BIMI: can I show my logo next to my emails?

The short version

• First, DMARC at enforcement: p=quarantine or p=reject. BIMI doesn’t work at p=none.
• A logo file in the SVG Tiny Portable/Secure format, square, with no scripts or links.
• For Gmail, a mark certificate: a Verified Mark Certificate (VMC) if your logo is a registered trademark, or a Common Mark Certificate (CMC) if it isn’t. Both are paid.
• A TXT record at default._bimi on your domain pointing to the logo and certificate.
• Inboxes decide whether to show it. There’s no guarantee.

What does BIMI need, step by step?

These steps follow Google’s BIMI page, checked on October 31, 2026, and the BIMI Group FAQ.

1. Get DMARC to enforcement

Google’s page says the DMARC policy must be quarantine or reject, applied to all mail. If you still use pct, it must be 100. That alone takes most small businesses several weeks; see moving DMARC from none to reject. Every service that sends as your domain has to pass first.

2. Prepare the logo

• Format: SVG Tiny Portable/Secure (SVG Tiny PS), a strict version of SVG. Ordinary SVG exports from design tools usually need converting.
• Shape: square, with the logo centered so it still reads at small sizes.
• Size: Google requires at least 96 by 96 pixels, set in absolute pixels.
• No scripts, animation or links to outside files.

3. Buy a mark certificate (for Gmail)

• VMC: for logos registered as a trademark with an office that certificate issuers recognize. Google notes trademark registration can take 6 to 12 months if you haven’t done it. Gmail shows a checkmark next to senders verified with a VMC.
• CMC: Google’s page offers this for logos that aren’t trademarked. Issuers set their own eligibility rules.

The BIMI Group keeps a list of certificate issuers. Prices vary by issuer. Google says Gmail supports BIMI only with the PEM file the issuer provides, which bundles the logo and certificate.

4. Publish the BIMI record

Add a TXT record at default._bimi on your domain (the BIMI Group’s standard host name). Google’s example value is v=BIMI1;l=;a=https://images.yourbusiness.com/brand/certificate.pem (with your own address; this one is an example). The PEM file must be hosted somewhere public over https.

5. Wait and check

Send to a Gmail address and look at the sender avatar. Inboxes cache and decide on their own schedule, and some apply extra conditions, such as sending volume or reputation.

Which inboxes show BIMI logos?

Gmail does, with a VMC or CMC. The BIMI Group FAQ says Yahoo can show a logo from a record without a certificate, if your DMARC is at enforcement, you send bulk mail and Yahoo sees enough reputation and engagement, and that Apple requires a VMC. Support at other providers varies, and the BIMI Group says its list may be incomplete.

Why would a small business bother?

The honest answer: for most, BIMI is a finishing touch, not a priority. The real benefit comes from the work it forces: getting DMARC to enforcement, which asks receiving servers to send fake email in your name to spam or refuse it. Most large providers act on that, though each makes its own final call. If your logo then shows in Gmail, that’s a bonus that helps customers recognize you in a crowded inbox. If your mail goes to spam, BIMI won’t help, and you should fix authentication first; see the complete guide to business email that lands.

What are the common mistakes?

• Starting with BIMI. Without DMARC enforcement, the logo never appears.
• Using a normal SVG. It has to be SVG Tiny PS. Validation tools from issuers and the BIMI Group can check it.
• Buying a VMC before the trademark is registered. The VMC needs the registration.
• Expecting it everywhere. Many inboxes don’t show BIMI logos at all.
• Forgetting renewal. Certificates expire, and the logo disappears when they do.

What if the logo doesn’t show?

1. Check DMARC is at quarantine or reject with no partial pct.
2. Check the default._bimi record and that the logo and PEM URLs open in a browser over https.
3. Validate the SVG file.
4. Check the message passed DMARC: open it in Gmail, choose Show original, and look for DMARC: PASS.
5. Give it time. Inboxes don’t show logos instantly.

How much does it cost, and how long does it take?

The DNS record is free. The certificate is a yearly purchase from an issuer, and a trademark, if you need one for a VMC, has its own fees and can take 6 to 12 months, per Google. The DMARC work beforehand usually takes the longest.

How does E-3 handle this?

BIMI depends on DMARC at enforcement, so we’d look at your DMARC reports before anything else. If you’d like your logo in Gmail, ask us about what the certificate involves before anything is bought.

Related questions

• How do I move DMARC from none to reject safely?
• How do I read DMARC reports?
• Do the bulk-sender rules apply to me?
• Someone is sending fake emails as me. What do I do?
• Back to the complete guide to business email that lands

Sources

1. Set up BIMI (Google Workspace Admin Help)
2. FAQs for senders and ESPs (BIMI Group)
3. Mark Certificate issuers (BIMI Group)