Skip to main content
Emailens
Sign in

BIMI Checker

Looks up your BIMI record, checks DMARC is at enforcement, then fetches the logo and checks it is HTTPS, SVG, square, Tiny PS and script-free. It does not validate the VMC or CMC certificate.

@emailens/engine 0.17.2 · data last changed 27 Oct 2026

Example: example.com, a made-up domain with a sample record and logo. Check yours above.

passexample.com

BIMI logo is live and valid (SVG 1:1 square). VMC certificate is omitted.

Compliant for Yahoo Mail (based on sender reputation). For Gmail and Apple Mail checkmarks, a Verified Mark Certificate (VMC) is required via the 'a=' tag.

v=BIMI1; l=https://example.com/bimi/logo.svg

Sample BIMI logo
Sample logo · 96 px, and 40 px as a round and a square avatar

Logo

  • Pass: Logo URL (l=) declared

    https://example.com/bimi/logo.svg

  • Pass: Served over HTTPS

  • Pass: Loads: HTTP 200

  • Pass: Content-Type: image/svg+xml

  • Pass: Root <svg> element found

  • Pass: No scripts or external references

  • Pass: Square: 512×512

  • Pass: viewBox="0 0 512 512"

  • Pass: SVG Tiny PS: version="1.2" baseProfile="tiny-ps"

Record and DMARC

  • Pass: Record found at default._bimi

  • Pass: Starts with v=BIMI1

  • Pass: DMARC at enforcement: p=reject

  • Note: No certificate (a=)

    Gmail needs a VMC or CMC; Yahoo doesn't. Apple names VMCs.

Prerequisites by inbox

  • Fail: Gmail

    Needs a VMC or CMC in the a= tag.

  • Fail: Apple Mail

    Needs a certificate in the a= tag; Apple names VMCs.

  • Pass: Yahoo

    DMARC enforced and a valid logo; no certificate needed. Yahoo also weighs sending reputation, which a DNS check can't see.

The checker needs a computer screen.

What each check reads

Record
Looks up the TXT record at default._bimi on your domain, then on the organizational domain if a subdomain has none, and checks it starts with v=BIMI1.
DMARC
Reads your DMARC policy. p=reject, or p=quarantine at pct=100, counts as enforcement; p=none or a lower pct does not.
Logo
Fetches the l= URL over HTTPS (5 s, 128 KB cap, no private addresses) and checks the HTTP status and that the Content-Type is SVG.
SVG
Reads the root <svg> element: square viewBox (or width and height), version 1.2 and baseProfile tiny-ps, and no scripts, event handlers, javascript: URLs, DOCTYPE or ENTITY declarations, or external <use> references.
a=
Notes whether a certificate URL is published. It does not download or validate the VMC or CMC: issuer, expiry and the logo inside are not checked.

Setting it up from scratch? The BIMI guide covers every requirement, and DMARC policy modes covers getting to enforcement safely.

Your next question

Other free tools: SPF Record Checker · DKIM Checker · DMARC Checker · DMARC Report Reader · Email Header Analyzer · Email Spam Checker

Run this check on every email

A free account re-checks your records every day (1 monitored domain) and emails you when one changes: Watch your domain daily, free.

SPF, DKIM and DMARC monitoring (Dev). Dev is $9 a month. For one developer: 100 checks a day, an API key and a test inbox. See the plans →

Questions

What does a BIMI checker check?

This one looks up your default._bimi TXT record, confirms it starts with v=BIMI1, reads your DMARC policy, then fetches the logo the l= tag names and checks it loads over HTTPS as an SVG, is square, declares the SVG Tiny PS profile and contains no scripts or external references. It notes whether a certificate (a=) is published, but does not validate the certificate itself.

Why is my BIMI logo not showing?

The usual causes: DMARC at p=none, or quarantine with pct below 100; no VMC or CMC, which Gmail requires; a logo that is not SVG Tiny PS; a logo URL a CDN or firewall blocks for automated fetchers; or an expired certificate. Even a valid setup is not a guarantee: each provider applies its own criteria, Yahoo also weighs sending reputation, and Google says a new record can take up to 48 hours.

Do I need a VMC for BIMI?

For Gmail you need a mark certificate: a VMC, which requires a registered trademark and earns the checkmark, or a CMC for a logo you have used for at least 12 months, which shows the logo without the checkmark. Apple's documentation names VMCs. Yahoo shows logos without a certificate for senders with enough reputation and engagement.

What is SVG Tiny PS?

The SVG profile BIMI logos must use (Tiny Portable/Secure). The root element declares version="1.2" and baseProfile="tiny-ps", and the file has no scripts, animation, interactive elements or external references. Design tools don't export it by default. Google recommends a square logo on a solid background, 32 KB or less.

Does BIMI need DMARC p=reject?

Not necessarily: p=quarantine works too, but only at pct=100. Google and the BIMI draft both ask for p=quarantine or p=reject; p=none never shows a logo. Moving from none to enforcement is its own project, covered in the DMARC policy modes guide.