BIMI of paypal.com.
See whether inboxes can show a domain's logo beside its mail, with every requirement checked and the logo previewed.
Looking up…
What a receiving server checks.
- DMARC at enforcement:
p=quarantinewithpct=100, orp=reject, on the sending domain and its organisational domain, and nosp=none. Gmail asks for pct=100 with either policy. - The record at
default._bimi.yourdomain:v=BIMI1; l=…; a=…, withl=the HTTPS address of the logo anda=that of the certificate. One record only. - The logo, an SVG Tiny PS file, and the certificate, whose embedded logo must be identical to the one at
l=.
Making the logo pass SVG Tiny PS.
- The
<svg>element needsversion="1.2",baseProfile="tiny-ps"and the SVG namespace, and noxoryattributes (design tools often add them). - A
<title>with the brand name must come first. Scripts,<style>, images, links, animation and outside files are not allowed. - Centre the logo in a square canvas and keep the file small: 32 KB or less is the advice. Gmail asks for at least 96 pixels.
VMC or CMC.
A Verified Mark Certificate proves a registered trademark; Gmail shows the logo with a checkmark. A Common Mark Certificate needs no trademark, only proof that the logo has been on your website for at least 12 months (checked on archive.org); Gmail shows the logo without a checkmark. Both last at most 398 days, so renew them on time.
What a pass here means.
Every published requirement checks out, so inboxes may show the logo. Each mailbox provider still makes its own decision. Hivex reads the certificate but does not verify its signature chain or revocation; receiving servers do that.
Questions people ask.
What is BIMI?
Brand Indicators for Message Identification: a DNS record that lets inboxes show a brand's logo beside its email, once the domain passes DMARC.
What do I need for my logo to show in Gmail?
DMARC at p=quarantine or p=reject with pct=100, a square SVG Tiny PS logo, a Verified Mark Certificate or a Common Mark Certificate, and a BIMI record pointing to both. Gmail adds a checkmark only for a Verified Mark Certificate.
What is the difference between a VMC and a CMC?
A Verified Mark Certificate needs a registered trademark. A Common Mark Certificate needs proof that the logo has been shown on your website for at least 12 months. Both are issued by approved certificate authorities.
Why is my BIMI logo not showing?
The usual causes are DMARC at p=none or a pct below 100, a logo that is not valid SVG Tiny PS, a missing or expired certificate, or a logo that differs from the one inside the certificate. Even when everything passes, each mailbox provider decides whether to show it.
Is BIMI free?
The DNS record is free. The certificate Gmail needs, a VMC or a CMC, is sold by certificate authorities.
Hivex index
Short names, still free to register.
Starting something new? Hivex keeps a live index of short, brandable .si names nobody has claimed yet, each checked with the registry.
From code, or an AI assistant.
Hivex's free JSON API and MCP server check domains, DNS and registration records from your own code or from AI assistants that speak MCP. No key needed.
More Email tools
- Email deliverability checkerMX, SPF, DKIM, DMARC, MTA-STS, TLS reporting and BIMI in one report.
- SPF checkerEvery include followed, the 10-lookup limit counted, mistakes named.
- DKIM checkerFinds keys at common selectors and checks their type and size.
- DMARC checkerPolicy, alignment and report addresses, checked and explained.
- SPF generatorPick your mail services, get one record that stays under 10 lookups.
- DMARC generatorPolicy, reports and alignment, with a safe rollout path.
- MTA-STS checkerPolicy record, policy file, MX match and TLS reports.
- Email blacklist checkerAn IP or a domain against live email blocklists.
- Email header analyzerWho sent it, SPF, DKIM, DMARC and every hop, in your browser.
- SMTP testGreeting, STARTTLS and sign-in methods on 587 and 465.
- Domain checkerIs a name free to register? Checked live on any extension.
Sources
- IETF draft: Brand Indicators for Message Identification (BIMI), version 14
- IETF draft: The SVG Tiny Portable/Secure profile, version 12
- BIMI Group: Minimum Security Requirements for Issuance of Mark Certificates
- Google Workspace Admin Help: Set up BIMI
- RFC 7489: Domain-based Message Authentication, Reporting and Conformance (DMARC)
By Hivex. Updated 10 October 2026. DNS is read live through Cloudflare's public resolver; policy files, logos and certificates are fetched live over HTTPS and never stored.
