generatepassword.eu

BIMI Record Checker

Check whether your brand logo can appear next to your e-mails in Gmail, Yahoo and Apple Mail.

Try an example

Looks good

Checked

  • OK

    DMARC is enforced (p=reject)

    This meets the BIMI requirement.

  • OK

    Logo looks like valid SVG Tiny PS

    Basic checks passed (profile, version, title, no scripts or external content). This is not a full schema validation.

  • OK

    BIMI certificate found

    Issued to Cable News Network, Inc. by DigiCert, Inc.. The chain and logo hash are not validated here.

BIMI record default._bimi.cnn.com

v=BIMI1; l=https://amplify.valimail.com/bimi/time-warner/R4Ezf5xK5ac-CNN.svg; a=https://amplify.valimail.com/bimi/time-warner/R4Ezf5xK5ac-CNN.pem

DMARC _dmarc.cnn.com

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email; ruf=mailto:Njk3@ruf.vali.email

Logo checks

Size1.7 KB
SVG Tiny PS profileyes
<title> presentyes
Scripts / external contentnone

Certificate

SubjectCable News Network, Inc.
IssuerDigiCert, Inc.
Valid until1 Sep 2027

Full DMARC check →

About this tool

BIMI (Brand Indicators for Message Identification) lets mailbox providers show your logo next to authenticated mail. It needs three things: DMARC at enforcement, a TXT record at default._bimi.<domain> pointing to an SVG logo, and — for Gmail and Apple Mail — a certificate proving you may use the logo.

This checker reads the record, checks your DMARC policy, downloads the logo and runs basic SVG Tiny PS checks, and inspects the certificate file if one is published.

How to read the results

  • DMARC — must be p=quarantine or p=reject; Gmail also requires pct=100.
  • l= — HTTPS URL of the logo in SVG Tiny PS format (version 1.2, baseProfile tiny-ps, with a <title>, no scripts or external references).
  • a= — HTTPS URL of a PEM file with a VMC (Verified Mark Certificate, needs a registered trademark, gives Gmail's blue checkmark) or a CMC (Common Mark Certificate, for logos in public use for at least 12 months).

Limitations

  • The certificate chain and the logo hash embedded in the certificate are not validated. The SVG checks are basic, not a full SVG Tiny PS schema validation.
  • Mailbox providers apply their own reputation rules; a valid setup does not guarantee the logo is shown.

Frequently asked questions

Do I need a VMC for BIMI?

Gmail and Apple Mail require a VMC or CMC. Yahoo can show logos without a certificate for senders with good reputation.

What is the difference between VMC and CMC?

A VMC requires a registered trademark and unlocks Gmail's verified checkmark. A CMC does not need a trademark but requires the logo to have been used publicly for at least a year.

How do I make an SVG Tiny PS logo?

Export a square SVG, then convert it with a BIMI SVG conversion tool so it has version="1.2", baseProfile="tiny-ps", a and no scripts.</p> </details> <details> <summary>Why doesn't my logo show even though everything passes?</summary> <p>Providers also look at sending volume and reputation, and caching can delay changes by days.</p> </details> <details> <summary>What does BIMI stand for?</summary> <p>Brand Indicators for Message Identification.</p> </details> <details> <summary>Where is the BIMI record?</summary> <p>A TXT record at default._bimi.yourdomain.</p> </details> </div> </article> </div> <aside class="tool-aside" aria-labelledby="related-h"> <h2 id="related-h" class="h3">Related tools</h2> <ul class="related"> <li><a href="/dmarc-checker/"><strong>DMARC Checker</strong><span>Find a domain's DMARC policy, check its syntax and see in plain language what receivers will do with failing mail.</span></a></li> <li><a href="/dkim-lookup/"><strong>DKIM Lookup</strong><span>Check the DKIM public key published for a selector, including key type, size and flags.</span></a></li> <li><a href="/spf-checker/"><strong>SPF Checker</strong><span>Validate a domain's SPF record, expand every include, and count DNS lookups against the limit of 10.</span></a></li> <li><a href="/mta-sts-checker/"><strong>MTA-STS & TLS-RPT Checker</strong><span>Check that sending servers are told to deliver your mail only over verified TLS, and that you receive TLS failure reports.</span></a></li> </ul> <p class="small"><a href="/tools/">All tools →</a></p> <h2 class="h4">Guides</h2> <ul class="plain-list small"><li><a href="/guides/dmarc-p-none-to-reject/">Moving DMARC from p=none to p=reject without losing mail</a></li></ul> <div class="api-note small"> <h2 class="h4">JSON API</h2> <p>This check is also available as JSON:</p> <code class="mono break">GET /api/v1/bimi-checker</code> <p class="muted">Rate limits apply. See <a href="/about/#api">API notes</a>.</p> </div> </aside> </div> </main> <footer class="site-footer"> <div class="wrap footer-grid"> <section> <h2 class="footer-h">Passwords</h2> <ul> <li><a href="/password-generator/">Password Generator</a></li> </ul> </section> <section> <h2 class="footer-h">DNS</h2> <ul> <li><a href="/dns-lookup/">DNS Lookup</a></li> <li><a href="/mx-lookup/">MX Lookup</a></li> <li><a href="/dns-propagation-checker/">DNS Propagation Checker</a></li> </ul> </section> <section> <h2 class="footer-h">Domains & IP addresses</h2> <ul> <li><a href="/whois-lookup/">WHOIS Lookup</a></li> <li><a href="/ip-whois-lookup/">IP WHOIS Lookup</a></li> <li><a href="/reverse-ip-lookup/">Reverse IP Lookup</a></li> <li><a href="/what-is-my-ip/">What Is My IP</a></li> </ul> </section> <section> <h2 class="footer-h">E-mail authentication & delivery</h2> <ul> <li><a href="/spf-checker/">SPF Checker</a></li> <li><a href="/dmarc-checker/">DMARC Checker</a></li> <li><a href="/dkim-lookup/">DKIM Lookup</a></li> <li><a href="/blacklist-checker/">Blacklist Checker</a></li> <li><a href="/email-header-analyzer/">Email Header Analyzer</a></li> <li><a href="/mta-sts-checker/">MTA-STS & TLS-RPT Checker</a></li> <li><a href="/bimi-checker/">BIMI Checker</a></li> </ul> </section> <section> <h2 class="footer-h">Web & TLS</h2> <ul> <li><a href="/ssl-checker/">SSL Certificate Checker</a></li> <li><a href="/http-header-checker/">HTTP Header Checker</a></li> <li><a href="/redirect-checker/">Redirect Checker</a></li> </ul> </section> <section> <h2 class="footer-h">About</h2> <ul> <li><a href="/guides/">Guides</a></li> <li><a href="/about/">About & methodology</a></li> <li><a href="/blocklist-sources/">Blocklist sources</a></li> <li><a href="/privacy/">Privacy policy</a></li> <li><a href="/terms/">Terms of use</a></li> <li><a href="/imprint/">Imprint</a></li> </ul> </section> </div> <div class="wrap footer-note"> <p>Free tools, no account needed. Passwords are generated in your browser and never sent to us. Lookup results are cached briefly and not stored.</p> <p>© 2026 Password and DNS Toolbox</p> </div> </footer> <script src="/assets/js/site.js?v=69bcd5a4" defer nonce="C6gSaQTZXvtYmXbzrw5i2T9N"></script> </body> </html>