What Is BIMI and Is It Worth It for a Small Business?

BIMI (Brand Indicators for Message Identification) is a standard that lets a domain publish a logo in DNS so that supporting mailbox providers display it beside authenticated messages from that domain. It requires DMARC at an enforcing policy (quarantine or reject), a specially formatted SVG logo, and at Gmail and Apple Mail a Verified Mark Certificate that costs a significant annual fee and usually requires a registered trademark.

Quick summary

• A message arrives and passes DMARC with the From domain at p=quarantine or p=reject (pct=100).
• The receiver looks up the TXT records (short text lines in DNS used for email security) at default._bimi.yourdomain.com.
• The record points to an SVG logo URL and optionally to a VMC or CMC certificate.
• If the provider requires a certificate and it validates, the logo is fetched and shown in the inbox list and message view.
• Without a valid certificate, Gmail and Apple show nothing; Yahoo and Fastmail may show the logo from the SVG alone.

How BIMI works

1. A message arrives and passes DMARC with the From domain at p=quarantine or p=reject (pct=100).
2. The receiver looks up the TXT records (short text lines in DNS used for email security) at default._bimi.yourdomain.com.
3. The record points to an SVG logo URL and optionally to a VMC or CMC certificate.
4. If the provider requires a certificate and it validates, the logo is fetched and shown in the inbox list and message view.
5. Without a valid certificate, Gmail and Apple show nothing; Yahoo and Fastmail may show the logo from the SVG alone.

Example BIMI record

Type:   TXT
Host:   default._bimi
Value:  v=BIMI1; l=https://yourdomain.com/brand/logo.svg; a=https://yourdomain.com/brand/vmc.pem

Prerequisite DMARC record at _dmarc:
v=DMARC1; p=quarantine; pct=100; rua=mailto:dmarc@yourdomain.com

What it actually costs

• DMARC at enforcement: free, but it demands that every sender for your domain is aligned, which takes a few weeks of report reading.
• SVG Tiny PS logo: free if you can export it correctly; a square, no external references, no scripts, small file size.
• Verified Mark Certificate: sold by a small number of certificate authorities at a price in the hundreds of dollars per year, and it requires a registered trademark for the logo in most jurisdictions.
• Common Mark Certificate: a newer, cheaper option that accepts a logo in use for at least a year instead of a trademark; still an annual fee.
• Ongoing: renewals and re-issuing the certificate if the logo changes.

How to check whether it is working

• Run nslookup -type=txt default._bimi.yourdomain.com and confirm the record.
• Use the BIMI Group inspector tool to validate the SVG and certificate.
• Send a message to a Gmail and a Yahoo address and look for the logo in the inbox list.
• If Gmail shows a generic avatar, the certificate is missing, expired or does not match the logo hash.

Is it worth it for a small business?

For most small businesses, not yet. The visual benefit is a logo in place of an initial, and the price of a certificate exceeds what many teams spend on email altogether. The prerequisite, DMARC at enforcement, is worth doing on its own because it protects your domain from spoofing. Get that right, and revisit BIMI when the certificate cost drops or when your brand and volume justify it. A consistent From name and a good avatar in Google Contacts of your customers achieve most of the recognition for free.

The path with OquMail

OquMail sets you up with SPF, DKIM and a starting DMARC record at p=none, verified live in the dashboard. Once DMARC reports show only aligned sources, raise the policy to p=quarantine and then p=reject. At that point your domain is BIMI-ready, and adding the default._bimi TXT records (short text lines in DNS used for email security) is a single extra entry at your DNS host, with or without a certificate depending on which inboxes you care about.

A cheaper way to get the same recognition

Most recognition comes from consistency rather than a certificate. Use one From name and one address for each kind of mail, keep the same domain for years, and ask customers to save your address. When they do, their mail app shows the avatar from their contacts, which looks the same to them as a BIMI logo would, at no cost and with no DMARC prerequisite.

Common questions

Does BIMI improve deliverability?

Not directly. It is a display feature that requires good authentication; the authentication is what helps delivery.

Can I use a PNG or JPG logo?

No. BIMI requires an SVG in the Tiny PS profile with a solid background and no embedded raster images.

Which inboxes show BIMI logos?

Gmail, Yahoo, Apple Mail (iOS 16 and later), Fastmail and a few others. Outlook.com support has been limited and changing.