Does BIMI require a strict DMARC policy?

Yes. The logo only shows when the domain applies a DMARC “enforce” policy — quarantine or reject. At “p=none”, the BIMI record is ignored by inboxes.

Is the VMC certificate mandatory?

For Gmail and Apple Mail, yes: they require a VMC (Verified Mark Certificate), which proves that the logo’s trademark is registered. A few inboxes show the logo without a VMC, but the major providers require it.

Is the analysis a risk for the domain?

No. The checker reads only public data: DNS records and a logo meant to be displayed to recipients. Nothing is modified.

Brand logo and VMC

Free BIMI checker

The brand's logo, once DMARC is enforced.

BIMI shows a brand’s logo next to authenticated emails — but only when DMARC is in “enforce” mode. This checker reads the BIMI record and verifies the DMARC precondition, the VMC and the logo.

Free
No account
Instant result
Public data only

Analyze a domain

How it works

1
Enter a domain
Enter the domain to analyze. No account, no proof of ownership: the analysis reads only public DNS data.
2
Public DNS is read
The checker fetches the BIMI record, verifies the domain's DMARC policy, detects the VMC and retrieves the published logo.
3
Instant verdict
A clear verdict and the detailed findings appear on screen. A free account then lets you monitor changes over time.

Why it matters

BIMI is the reward at the end of email authentication: once DMARC reaches “reject”, the brand logo appears in the inbox — added visibility and an anti-phishing cue for the recipient. But the logo only shows when DMARC is enforced; without enforcement, even a perfect BIMI record stays invisible. It is the final step, after SPF, DKIM and a hardened DMARC policy.

No enforced DMARC, no logo

Until the DMARC policy is “quarantine” or “reject”, the logo never shows — even with a perfect BIMI record.

No VMC, no logo

Gmail and Yahoo require a VMC (Verified Mark Certificate). Without one, those inboxes ignore the record.

A non-compliant SVG is rejected

The logo must be a “Tiny Portable/Secure” SVG served over HTTPS. A wrong format or host drops the logo.

BIMI, VMC and the brand logo

BIMI (Brand Indicators for Message Identification) makes a brand’s official logo appear in the inbox, next to authenticated messages. It is declared with a DNS record “default._bimi.domain” that references a logo in SVG format (the l= value) and, in most cases, a VMC (the a= value) — the Verified Mark Certificate that proves ownership of the trademark. One condition is mandatory: the domain must apply a DMARC “enforce” policy (quarantine or reject).

Worth remembering — The logo appears only with a “quarantine” or “reject” DMARC policy. Gmail and Yahoo also require a VMC, and the logo must be a Tiny PS SVG served over HTTPS.

How the checker works

The checker reads the public DNS record “default._bimi.domain”, verifies that the domain’s DMARC policy (its own or inherited from the organizational domain) is in “enforce” mode, detects the presence of a VMC, then fetches the published logo to confirm it is reachable and in SVG format. It reads only public data — the DNS record and a logo meant to be displayed by inboxes. Nothing is modified.

Frequently asked questions

Does BIMI require a strict DMARC policy?: Yes. The logo only shows when the domain applies a DMARC “enforce” policy — quarantine or reject. At “p=none”, the BIMI record is ignored by inboxes.
Is the VMC certificate mandatory?: For Gmail and Apple Mail, yes: they require a VMC (Verified Mark Certificate), which proves that the logo’s trademark is registered. A few inboxes show the logo without a VMC, but the major providers require it.
Is the analysis a risk for the domain?: No. The checker reads only public data: DNS records and a logo meant to be displayed to recipients. Nothing is modified.

The brand's logo, ready to show

Analyze my BIMI

Free and instant — reads public DNS, no account required.