Skip to content
tlspeek

Mail

BIMI checker

See whether a domain publishes a logo hint for authenticated mail, usually at default._bimi.

Leave the selector blank to read default._bimi. The logo file is not downloaded.

BIMI is a DNS record that points at a logo receivers may show next to authenticated mail. The record lives at a selector under _bimi, most often default._bimi.example.com. It is a TXT record starting with v=BIMI1. The l tag is the https URL of an SVG logo. An empty l tag means the domain declines a logo for that selector. The a tag, when present, is the https URL of an evidence document some receivers require before they show the mark.

This check reads that TXT record. It does not download the logo or the evidence file. A logo URL is checked only to see that it is https, without a username or password. Receivers still decide whether to show anything. Most of them also want DMARC at enforcement, with the mail aligned, before a logo appears. A BIMI record on a domain whose DMARC policy is none will not produce a logo in those inboxes.

How to read the result

The default selector is used when you leave the box blank. If your provider told you a different selector, type that label. A missing record means nothing is published at that name. More than one TXT record on the same name is ambiguous. A valid record with an https logo URL is the DNS half of BIMI. The evidence URL is optional in the record and required by some receivers. An empty l tag is a real setting, not a broken one: it says do not show a logo.

The logo file itself has rules this page does not test: it is a small SVG, with a square aspect, and without scripts. The evidence document, when you use one, is issued for the domain and is the piece a CAA issuevmc tag can constrain. Read the DMARC checker before you spend time on the artwork. Enforcement comes first.

Common mistakes

  • Publishing the logo URL over http. The l tag has to be https.
  • Putting the record on the apex as a bare TXT instead of under selector._bimi.
  • Expecting a logo while DMARC is still p=none.
  • Using a selector other than default and then looking up default.
  • Leaving a test logo in place after the brand file changed. Receivers cache.

BIMI is a display hint on top of authentication. DKIM and SPF still have to align, and DMARC still has to be enforcing, or the logo stays unused. This page tells you whether the DNS hint is published.

FAQ

Will my logo show up after this record is published?

Not by itself. Receivers also look for aligned, authenticated mail and, usually, an enforcing DMARC policy. Some also require the evidence document in the a tag.

Which selector should I use?

default, unless a mailbox provider told you otherwise. The name is selector._bimi.your-domain.

Do you download the SVG?

No. The check reads the TXT record and checks that a logo URL, if present, is https.

What does an empty l tag mean?

The selector exists and declines a logo. That is different from having no record.

Is the domain stored?

No. The lookup uses it and does not keep it.