
Step 4: Obtain your VMC if you need full provider coverage. If Gmail and Apple Mail are in your audience (they almost certainly are), you need a VMC. Start this process early. Trademark validation is controlled by IP offices, not inbox providers, and the timeline can stretch across several months.
Step 5: Publish your BIMI TXT record. Create a TXT record at default._bimi.yourdomain.com with the BIMI version tag (v=BIMI1), the URL of your SVG file, and the VMC URL if you have one. Syntax matters here. A single typo or missing semicolon will cause BIMI to fail without any error message.
Step 6: Validate before assuming it works. Use a BIMI inspector or record checker to confirm DNS propagation, logo format compliance, certificate validity, and DMARC enforcement. Do not assume the setup is working because the record was published. Verify it.
If you’re unsure where your domain stands, an email deliverability consultant can assess your authentication stack before you invest in BIMI. A proper email deliverability test will reflect this uplift too, showing clearer authentication, stronger alignment, and fewer risk flags.
How Long Does BIMI Take to Deploy?
Publishing the DNS record itself takes about 15 minutes. That is not the timeline that matters.
The real timeline depends on two things:
DMARC Enforcement Timeline
If your domain is not already in quarantine or rejection, getting there safely requires identifying and aligning all your mail streams. For programs with many sending sources, it can take weeks or months. Rushing it causes legitimate mail to get blocked.
VMC Acquisition Timeline
If your logo is already trademarked and you have documentation ready, the VMC process through an approved certificate authority moves relatively quickly once identity verification is complete. If your trademark is not registered yet, that process is outside anyone’s control, but the trademark office, and timelines vary widely by country and jurisdiction.
Once both are in place, BIMI deployment is fast. You publish the record and validate it, and providers begin evaluating your domain as DNS propagates.
What Is a Verified Mark Certificate and What Does It Cost
A VMC is a digital certificate issued by an approved certificate authority that confirms your logo is trademarked and legally yours. Inbox providers use it to validate identity before showing your logo.
Who Issues Verified Mark Certificates for BIMI
DigiCert, Entrust, and Sectigo are the currently approved certificate authorities. No other issuers are recognized for BIMI purposes.
What the process involves: Trademark verification through official IP records, identity verification via notary or video call, and issuance after all checks pass.
What it costs: Approximately $1,499 per year, depending on the issuing authority. Some providers offer multi-year pricing.
VMC vs Self-Asserted BIMI: What Is the Difference
A handful of providers (Yahoo Mail, Fastmail, and some smaller platforms) will display a logo without a VMC. Gmail and Apple Mail require one. If the bulk of your subscriber base uses those two platforms, a self-asserted BIMI setup will have limited impact.
Which Email Providers Support BIMI
BIMI adoption has expanded significantly and continues to grow.
Providers currently displaying BIMI logos:
- Gmail (requires VMC or CMC)
- Yahoo Mail (no VMC required)
- Apple Mail, iOS 16 and later, macOS Ventura and later (requires VMC)
- Fastmail (no VMC required)
- AOL, Pobox, Netscape
- Cloudmark (Proofpoint)
- La Poste
- Onet Poczta
- GMX and Web.de
- Zoho Mail
- Zone and Zoner
- NTT Docomo
- KDDI
Providers currently evaluating BIMI: ATmail, BT Mail, Comcast, mail.com, Qualitia, and Seznam.cz, and Yahoo Japan.
Providers not currently supporting BIMI: Microsoft Outlook and Office 365. Microsoft has not announced a timeline for BIMI support.
Why Your BIMI Logo Is Not Showing
If your logo is not appearing, one of these is almost certainly the reason.
DMARC Not at Enforcement
The most common cause. If your policy is still at p=none, inbox providers will not display your logo regardless of how well everything else is configured. Move to quarantine or reject first.
BIMI DNS Record Syntax Error
BIMI breaks silently. A wrong URL, a missing semicolon, or the wrong selector name will cause the logo to not appear, with no visible error. Recheck your record syntax against the BIMI specification and re-run your validator.
Missing or Expired VMC
If your target providers require a certificate and you do not have one, the logo will not display. Everything else can be perfect, and it still will not render.
Non-Compliant SVG File Format
Providers quietly ignore non-compliant files. If your logo was not validated as SVG Tiny 1.2 P/S, run it through the BIMI Group’s conversion tools and recheck.
Inbox Provider Does Not Support BIMI
If your subscriber is using Outlook or another non-supporting provider, there is nothing to fix. The logo will not appear there until the provider adds support.
DNS Has Not Propagated Yet
Even a correctly configured BIMI setup needs time after publishing. Wait 24 to 48 hours after any changes, then recheck with a BIMI inspector.
Does BIMI Improve Email Deliverability
I want to be direct about this because there is a lot of overstating happening out there. BIMI does not directly improve your inbox placement. It is not a signal that Gmail’s filtering algorithm uses to route your mail.
What BIMI does is sit on top of a fully enforced authentication stack, and that stack is what actually moves deliverability metrics. When SPF, DKIM, and DMARC are all aligned and enforced, your domain behaves like a trusted sender. Spam flags drop. Reputation stabilizes. Mailbox providers have a clean signal to evaluate.
BIMI’s deliverability contribution is indirect but real. When impersonation attempts drop because bad actors cannot fake your verified logo, reputation damage from those attempts drops with it. And when subscribers engage more consistently because they recognize and trust your logo, those engagement signals feed back into inbox placement over time.
Think of BIMI as the visible return on the authentication investment. The deliverability work comes first. BIMI is what makes that work visible to your subscribers.
Is BIMI Worth Implementing for Your Email Program
If your program sends at a meaningful volume, your domain is properly authenticated, and your logo is trademarked, then yes, BIMI is worth pursuing. Not because the logo itself does something magical, but because you cannot have BIMI without already running the kind of email program that earns deliverability.
The brands I have worked with that invest in the full authentication stack early consistently outperform their peers on inbox placement, reputation stability, and subscriber trust. BIMI gives those programs a visible edge at the moment it matters most: when a subscriber is scanning their inbox, deciding what to open.
If your domain is not yet at DMARC enforcement, start there. That work has its own payoff before BIMI ever enters the picture. Once you are there, BIMI is a natural next step.
And if you want BIMI without the guesswork, working with an email marketing agency like InboxArmy means authentication, DMARC enforcement, and full BIMI setup handled end to end.
BIMI FAQs
Does BIMI improve deliverability?
Not directly. BIMI does not influence Gmail’s spam filtering algorithm. The deliverability benefit comes from the authentication requirements underneath it. DMARC enforcement reduces impersonation attempts, stabilizes sender reputation, and removes friction with mailbox providers. BIMI is built on top of that foundation.
Do I need a trademark to use BIMI?
For Gmail, Apple Mail, and other providers that require a VMC, yes. A VMC requires a registered trademark with a recognized IP authority. Some providers (Yahoo Mail and Fastmail) will display a self-asserted logo without a trademark, but coverage will be limited.
What happens if my VMC expires?
Your BIMI logo will stop appearing in providers that require a VMC. Certificate authorities send renewal reminders, but this is worth tracking actively. An expired VMC creates a gap in brand visibility with no obvious error message to diagnose.
Can I use BIMI on a subdomain?
Yes, BIMI can be implemented on a subdomain, but the authentication requirements still apply at the subdomain level. SPF, DKIM, and DMARC must all be aligned and enforced for the specific sending domain, not just the root domain.
What is a Common Mark Certificate (CMC)?
A CMC is an alternative to a VMC that some providers accept. It does not require trademark registration and is less expensive. Support varies by provider. As of this update, Gmail accepts CMC in addition to VMC, but the landscape here continues to evolve.
How do I know if BIMI is working?
Use a BIMI inspector tool to validate your DNS record, logo format, and certificate chain. Then check a test email in a supporting inbox like Gmail. If your logo appears next to the sender’s name, BIMI is working. If the generic initial appears instead, something in the chain needs attention.
