BIMI (Brand Indicators for Message Identification) lets supporting mailbox providers show your logo next to authenticated messages. It only works when DMARC is enforced and the logo meets a strict SVG profile. Enter a domain, and a selector if you use something other than default.
Table of Contents
BIMI requirements in order
DMARC must be at p=quarantine or p=reject with pct=100 on the organisational domain. The BIMI record lives at default._bimi.example.com and looks like v=BIMI1; l=https://example.com/bimi/logo.svg; a=https://example.com/bimi/vmc.pem. The logo must be SVG Tiny Portable/Secure: baseProfile=”tiny-ps”, a <title> element, a square aspect ratio, no scripts, no external links or embedded raster images, and it should stay under 32 KB.
Gmail and Apple Mail only display the logo when the a= tag points to a Verified Mark Certificate (VMC) or, for Gmail, a Common Mark Certificate (CMC). Yahoo and some other providers show logos without one if the domain has good sending reputation.
Converting a logo to SVG Tiny PS
Most design tools export SVG 1.1. Open the file in a text editor, set version=”1.2″ and baseProfile=”tiny-ps” on the root element, remove x and y attributes from that root element, add a <title> with your brand name and delete any <script>, <image> or xlink:href to external files. Run this checker again to confirm.
BIMI checker at a glance
Official documentation: cPanel & WHM documentation, RFC 5321 (SMTP), Linux man pages.
Related guides: Warm up a new mail server IP or sending domain without landing in spam · Setting up MailBaby with cPanel/WHM Exim: router, transport, SRS and DKIM · Whitelisting MailBaby in cPanel greylisting, CSF and SpamAssassin.
Frequently asked questions
Why does BIMI need DMARC enforcement?
BIMI is a reward for strong authentication. Without p=quarantine or p=reject, anyone could spoof your domain and display your logo.
Is a VMC required?
It is required for the logo to appear in Gmail and Apple Mail. Some providers display logos without it. A VMC normally needs a registered trademark; a CMC does not but is only accepted by Gmail.
How long before the logo shows?
Providers cache BIMI lookups and apply their own reputation checks, so it can take days to weeks after everything validates.