BIMI record (brand logo in email)

The record that puts the sender’s logo next to its mail in inboxes that show one. Optional, and needs DMARC enforcement first.

• Help center

BIMI (Brand Indicators for Message Identification) lets supporting inboxes — Gmail, Apple Mail, Yahoo and others — show your logo next to messages from your domain instead of a generic initial. It is a branding feature, not a security control, but it only works on top of strict email authentication, so it rewards domains that have done that work.

How SiteScan checks

The row appears only for domains with MX records. The scan looks for a TXT record at default._bimi.example.com starting with v=BIMI1. It is optional, so a missing record is shown as a neutral fact.

Requirements and setup

• DMARC at enforcement: p=quarantine or p=reject, applied to all mail (no pct below 100). p=none is not enough.
• A logo in the SVG Tiny Portable/Secure profile, square, served over HTTPS.
• For Gmail and Apple Mail, a Verified Mark Certificate (VMC) or Common Mark Certificate (CMC) from a supported CA; this usually requires a registered trademark or proof of long-standing logo use.

The record then looks like default._bimi.example.com TXT "v=BIMI1; l=https://example.com/logo.svg; a=https://example.com/vmc.pem". See email authentication.