Free email security tool
Enter where your SVG logo and, if you have one, your mark certificate are hosted. You get the exact TXT host and value, and the conditions that must also hold before a logo is shown.
Create a TXT record in your DNS zone with the host and value shown above. Then read it back with the BIMI Record Checker.
The domain's DMARC policy must be quarantine or reject and apply to all mail. The logo must be an SVG in the Tiny PS profile, served over HTTPS. Gmail and Apple Mail also require a mark certificate. Even then, each mailbox provider decides for itself whether to display the logo.
It does not open the logo or the certificate and does not read your DMARC record. It builds a syntactically valid record from the addresses you enter; whether the files behind them qualify is checked by receivers.
Add your domain to CloudSpex to monitor DMARC, SPF, DKIM and BIMI continuously and get alerted when a change would stop your logo from showing.
Start Monitoring FreeIt tells mailbox providers where to find your brand logo so they can show it next to authenticated messages from your domain. It is a TXT record at default._bimi.yourdomain.com.
For Gmail and Apple Mail, yes: they require a Verified Mark Certificate or a Common Mark Certificate. Some providers show a logo without one. The record is valid either way, but without a certificate most recipients will not see the logo.
The usual causes are a DMARC policy that is still p=none or applied to less than all mail, a logo that is not in the SVG Tiny PS profile, a missing certificate, or the mailbox provider deciding not to display it. Providers treat BIMI as a hint, not an instruction.
It lets a domain publish more than one logo. Almost every domain uses the selector default, which is what receivers look up unless a message header names another.