BYTETOOLS

BIMI Record Generator

Build the default._bimi TXT record for Brand Indicators for Message Identification, with URL checks for your SVG logo and Verified Mark Certificate.

default
Record host
valid
Logo URL
absent
VMC (a=)
45 chars
Record length

TXT record for default._bimi.example.com

v=BIMI1; l=https://example.com/bimi/logo.svg;

Publish as a TXT record with host name default._bimi.example.com. Nothing on this page is fetched or uploaded — the URLs are checked for shape only, not visited.

BIND zone-file form

default._bimi.example.com. IN TXT "v=BIMI1; l=https://example.com/bimi/logo.svg;"

Worth knowing

  • No a= tag. Gmail, Apple Mail and Fastmail will not display your logo without a Verified Mark Certificate; Yahoo still may.

Prerequisites BIMI will not work without

  • DMARC at enforcement
    Your organisational domain needs a DMARC policy of p=quarantine or p=reject with pct=100. p=none never qualifies, and Gmail also requires the policy to sit on the organisational domain, not only a subdomain.
  • SPF and DKIM aligned and passing
    BIMI is only evaluated on mail that already passes DMARC, so at least one of SPF or DKIM must pass and be aligned with the From domain.
  • SVG Tiny Portable/Secure logo
    The file must be SVG Tiny 1.2 with the Portable/Secure profile: square viewBox, a title element, a solid background, no scripts, no external references, no animation and no raster images. Keep it under about 32 KB.
  • A Verified Mark Certificate for Gmail and Apple Mail
    Gmail, Apple Mail and Fastmail only show the indicator when a=… points at a valid VMC (or a Common Mark Certificate). Yahoo will display a logo without one. A VMC is issued by DigiCert or Entrust against a registered trademark and costs real money.
  • Both files publicly reachable
    The SVG and the PEM must be fetchable over HTTPS with no authentication, no redirect chain and a valid certificate on the hosting domain.

What is the BIMI Record Generator?

BIMI is the standard that puts your brand logo next to your messages in supporting inboxes. This generator writes the DNS TXT record it needs — v=BIMI1 with an l= tag pointing at your SVG logo and an optional a= tag pointing at your Verified Mark Certificate — and checks the URLs for the mistakes that stop it working.

  • Builds the v=BIMI1 record with l= and a= tags in the correct order
  • Checks both URLs for HTTPS, credentials, query strings and the right file extension
  • Warns when no VMC is supplied, which is the usual reason a logo never appears
  • Supports non-default selectors and explains the BIMI-Selector header they require
  • One-click declination record (v=BIMI1; l=;) for domains that want no indicator
  • Prerequisite checklist covering DMARC enforcement and the SVG Tiny P/S profile

How to use the BIMI Record Generator

  1. 1

    Enter the domain your mail is sent from and leave the selector as “default” unless you add a BIMI-Selector header to every message.

  2. 2

    Paste the HTTPS URL of your SVG Tiny Portable/Secure logo file.

  3. 3

    Add the HTTPS URL of your Verified Mark Certificate PEM if you have one — Gmail and Apple Mail need it.

  4. 4

    Fix any red errors, read the amber warnings, then copy the record and publish it as TXT at default._bimi.yourdomain.

About the BIMI Record Generator

BIMI is the standard that puts your brand logo next to your messages in supporting inboxes. This generator writes the DNS TXT record it needs — v=BIMI1 with an l= tag pointing at your SVG logo and an optional a= tag pointing at your Verified Mark Certificate — and checks the URLs for the mistakes that stop it working.

It confirms both URLs are HTTPS, that the logo path ends in .svg and the certificate path in .pem, warns when the a= tag is empty because Gmail and Apple Mail will not display a logo without a VMC, and explains what a non-default selector obliges you to add to every message. There is also a one-click declination record for domains that want no indicator at all.

Nothing is fetched and nothing is uploaded: the URLs are checked for shape in your browser, never visited. Publishing the record is only the last step — the prerequisites panel lists the DMARC enforcement and SVG Tiny P/S requirements that have to be in place first.

Frequently asked questions

What is a BIMI record?

A BIMI record is a DNS TXT record at default._bimi.yourdomain that tells supporting mailbox providers where to find your brand logo, and optionally the certificate that proves you own the trademark. It only takes effect on mail that already passes DMARC.

Do I need a Verified Mark Certificate for BIMI?

For Gmail, Apple Mail and Fastmail, yes — they will not show a logo without one. Yahoo has displayed logos without a VMC. A VMC is issued by DigiCert or Entrust against a registered trademark and is a paid, annually renewed certificate.

What DMARC policy does BIMI require?

Your organisational domain needs DMARC at p=quarantine or p=reject with pct=100. p=none never qualifies. Gmail additionally expects the enforcing policy to be on the organisational domain, not only on the subdomain that sends the mail.

Why must the BIMI logo be an SVG?

BIMI accepts only SVG Tiny 1.2 in the Portable/Secure profile — a square viewBox, a title element, a solid background, and no scripts, animation, external references or embedded raster images. Vector art scales to any inbox layout and the restricted profile removes the security risk of arbitrary SVG.

Why is my BIMI logo not showing up?

The usual causes are DMARC not at enforcement, a missing VMC, an SVG that fails the Tiny P/S profile, or an asset URL that is not publicly reachable over HTTPS. BIMI is also only ever evaluated on mail that passed DMARC, so authentication has to be solid first.

Is anything uploaded or fetched by this tool?

No. The URLs you type are only checked for shape — scheme, credentials, query string and file extension — inside your browser. The tool never visits them and never sends your record anywhere.

Related tools