ė.email

BIMI · Internet-Draft, version 14

BIMI record checker: the logo record and the DMARC it depends on

Type a domain to read its BIMI record and the DMARC record beside it. The page says whether the record is valid, and whether the domain's DMARC policy lets a mail client use it.

The BIMI record checker

Try

The domain you type goes to two DNS-over-HTTPS operators, Google Public DNS and Cloudflare, straight from your browser, and to nobody else. It is not stored, and it is not put in this page's address. If you type an email address, only the part after the @ is used.

BIMI

default._bimi.<domain> · TXT

Not checked yet

The BIMI record, its logo and evidence locations, and whether the DMARC policy meets the conditions BIMI sets.

DMARC

_dmarc.<domain> · TXT

Not checked yet

The DMARC policy that applies to the domain, tag by tag, with the report addresses and whether outside receivers have agreed to them.

What a BIMI record is

BIMI, Brand Indicators for Message Identification, lets a domain publish the location of a logo that a mail client may show beside its authenticated messages. The record is a TXT record at default._bimi.<domain> that begins with v=BIMI1 (BIMI draft 14 §4.3). BIMI is not an RFC. It is described in an Internet-Draft; this page reads records against version 14 of that draft, dated 1 May 2026, which expires on 2 November 2026. A later version may differ.

v=BIMI1; l=; a=;

An explicit refusal to take part: both locations empty. The record of BIMI draft 14 §4.3.1.

How to read it

  • v=BIMI1 is the version, required and first.
  • l= is the location of the logo: a single https address, or empty. The only formats the draft accepts are SVG and SVGZ (BIMI draft 14 §4.3.2).
  • a= is the location of the evidence document, where a mark certificate is published. It is optional and must be an https address when present.
  • avp= says whether the domain prefers its logo (brand, the default) or the sender's personal avatar (personal); lps= turns parts of the address before the @ into selectors.
  • Both l= and a= empty is a statement, not an error: the domain declines BIMI for that selector.

Receivers "MUST NOT attempt to fix syntactical or capitalization errors" in a BIMI record (BIMI draft 14 §4.3), so a small mistake switches BIMI off completely.

The DMARC conditions

A logo is only considered for a message that passes DMARC, and only if the domain's DMARC policy has teeth. The draft rules BIMI out when the policy of the domain or of its Organizational Domain is p=none, when a subdomain policy is sp=none, and when the policy is p=quarantine with a pct tag other than pct=100 (BIMI draft 14 §7.1). The checker reads the DMARC record that applies to the domain and says which of these conditions, if any, stands in the way. The DMARC checker shows that record in full.

Where the record is looked for

A mail client asks for default._bimi.<domain>, or for another selector if the message names one in a BIMI-Selector header. If nothing is published there it asks once more at the Organizational Domain (BIMI draft 14 §7.2). The checker does the same for the selector default.

The common mistakes

  • A logo served over http, or as PNG or JPEG. Only https and SVG or SVGZ are accepted.
  • DMARC at p=none. The record is published and no client may use it.
  • Two records at the same selector. With more than one, BIMI is not applied.
  • A wildcard TXT record in the zone. It answers for default._bimi with something that is not a BIMI record; such answers are discarded.
  • Expecting the record alone to show a logo. Mail clients "have final control over the user interface" and may show another image or none (BIMI draft 14 §4.1).

What this checker does not tell you

It does not fetch the logo or the evidence document, so it cannot say whether the SVG meets the profile mail clients require or whether the certificate is genuine and current. And it cannot say which mail clients will show the logo: each sets its own requirements.