---
title: "BIMI Setup Guide: Show Your Logo in Inbox (2026)"
description: "BIMI record setup guide: SVG logo requirements, VMC certificates, DNS configuration, provider support, and verification with InboxKit's BIMI checker."
canonical: "https://www.inboxkit.com/learn/bimi-setup-guide"
author: "Rahul Lakhaney"
published: "2026-03-31"
updated: "2026-03-31"
category: "Guides"
---

# BIMI Record Setup Guide (2026)

BIMI (Brand Indicators for Message Identification) displays your logo next to emails in recipients' inboxes. It requires DMARC enforcement, a properly formatted SVG logo, and optionally a VMC certificate. Here is how to set it up.

## What Is BIMI and Why It Matters for Email

**BIMI (Brand Indicators for Message Identification)** is a DNS-based email standard that allows senders to display their brand logo next to emails in supported inboxes. When a recipient sees your email in Gmail, Apple Mail, or Yahoo, your company logo appears instead of a generic avatar.

For email, BIMI provides two benefits:

1. **Visual trust signal.** A branded logo increases perceived legitimacy. Recipients are less likely to ignore or report an email that shows a professional logo.
2. **Indirect deliverability benefit.** BIMI requires DMARC enforcement (p=quarantine or p=reject), which itself improves deliverability. The BIMI setup process forces you to complete your authentication stack.

| Provider | BIMI Support | VMC Required | Notes |
|----------|-------------|-------------|-------|
| **Gmail** | Yes (since 2021) | Yes, required | Only shows logo with valid VMC |
| **Apple Mail** | Yes (since iOS 16) | Yes, required | Full BIMI support including VMC |
| **Yahoo Mail** | Yes (since 2018) | No, optional | Shows logo without VMC |
| **Fastmail** | Yes | No, optional | Shows logo without VMC |
| **Microsoft Outlook** | Partial (2025+) | TBD | Rolling out gradually |
| **AOL** | Yes | No, optional | Shows logo without VMC |

**The catch:** Gmail and Apple Mail. the two largest email clients. require a VMC (Verified Mark Certificate), which costs $1,000-1,500/year. This makes BIMI primarily valuable for brands with established budgets. For email operations, the authentication requirements (DMARC enforcement) deliver the real value.

Source: [BIMI Group Official Specification](https://bimigroup.org/), [RFC 9495 - BIMI](https://datatracker.ietf.org/doc/html/rfc9495)

## Prerequisites: DMARC Enforcement Required

BIMI will not work without DMARC enforcement. Your domain must have a DMARC policy of `p=quarantine` or `p=reject`. A `p=none` policy is not sufficient.

**Required authentication stack:**

| Requirement | Status Needed | How to Check |
|-------------|--------------|-------------|
| **SPF** | Passing | MXToolbox SPF checker or InboxKit DNS validator |
| **DKIM** | Passing | Send test email, check Authentication-Results header |
| **DMARC** | p=quarantine or p=reject | MXToolbox DMARC checker or InboxKit DNS validator |
| **DMARC alignment** | SPF or DKIM aligned | DMARC aggregate reports |

If your DMARC is currently at `p=none`, you need to progress through the enforcement rollout before implementing BIMI:

1. **Week 1-2:** Monitor DMARC reports at `p=none`
2. **Week 3-4:** Move to `p=quarantine; pct=25`
3. **Week 5-6:** Increase to `p=quarantine; pct=100`
4. **Week 7+:** Optionally move to `p=reject`
5. **After enforcement is stable:** Implement BIMI

InboxKit configures DMARC automatically for all mailboxes. Check your current DMARC status in the [InboxKit domains dashboard](https://docs.inboxkit.com) or use InboxKit's free [DMARC checker tool](/resources/tools/dmarc-checker).

## Creating Your BIMI SVG Logo

BIMI has strict requirements for the logo file format. A regular SVG from your website will not work.

**BIMI SVG requirements:**

| Requirement | Specification | Notes |
|-------------|--------------|-------|
| **Format** | SVG Tiny Portable/Secure (SVG P/S) | Not standard SVG |
| **Size** | Square aspect ratio | Must be perfectly square |
| **Background** | Solid, non-transparent | Transparent backgrounds not allowed |
| **File size** | Under 32 KB | Keep it simple |
| **Content** | Logo only | No text, animations, or external references |
| **Encoding** | Base64 is not allowed | Must be valid SVG XML |
| **viewBox** | Required | Must include viewBox attribute |
| **Scripts** | None | No JavaScript or interactivity |

**Converting your logo to BIMI-compliant SVG:**

1. Start with your logo in SVG or high-res PNG format
2. Open in a vector editor (Inkscape, Illustrator, Figma)
3. Ensure it is perfectly square with a solid background
4. Export as SVG Tiny 1.2
5. Manually edit the SVG to add the BIMI profile:

```xml
<svg xmlns="http://www.w3.org/2000/svg" version="1.2" baseProfile="tiny-ps" viewBox="0 0 100 100">
  <title>Your Company Name</title>
  <!-- Your logo paths here -->
</svg>
```

6. Validate using InboxKit's [BIMI checker](/resources/tools/bimi-checker) or the BIMI Group's SVG validator
7. Host the SVG on your domain over HTTPS (e.g., `https://yourdomain.com/bimi/logo.svg`)

**Common SVG mistakes:** Using standard SVG instead of SVG Tiny P/S, including `<script>` tags, using external font references, or having a transparent background.

## VMC Certificates: When You Need One

A **VMC (Verified Mark Certificate)** is a digital certificate that verifies your organization owns the trademark associated with your BIMI logo. Gmail and Apple Mail require a VMC to display your logo.

**VMC certificate providers and pricing:**

| Provider | Annual Cost | Trademark Required | Validation Time |
|----------|-----------|-------------------|----------------|
| **DigiCert** | ~$1,499/year | Yes (registered trademark) | 2-4 weeks |
| **Entrust** | ~$1,299/year | Yes (registered trademark) | 2-4 weeks |

**Requirements for VMC:**
- A registered trademark for your logo (USPTO, EUIPO, or equivalent)
- The trademarked logo must match your BIMI SVG exactly
- Organization validation (similar to EV SSL certificates)
- Valid DMARC with enforcement (p=quarantine or p=reject)

**Do you need a VMC?** It depends on your audience and goals:

## DNS Record Configuration

The BIMI DNS record is a TXT record added at a specific subdomain of your domain.

**BIMI record format:**

```dns
; BIMI record without VMC (works on Yahoo, Fastmail, AOL)
default._bimi.yourdomain.com IN TXT "v=BIMI1; l=https://yourdomain.com/bimi/logo.svg;"

; BIMI record with VMC (works on Gmail, Apple Mail, and all others)
default._bimi.yourdomain.com IN TXT "v=BIMI1; l=https://yourdomain.com/bimi/logo.svg; a=https://yourdomain.com/bimi/cert.pem;"
```

**Record breakdown:**

| Component | Value | Required |
|-----------|-------|----------|
| **Host** | `default._bimi` | Yes |
| **Type** | TXT | Yes |
| **v=** | BIMI1 | Yes (version identifier) |
| **l=** | HTTPS URL to SVG logo | Yes |
| **a=** | HTTPS URL to VMC certificate (.pem) | Only for Gmail/Apple Mail |

**Step-by-step DNS setup:**
1. Host your BIMI SVG at a public HTTPS URL on your domain
2. If using VMC, host the .pem certificate file at a public HTTPS URL
3. Go to your DNS provider (Cloudflare, Namecheap, GoDaddy, etc.)
4. Add a TXT record:
   - **Host/Name:** `default._bimi`
   - **Value:** Your BIMI string (see format above)
   - **TTL:** 3600
5. Wait 15-60 minutes for propagation
6. Validate using InboxKit's [BIMI checker tool](/resources/tools/bimi-checker)

**Important:** The logo URL must use HTTPS and must be on the same domain (or a subdomain) as the email sender. Cross-domain logo hosting is not recommended.

## Verification and Testing

After setting up your BIMI record, verify everything works:

**Step 1: Validate DNS record**
Use InboxKit's [BIMI checker](/resources/tools/bimi-checker) or run:
```
dig TXT default._bimi.yourdomain.com
```

**Step 2: Validate SVG format**
The BIMI Group provides an SVG validator. InboxKit's BIMI checker also validates the SVG format, checking for Tiny P/S compliance.

**Step 3: Send test emails**
Send test emails to accounts on different providers and check if the logo appears:

| Provider | Where to Check | Expected Result |
|----------|---------------|----------------|
| **Gmail** | Web client, avatar next to sender | Logo shows (VMC required) |
| **Yahoo Mail** | Inbox list view | Logo shows (no VMC needed) |
| **Apple Mail** | iOS/macOS sender avatar | Logo shows (VMC required) |
| **Fastmail** | Inbox sender column | Logo shows (no VMC needed) |

**Step 4: Monitor DMARC reports**
BIMI will only work for emails that pass DMARC. Monitor your DMARC aggregate reports to ensure alignment stays above 95%.

**Common verification failures:**
- SVG not accessible at the URL (check HTTPS, CORS headers)
- SVG not in Tiny P/S format (most common issue)
- DMARC policy still at p=none
- VMC certificate expired or not matching the logo
- DNS record has typos in the hostname (`default._bimi` must be exact)

## BIMI for Email: Practical Recommendations

For email operations, here is my practical recommendation:

**If you are just getting started (under 50 mailboxes):**
Skip BIMI for now. Focus on SPF, DKIM, and DMARC enforcement. These provide the deliverability foundation. BIMI is cosmetic. it will not help if your authentication is broken.

**If you are scaling (50-200 mailboxes):**
Set up BIMI without a VMC. It takes 15 minutes and is free. Your logo will display on Yahoo, Fastmail, and AOL. roughly 15% of business email. The DMARC enforcement requirement ensures your authentication is solid.

**If you are an agency or established brand:**
Invest in a VMC certificate. The $1,300-1,500/year cost is justified when you are sending from branded domains at scale. Your logo appearing in Gmail and Apple Mail increases recognition and reduces spam complaints.

**Cost-benefit analysis at scale:**

| Scale | BIMI Without VMC | BIMI With VMC | Recommendation |
|-------|-----------------|--------------|----------------|
| 1-25 mailboxes | Free, 15 min setup | $1,500/year | Without VMC |
| 25-100 mailboxes | Free, 15 min setup | $1,500/year | Without VMC |
| 100-500 mailboxes | Free, 15 min setup | $1,500/year | With VMC (if branded domain) |
| Agency (10+ clients) | Free per client | $1,500/year per client | Per-client decision |

InboxKit's [BIMI checker tool](/resources/tools/bimi-checker) validates your entire BIMI setup. DNS record, SVG format, VMC certificate, and DMARC compliance. in one check.

## Frequently asked questions

### Does BIMI improve email deliverability?

BIMI itself does not directly improve deliverability. However, it requires DMARC enforcement (p=quarantine or p=reject), which does improve deliverability. Think of BIMI as a branding bonus that comes with the deliverability benefit of DMARC enforcement.

### How much does BIMI cost?

BIMI without a VMC is free. you just need a compliant SVG logo and a DNS record. BIMI with a VMC (required for Gmail and Apple Mail) costs $1,300-1,500/year for the certificate, plus you need a registered trademark.

### Can I use BIMI with email domains?

Yes, but it makes the most sense for branded primary domains rather than secondary outreach domains. For email, the real value is the DMARC enforcement requirement, which improves deliverability regardless of whether recipients see your logo.

### Does InboxKit support BIMI?

InboxKit provides a free BIMI checker tool that validates your BIMI record, SVG format, VMC certificate, and DMARC compliance. InboxKit also configures DMARC automatically for all mailboxes, which is the primary prerequisite for BIMI.

### How long does BIMI take to start showing logos?

After DNS propagation (15-60 minutes), logos can appear within 24-48 hours. Gmail may take longer as it caches BIMI data. Yahoo typically shows logos fastest. Allow up to a week for full propagation across all supporting providers.

## Sources

- [BIMI Group Official Specification](https://bimigroup.org/) (2026)
- [RFC 9495 - BIMI](https://datatracker.ietf.org/doc/html/rfc9495) (2024)
- [Google BIMI Support Documentation](https://support.google.com/a/answer/10911320) (2026)
- [Apple Mail BIMI Support (iOS 16+)](https://support.apple.com/en-us/HT213155) (2022)
- [DigiCert VMC Certificate](https://www.digicert.com/tls-ssl/verified-mark-certificates) (2026)
- [Entrust VMC Certificate](https://www.entrust.com/digital-security/certificate-solutions/products/digital-signing/verified-mark-certificates) (2026)
- [InboxKit BIMI Checker Tool](https://www.inboxkit.com/resources/tools/bimi-checker) (2026)

## Related

- https://www.inboxkit.com/learn/dmarc-setup-email
- https://www.inboxkit.com/learn/dns-setup-guide
- https://www.inboxkit.com/learn/email-deliverability-guide
- https://www.inboxkit.com/learn/google-postmaster-tools-guide