BIMI checker
Is this tool useful?
What BIMI needs
- DMARC at enforcement. The domain’s DMARC policy must be p=quarantine or p=reject, for all mail (no pct below 100) and its subdomains (no sp=none). Mail must pass SPF or DKIM aligned with the From domain.
- A BIMI record. A TXT record at default._bimi.yourdomain with v=BIMI1, the https:// address of the logo (l=) and, for most inboxes, of the certificate (a=).
- An SVG Tiny PS logo. A square SVG in the restricted Tiny Portable/Secure profile: version 1.2, baseProfile tiny-ps, a title, no scripts, no embedded pictures, no outside links. The BIMI generator converts a normal SVG.
- A mark certificate. Gmail needs a Verified Mark Certificate (VMC, for a registered trademark) or a Common Mark Certificate (CMC, for a logo used for a year or more). Apple Mail needs a VMC. Yahoo and AOL can show the logo without a certificate for senders with a good reputation.
What this checker does
It reads the BIMI and DMARC records from DNS, downloads the logo and the certificate from the addresses in the record, and checks the logo against the SVG Tiny PS rules. For the certificate it reads the type, owner, issuer, domains and expiry date, checks that the certificates in the file sign each other in order, and compares the logo inside the certificate with the one published at l=. It doesn’t check revocation, and a certificate that passes here can still be refused if the issuing authority isn’t trusted by an inbox.
Why the logo might still not show
Inboxes show BIMI logos only for mail that passes DMARC and comes from senders with enough volume and a good reputation, and they cache the logo for a while. Some show it only in certain apps. If everything above is green, give it a few days.
More email tools
Moving to a new email host?
VayaMail copies every folder over IMAP with original dates and read status. Free up to 1 GB.