Free tool
BIMI checker: will inboxes show your logo?
One run checks the BIMI record, DMARC, the logo file against SVG Tiny PS, the hosting and the VMC or CMC certificate. You see the logo the way Gmail, Apple Mail and Yahoo crop it, and you can fix the SVG right here.
What BIMI needs
- DMARC at enforcement. p=quarantine or p=reject, at 100 percent, for the domain and its organizational domain, with sp not set to none. This is the hard part: get there without blocking your own invoices and password resets.
- A logo in SVG Tiny PS. A strict SVG profile (draft-svg-tiny-ps): version 1.2, baseProfile “tiny-ps”, a title, no scripts, raster images or external references. Square, solid background, under 32 KB (Gmail, BIMI Group).
- HTTPS hosting. The file served with HTTP 200 and image/svg+xml, without redirects and without bot challenges that stop inbox fetchers.
- The BIMI record. A TXT record at default._bimi.yourdomain: v=BIMI1; l=logo URL; a=certificate URL (BIMI draft).
- A mark certificate. Gmail shows logos only with a VMC or CMC, Apple Mail with a VMC. Yahoo needs no certificate but shows logos only for bulk senders with good reputation.
VMC or CMC?
A Verified Mark Certificate (VMC) requires a registered trademark and brings Gmail’s blue checkmark. A Common Mark Certificate (CMC) needs no trademark: the logo must have been shown on your website for at least 12 months, proven through a web archive. Gmail shows logos with both, Apple Mail only with a VMC. Certificates come from a few issuers (list by the BIMI Group), and the logo embedded in the certificate must be the same file you serve at l=.
What this checker validates
- Record: exactly one, v=BIMI1 first, HTTPS l= and a=, avp, unknown tags, organizational-domain fallback, opt-out records.
- DMARC: policy, pct, sp and the organizational domain.
- Hosting: HTTP status, Content-Type, redirects, different answers to browsers and bots, speed.
- SVG Tiny PS: XML, profile and version, title and desc, forbidden elements (script, image, style, animation, links), event attributes, external references, root x/y, fixed-value attributes, preserveAspectRatio, size, square viewBox, minimum size, colors, background, text instead of outlines.
- Rendered in your browser: transparent corners and artwork outside the circle crop.
- Certificate: PEM, dates, domain, BIMI key usage, embedded logo and whether it matches l=, SCTs, CRL, chain order, VMC or CMC, mark type and issuer.
How I found Cloudflare’s broken BIMI
In September 2026 a BIMI check in a product I work on flagged cloudflare.com. The logo file was 44,212 bytes, well over the 32 KB limit; the bloat came from an Adobe Illustrator export. Looking closer, it was not a Tiny PS file at all: version 1.1, no baseProfile, a CSS style block and a viewBox of 199.98 × 90.58, nowhere near square.
As of 17 October 2026 this checker still sees the same file. The twist: Cloudflare’s VMC itself embeds a correct 200 × 200 Tiny PS logo of 1,377 bytes. Serving that exact file at l= would fix it. Run the check below and you can download that logo from the certificate yourself.
Questions
Does BIMI improve deliverability?
Not by itself. What helps is what BIMI requires: DMARC at enforcement with aligned SPF and DKIM. The logo is the visible reward and makes spoofed mail easier to spot.
Everything passes, but Gmail shows no logo. Why?
Gmail needs a VMC or CMC and may take up to 48 hours to pick up changes. Your mail must pass DMARC on the actual message, and very low volume or poor reputation can keep logos hidden.
Can I use my PNG logo?
No. BIMI accepts only SVG Tiny PS. A PNG has to be redrawn as vector shapes, then checked against the profile. Automatic tracing usually needs a human pass.
Why must the logo be square with a solid background?
Inboxes show it in a circle or a rounded square at small sizes. A wide logo gets shrunk to a sliver, and a transparent one picks up the inbox color, which breaks in dark mode.
Do you store domains or files?
No. The worker reads public DNS and downloads the logo and certificate the same way an inbox would, then returns the result. Uploaded files never leave your browser. Analytics count checks, not domains.
Which inboxes support BIMI?
Gmail, Apple Mail, and Yahoo with AOL are the big ones, plus some regional providers. Microsoft Outlook does not, according to email vendors.
Want BIMI set up for you?
From DMARC at p=none to your logo in Gmail: logo conversion, DMARC rollout read from reports, hosting, record and help with the certificate order. Scope and price after a short call.
