Email tool

BIMI checker

Enter a domain. You get its logo readiness like the example: DMARC, the BIMI record, the logo, the certificate, and mailbox by mailbox what is still required.

Example resultBIMI · paypal.com

Your BIMI setup passes our checks

Whether a logo shows is still each mailbox's decision, and mailboxes cache, so allow a few days.

DMARC policyOKDMARC enforces (_dmarc.paypal.com)
BIMI recordOKA BIMI record is published at default._bimi.paypal.com
LogoOKThe logo is valid SVG Tiny PS
CertificateOKThe certificate runs until 2027-07-12 and is trusted: it chains to DigiCert Verified Mark Root CA; revocation is not checked

Published BIMI record

v=BIMI1; l=https://www.paypalobjects.com/marketing/web/logos/paypal_ppe.svg; a=https://www.paypalobjects.com/marketing/web/logos/PPE_UK_DE_paypal_inc.pem

Where your logo can show

GmailLogo and checkmark can showYour VMC is trusted, so Gmail can show your logo with the blue checkmark.
Apple MailLogo can showYour VMC is trusted, so Apple Mail can show your logo.
Yahoo / AOLBulk senders onlyYahoo can show your logo without a certificate, but only for bulk senders with a good reputation (Yahoo decides).
FastmailLogo can showFastmail can show your logo; no certificate needed.
OutlookNot supportedOutlook does not support BIMI.

“Can show” is not a promise: each mailbox decides whether to show a logo, and caches its answer.

What we read · 1 DMARC record · logo · certificate

DMARC policy we read

_dmarc.paypal.com · policy reject · enforces

Logo

“PayPal” · 1.1 KB · valid SVG Tiny PS

Certificate

VMC (Verified Mark Certificate)

Valid until 2027-07-12

Its embedded logo matches the logo at l=

Trusted: it chains to DigiCert Verified Mark Root CA; revocation is not checked (each mailbox still decides)

Selector: default; only the default selector is checked; a custom selector named in a message's BIMI-Selector header is out of scope.

Example result

BIMI lets a mailbox show your brand logo beside your messages. It only works on top of DMARC at enforcement (quarantine or reject), with a square logo in the SVG Tiny PS profile published in a TXT record at default._bimi. Gmail and Apple Mail also need a mark certificate (a VMC, or for Gmail a CMC); Yahoo and Fastmail can show a logo without one; Outlook does not support BIMI. This checker reads all of it and tells you what each mailbox still requires. It never promises a logo will show: every mailbox makes that call itself. We verify a certificate’s chain up to the BIMI root authorities; revocation is not checked.

When do you need a certificate?

Mailbox	Without a certificate	With a certificate
Gmail	Without a certificateOnly per address: give each sending address its own Google Account with your logo as the profile photo, visible to Anyone. It must be the exact From address; a “Send mail as” alias does not count. The photo shows in the Gmail apps’ inbox list and in the opened message or hover card on the web, never domain-wide. It takes 24–72 hours, the mail must pass SPF or DKIM, and Google does not document it.	With a certificateThe BIMI logo for every address on the domain; a VMC adds the blue checkmark.
Apple Mail	Without a certificateApple Business “Branded Mail”: free, Apple verifies your business, and your mail needs DKIM and DMARC at enforcement.	With a certificateBIMI with a VMC.
Yahoo / AOL	Without a certificateBIMI without a certificate, for bulk senders only.	With a certificateThe same; no certificate needed.
Fastmail	Without a certificateBIMI without a certificate.	With a certificateNot needed.
Outlook	Without a certificateNot supported.	With a certificateNot supported.

A VMC needs a registered trademark; a CMC needs 12 months of public use of your logo. Either costs about $650–1,600 a year from a certificate authority, and its identity checks are steps only you can do.

Diagnose your domain

Check SPF, DMARC, DKIM, MX, DNS health, blacklists and domain & SSL expiry in one free scan — with the exact record to paste in to fix each problem.