Table of contents
Get insights delivered straight into your inbox every week!

How To Set Up BIMI for Your Domain

Want your emails to stand out and look more trustworthy? Setting up BIMI (Brand Indicators for Message Identification) lets your brand logo appear next to your emails in inboxes, making them instantly recognizable. Here's what you need to know to implement BIMI:

  • Authentication Setup: Ensure your domain uses SPF, DKIM, and DMARC (set to “quarantine” or “reject”).
  • Logo Requirements: Use a square SVG file (under 32KB, Tiny PS profile) hosted on a secure HTTPS server.
  • Verified Mark Certificate (VMC): While optional for some providers, Gmail requires this certificate to verify your logo.
  • DNS Configuration: Publish a BIMI TXT record in your domain’s DNS linking to your logo and VMC.

Why BIMI matters: It boosts brand visibility, builds trust, and improves email deliverability by ensuring your emails are authenticated and recognizable. Follow these steps to set it up, and monitor your configuration regularly to keep everything running smoothly.

Prerequisites for BIMI Setup

To display your logo in recipients' inboxes, you need to prepare your email authentication setup and ensure your assets meet specific requirements. BIMI relies on established email authentication protocols and precise logo file specifications.

Required Authentication Records

Setting up proper authentication is crucial for both email security and BIMI implementation. You'll need SPF, DKIM, and DMARC records to ensure your emails are verified as legitimate and authorized.

  • SPF (Sender Policy Framework): This record specifies which IP addresses are allowed to send emails on your domain's behalf. For example, your SPF record might look like this: v=spf1 include:_spf.google.com include:mailgun.org ~all. Make sure all valid sending sources are included.
  • DKIM (DomainKeys Identified Mail): DKIM adds a digital signature to your emails, confirming they haven't been altered during transmission. You’ll need to publish your DKIM public key in your DNS for recipients to validate the signature.
  • DMARC (Domain-based Message Authentication, Reporting, and Conformance): To use BIMI, your DMARC policy must be set to "quarantine" or "reject." A sample record might appear as: v=DMARC1; p=quarantine; rua=mailto:dmarc@yourdomain.com. This policy ensures only authenticated emails are delivered, reducing the risk of spoofing.

BIMI's requirement for strict DMARC enforcement helps maintain security by ensuring logos are only displayed for verified domains, protecting against fraudulent emails.

Logo File Requirements

Your logo must meet specific technical standards to be compatible with BIMI. It needs to be in SVG format using the Tiny PS (Portable/Secure) profile, which is optimized for security and compatibility across email clients.

  • The Tiny PS profile restricts features like JavaScript, external links, and complex animations. Stick to basic shapes, paths, and text elements.
  • The logo should have a square aspect ratio (1:1) with equal width and height and a file size under 32KB.
  • Simplify any intricate designs to fit the SVG Tiny PS profile.

Your logo must also be hosted on a secure HTTPS server, ensuring email providers can access it for verification. Many organizations use content delivery networks (CDNs) for fast, reliable global hosting.

Verified Mark Certificates (VMCs)

Verified Mark Certificates (VMCs) add an extra layer of verification for your BIMI setup. While some email providers may display your logo without a VMC, others - like Gmail for most commercial senders - require it.

A VMC is a digital certificate that confirms your trademark rights and brand identity. Currently, DigiCert and Entrust are the main issuers of VMCs. The process generally takes several weeks and costs between $1,500 and $3,000 annually.

To obtain a VMC, you’ll need to:

  • Prove trademark ownership of your logo.
  • Undergo identity verification, similar to other digital certificate processes.
  • Have the certificate authority validate your legal right to use the trademark and confirm your organization’s identity.

While some providers like Yahoo may display BIMI logos without a VMC, Gmail’s requirements make this certificate essential for most businesses. As BIMI adoption grows, more email providers may follow suit.

For companies prioritizing email deliverability and brand protection, investing in a VMC is often worthwhile. Beyond enabling logo display across more platforms, it also strengthens your legal defense against trademark misuse in emails.

Once you’ve addressed these prerequisites, including coordinating BIMI with your email deliverability strategy, you’ll be ready to configure your BIMI record in DNS. Platforms like Warmforge can help streamline this process.

How to Set Up BIMI Records

Setting up BIMI (Brand Indicators for Message Identification) records can help your emails stand out and build trust with recipients. BIMI enables your brand logo to appear alongside emails in supported inboxes, improving visibility and authenticity. Here’s a step-by-step guide to getting started with BIMI:

  1. Ensure Your Domain Uses DMARC
    BIMI requires that your domain is protected by DMARC (Domain-based Message Authentication, Reporting, and Conformance). DMARC helps prevent email spoofing and ensures your emails are authenticated. Make sure your DMARC policy is set to either “quarantine” or “reject.”
  2. Prepare Your SVG Logo File
    BIMI requires your logo to be in an SVG (Scalable Vector Graphics) format. This file must meet specific requirements, including being square and free of text or additional design elements that could interfere with its clarity.
  3. Obtain a Verified Mark Certificate (VMC)
    A Verified Mark Certificate (VMC) is an optional but highly recommended step. A VMC proves that your brand logo is trademarked and verified, adding an extra layer of trust. You can obtain a VMC through authorized certificate authorities.
  4. Publish the BIMI Record in Your DNS
    Once your logo and VMC are ready, you’ll need to create a BIMI record and add it to your domain’s DNS. The BIMI record is a TXT record that specifies the location of your SVG logo file. For example, it might look like this:
    default._bimi.example.com. IN TXT "v=BIMI1; l=https://example.com/logo.svg; a=https://example.com/vmc.pem"
    
  5. Test and Monitor
    After publishing the BIMI record, test it to ensure it’s working correctly. Use tools to verify that your logo appears as expected in supported email clients. Monitor your email performance to see the impact of BIMI on open rates and user engagement.

Troubleshooting and Validation

Even with everything set up correctly, BIMI configurations can still encounter problems. Fixing these issues quickly is key, and validation tools can make the process easier.

Common Issues and Fixes

Logo format problems often trip up BIMI implementations. Make sure your SVG file meets requirements: it should be square, free of embedded raster images, JavaScript, animations, or external links. Avoid using any of these elements to keep things smooth.

DMARC alignment issues are another frequent challenge. Your DMARC policy must be set to either "quarantine" or "reject" - a "none" policy will disrupt your BIMI setup.

DNS propagation delays can cause temporary inconsistencies. Updates to DNS records may take 24–48 hours to fully propagate worldwide. During this time, some recipients might see your logo while others may not.

VMC certificate problems could block your logo from displaying, even if everything else is configured correctly. Double-check that your Verified Mark Certificate matches your logo precisely and is up to date. Set reminders for timely renewals to avoid interruptions.

Incorrect DNS record syntax is another common issue. Your BIMI record must follow the correct subdomain format, such as default._bimi.yourdomain.com, and all URLs in the record should be accessible via HTTPS. Even small typos can derail the entire setup.

Addressing these issues strengthens your email authentication efforts and ensures your logo displays as intended.

Monitoring and Testing Tools

Once you've resolved common problems, these tools can help you validate your BIMI configuration:

  • EasyDMARC BIMI Record Checker: This tool retrieves your BIMI record from DNS, validates the logo and VMC, and shows how your logo appears in different scenarios. It also provides detailed warnings and actionable recommendations for compliance issues.
  • Mailhardener BIMI Validator: Check your BIMI DNS record and VMC against the latest BIMI-10 draft requirements. This ensures your setup aligns with current standards.
  • MxToolBox BIMI Record Check: A simple lookup tool to verify that your BIMI records are properly configured and accessible. It integrates well with other DNS monitoring tools, making it handy for ongoing maintenance.
  • ZeroBounce BIMI Checker & Compliance Tool: This tool goes beyond basic validation, confirming compliance with BIMI standards while also displaying how your logo and VMC certificate appear to email providers. It’s especially useful for identifying quick fixes to common issues.

For a broader look at email deliverability, platforms like Warmforge offer extra insights. Warmforge includes placement tests and health checks to evaluate how your BIMI setup impacts email performance. Their free monthly placement test (for Google or Microsoft mailboxes) provides a real-world view of how your logo appears across email providers. Scheduling regular checks with these tools can help you catch problems - like expired certificates or DNS updates - before they disrupt your email campaigns.

sbb-itb-2939cd8

Managing and Monitoring BIMI Records

Setting up BIMI is just the first step. To ensure your logo displays properly and your email deliverability stays on track, you’ll need to keep up with maintenance and regular monitoring. Overlooking things like expired certificates, DNS changes, or logo updates can disrupt your BIMI setup and damage your sender reputation.

Keep an Eye on Your BIMI Setup

To make sure everything runs smoothly, it’s important to monitor your BIMI records for proper functionality across email clients. DNS records can change unexpectedly, certificates can expire, and email providers may update their BIMI requirements without warning.

  • Schedule monthly checks using DNS lookup and BIMI validation tools. Set reminders for VMC certificate renewals.
  • Keep track of your VMC expiration dates and renew them promptly to avoid interruptions.
  • After making updates, verify DNS propagation across different locations to ensure consistency.

Consider using automated tools like Warmforge’s health check to catch potential issues early. Document your BIMI configuration details so you can troubleshoot or maintain continuity when needed.

Incorporate BIMI into Your Email Strategy

Once you have a solid monitoring process in place, make BIMI an integral part of your broader email strategy. The insights you gather from monitoring can help improve your email deliverability. A strong sender reputation, effective email authentication, and consistent sending practices all work together to ensure your BIMI logo appears consistently.

If you’re launching a new domain or email address, align your BIMI setup with your email warm-up process. Tools like Warmforge’s email warm-up service can help by gradually increasing your sending volume in a way that mimics natural email behavior. This builds the reputation you need for consistent BIMI logo display.

When your brand undergoes changes - like a logo update - adjust your BIMI settings accordingly. Prepare a new Scalable Vector Graphics (SVG) file that meets BIMI requirements, update your logo, and obtain a new VMC to match your refreshed brand identity.

Testing is also key. Use tools like Warmforge’s monthly placement tests to see how your emails look across different providers and confirm that your BIMI logo displays correctly. Track performance metrics such as open rates, click-through rates, and spam complaints to integrate BIMI monitoring into your overall email analytics. Update your email templates to align with your BIMI logo, ensuring consistent branding from inbox previews to the full email content. Don’t forget to factor VMC renewals, logo updates, and monitoring tool subscriptions into your email marketing budget.

Key Takeaways for Setting Up BIMI

To display your logo using BIMI, your domain must meet strict authentication standards. This means implementing SPF, DKIM, and DMARC (set to "quarantine" or "reject") correctly.

Pay close attention to the technical details. Your logo needs to be in SVG format, adhering to specific dimensions and file size requirements. Additionally, most email providers require a Verified Mark Certificate (VMC) to validate your logo.

Regular validation is key. Conducting health checks can help you catch potential issues, like expiring VMCs or DNS changes, before they harm your sender reputation. These checks should be part of a broader email strategy to ensure smooth operations.

BIMI works best when integrated into a comprehensive email strategy. For instance, coordinating with domain warm-up and reputation-building efforts can enhance your results. Tools like Warmforge, which provide automated email warm-up and deliverability monitoring, can be a great way to streamline this process.

Keep in mind the ongoing costs involved, such as VMC renewals and monitoring services. Consistent testing and updates are essential to avoid disruptions in logo display and maintain email deliverability. A "set it and forget it" mindset can lead to unexpected interruptions that hurt your email performance.

FAQs

What are the benefits of using BIMI for your email marketing campaigns?

Using BIMI (Brand Indicators for Message Identification) in your email marketing strategy can bring several valuable benefits:

  • Increases brand visibility: With BIMI, your verified logo appears right in recipients' inboxes, making your emails stand out while building recognition and trust.
  • Strengthens email security: BIMI requires DMARC compliance, which helps safeguard your emails against phishing and spoofing, ensuring they come from a legitimate source.
  • Boosts engagement: Emails that are visually recognizable and secure are more likely to grab attention, leading to higher open rates and click-through rates.

Incorporating BIMI into your campaigns not only reinforces your brand’s credibility but also delivers a more secure and engaging experience for your audience.

Why isn't my BIMI logo showing up in email clients, and how can I fix it?

If your BIMI logo isn’t showing up, there are a few common culprits to check. These include incorrect DNS records, issues with your logo’s formatting, or problems with your DMARC configuration. Start by verifying that your DNS records are accurate and that your SVG logo complies with BIMI standards, including proper formatting and validation. Also, confirm that your DMARC policy is set to quarantine or reject, as these settings are mandatory for BIMI to work.

Another potential issue could be your email client caching an outdated logo. Try clearing the cache or refreshing the client to see if that resolves the problem. If you’re still stuck, using a tool like Warmforge can help pinpoint misconfigurations, improve deliverability, and safeguard your sender reputation.

Do I need a Verified Mark Certificate (VMC) for BIMI, and how can I get one?

A Verified Mark Certificate (VMC) isn’t mandatory for all email providers, but it plays a key role in fully enabling BIMI (Brand Indicators for Message Identification) to showcase your logo alongside your emails. Without it, even if BIMI is configured, your logo won’t show up.

Here’s what’s involved in obtaining a VMC:

  • Validate your domain and trademark: This step confirms your ownership and legal rights to the logo.
  • Achieve DMARC compliance: You’ll need to properly set up SPF and DKIM records as part of this process.
  • Purchase a VMC: Get the certificate from a reliable registration authority.

A VMC not only boosts your brand’s credibility but also enhances trust and professionalism. It’s a smart move for improving both email deliverability and brand visibility.