[ Quick answer ]
Create a BIMI record by enforcing DMARC, converting your logo to SVG Tiny PS, hosting it over HTTPS, then publishing a TXT record at default._bimi.yourdomain.com with the value v=BIMI1; l=https://yourdomain.com/logo.svg; a=https://yourdomain.com/vmc.pem.
Key facts
- ›The a= tag is optional for Yahoo but required for Gmail and Apple logo display.
- ›Leave a= empty (a=;) if you have no certificate.
Reviewed 2026-11-02 · EmailAuth research team
To create a BIMI record you complete four things in order: reach DMARC enforcement, host a compliant SVG Tiny-PS logo over HTTPS, obtain a Verified Mark Certificate, then publish a TXT record at default._bimi.yourdomain.com that points to the logo and certificate. Providers check them in that sequence, so a missing step earlier in the chain stops the logo from ever appearing.
Before you start
BIMI depends on working email authentication. Confirm SPF and DKIM are set up and aligned for every service that sends as your domain, because the logo only shows on mail that passes DMARC. A free domain scan from EmailAuth tells you which sources still fail alignment so you can fix them first.
Steps to create your BIMI record
- 1
1. Reach DMARC enforcement
Move your DMARC policy to p=quarantine or p=reject after confirming all legitimate mail passes. Rushing to enforcement before that point can block real email, so review aggregate reports first.
- 2
2. Create and host the logo
Convert your logo to the SVG Tiny-PS profile: square, solid background, no scripts or animation. Host the .svg file on an HTTPS URL you control.
- 3
3. Obtain a VMC
Buy a Verified Mark Certificate from an approved certificate authority. This usually needs a registered trademark for the logo and a verification process. Gmail and Apple Mail require it.
- 4
4. Publish the TXT record
Add a DNS TXT record at default._bimi.yourdomain.com with v=BIMI1, the l= logo URL, and the a= certificate URL. Wait for DNS propagation, then validate.
The record you publish
BIMI TXT record example
default._bimi.example.com IN TXT "v=BIMI1; l=https://example.com/logo.svg; a=https://example.com/vmc.pem"
Validate before you rely on it
After publishing, check three layers: DMARC is at enforcement, the SVG passes the Tiny-PS profile, and the VMC is valid and not expired. A small error in any layer means providers silently skip the logo, with no bounce or warning to tell you. Test with a real message to a Gmail or Apple Mail account once records propagate.
Managing it with EmailAuth
EmailAuth hosts BIMI, DMARC, and MTA-STS records by CNAME delegation, so you point one CNAME and update values in the dashboard rather than re-editing DNS each time. Its SVG Tiny-PS converter and validator catches logo problems before publishing, and the platform monitors your DMARC posture so you know the moment enforcement or a certificate lapses.
Frequently asked questions
What is the correct hostname for a BIMI record?
Publish it as a TXT record at default._bimi.yourdomain.com. The default selector covers all mail unless you set up additional selectors for specific streams. The value must begin with v=BIMI1.
Can I create a BIMI record without a VMC?
You can publish a record with only the l= logo tag, but Gmail and Apple Mail will not show the logo without a valid VMC in the a= tag. For meaningful coverage, obtain the certificate.
How long does BIMI take to work after publishing?
Allow time for DNS propagation, typically up to a day. Providers then need to see mail pass DMARC and fetch your logo and certificate. If nothing appears after propagation, re-check DMARC enforcement and the SVG profile.
Do I need a trademark for BIMI?
A VMC generally requires a registered trademark for the exact logo you want to display, verified by the certificate authority. Some regions and authorities accept specific trademark offices, so confirm eligibility before you apply.
What is a BIMI record?
A DNS TXT record that points inboxes to your logo file and optional mark certificate.
[ BIMI guide ]
[ Get a free DMARC assessment ]
Free DMARC assessment
We check your domain and send a short report with the steps to full enforcement.