// how to fix
Show your logo in the inbox with BIMI
BIMI displays your brand logo next to your emails in Gmail, Yahoo and Apple Mail. It needs a strict DMARC policy, an SVG logo and often a certificate.
What it means
BIMI (Brand Indicators for Message Identification) is a DNS record that points to your logo. Supporting mailboxes show that logo as the round avatar next to your emails, instead of a plain letter.
BIMI is optional. It does not decide whether your email reaches the inbox; it rewards domains that are already well protected.
Why it matters
- Your emails are easier to recognize in a crowded inbox.
- Readers trust them more, and fake emails without your logo stand out.
- Gmail shows a blue check mark when you have a certificate for your logo.
What you need first
- DMARC at enforcement:
p=quarantineorp=reject, for your whole domain, without a lowpctvalue. Withp=none, no logo is shown. - SPF and DKIM passing for all your emails.
- A square logo in SVG format, in the special "SVG Tiny PS" profile. A normal SVG exported from a design tool is usually refused; your designer or a converter can produce the right version.
- A certificate (VMC or CMC) for Gmail and Apple Mail. It is issued by certificate authorities after checking your brand, and has a yearly cost. A VMC requires a registered trademark. Yahoo can show a logo without a certificate.
How to check
Use the Domain scanner at /domain-scanner. It looks for a BIMI record, shows the logo and certificate links, and warns you if your DMARC policy is too weak.
How to fix it
- Move DMARC to quarantine or reject safely. See the guide on moving DMARC from p=none.
- Prepare the logo in SVG Tiny PS, square, with a solid background, and host it on an
httpsaddress you control. - Get a certificate if you want the logo in Gmail and Apple Mail. Host the certificate file (a
.pem) onhttpsas well. - Add a TXT record named
default._bimi:
default._bimi.yourdomain.com TXT "v=BIMI1; l=https://yourdomain.com/logo.svg; a=https://yourdomain.com/bimi.pem"
What each part means
v=BIMI1: this is a BIMI record.l=: the address of your SVG logo.a=: the address of your certificate. Leave it empty (a=;) if you do not have one.
Check that it is fixed
DNS changes are not instant. Most are visible within a few minutes, but some providers take up to 24 to 48 hours.
Run the Domain scanner again: the BIMI line should be valid, with no DMARC warning. Then send emails to Gmail or Yahoo. Logos can take several days to appear, and mailboxes may wait until your domain has a good sending history.
More help: BIMI Group.
Check that it is fixed
DNS changes can take from a few minutes to a few hours. Then send a new test email or scan your domain again.
Related guides
- No SPF record on your domainYour domain does not say which servers may send email for it. Add one TXT record and receivers can tell your real emails from fakes.
- SPF error: too many DNS lookups (permerror)SPF allows at most 10 DNS lookups. Above that, the whole record breaks and receivers treat it as invalid. Here is how to slim it down.
- Several SPF records on one domainA domain must have only one SPF record. With two or more, SPF breaks for every email. Merge them into a single line.
- SPF fails: the sending server is not authorizedYour domain has an SPF record, but the server that sent your email is not in it. Find which service sent the email and add it.
- No DKIM signature on your emailsDKIM adds a digital signature that proves an email really comes from your domain. Turn it on in your email provider and publish its key in DNS.