What Is BIMI? A Small Business Guide to Inbox Logos

• Brand Indicators for Message Identification (BIMI) shows your brand logo right next to your emails in supported inboxes, but only after your mail passes authentication.
• Gmail needs a paid logo certificate to display your logo, while Yahoo and AOL can show one for free.
• Your email authentication has to sit at its strictest enforcement setting, because a relaxed policy won’t unlock the logo.
• BIMI is about trust and recognition, not faster delivery, so build it on top of solid sending habits.

For a small business or nonprofit, showing your logo next to your inbox messages is a fast way to stand out and look legitimate. It also builds on the authentication work many senders already tackled following Google and Yahoo’s updated sender rules.

In this guide, we break down the different BIMI setup options and walk through implementation step by step. We’ll also cover how to verify your logo is displaying correctly and check the rules that decide whether it appears at all.

What is BIMI?

BIMI is an email standard that lets your verified logo show up next to the messages you send, as long as those messages pass authentication. Think of it as a badge that ties your brand to mail you’ve proven is really yours.

It works in two parts. First, you (the domain owner) publish a small record in your domain’s DNS that points to where your logo lives. Second, when a supported inbox provider receives your message, it authenticates the mail and shows your logo if everything checks out.

Getting there requires email authentication. Those are the behind-the-scenes checks called Sender Policy Framework (SPF), DomainKeys Identified Mail (DKIM), and Domain-based Message Authentication, Reporting, and Conformance (DMARC). The BIMI implementation guide lays out these prerequisites, including a DMARC policy set to enforcement.

A working BIMI setup relies on these pieces:

• BIMI record: a small entry you add to your domain’s DNS that points to your logo file.
• SVG logo file: your logo saved in the SVG Tiny PS format the standard requires.
• Email authentication: the SPF, DKIM, and DMARC checks that prove your mail is really from you.
• DMARC enforcement: a policy set to quarantine or reject so providers trust your record.
• Mark certificate (which is optional): a Verified Mark Certificate (VMC) or Common Mark Certificate (CMC) that some inbox providers require before they’ll show your logo.

That kind of logo is a quick trust signal for a busy small business owner, because it says the message really came from you, not from spoofing or phishing attempts.

BIMI builds on the same authentication work you may have done to prepare for Google and Yahoo changes. It sits on top of good email deliverability habits, so treat it as a finishing touch rather than a fix.

Types of BIMI setups

There isn’t one single way to turn on BIMI. Your choice depends on your budget, whether your logo is trademarked, and which inboxes matter most to your readers.

Self-asserted BIMI

This option skips the certificate step. You publish your BIMI record, host an SVG logo, and keep your DMARC at enforcement, all without paying for extra verification.

It’s the lowest-cost way to get started, though support is limited. According to Yahoo’s BIMI requirements, Yahoo and AOL can display a self-asserted logo, while providers such as Gmail need a certificate. It’s a reasonable place to experiment before you spend money.

Here are some use cases:

• A yoga studio wants its logo in Yahoo and AOL without paying for a certificate.
• A small nonprofit tests BIMI on a tight budget before deciding to invest more.

VMC-backed BIMI

This setup adds a Verified Mark Certificate (VMC) to your BIMI record. The certificate confirms that your logo matches a registered trademark.

According to Gmail’s BIMI setup requirements, Gmail needs a VMC or CMC to show your logo, and a VMC is what earns the checkmark next to your name. You buy a VMC from an authorized provider such as DigiCert, GlobalSign, or SSL.com. A VMC needs a trademark registered with a recognized intellectual property office, so confirm the accepted offices with your issuer.

Check out these example situations:

• A growing bakery with a registered trademark wants the checkmark in Gmail.
• A salon with several locations wants its logo to show in the widest range of inboxes.

CMC-backed BIMI

This version uses a Common Mark Certificate (CMC) instead, which is built for logos that aren’t backed by a registered trademark. A CMC lets organizations without a trademark still qualify for logo display where CMCs are supported.

It verifies your logo through other means, so it can fit many nonprofits and community groups.

Here are two examples:

• A food bank whose logo was never trademarked wants it to appear where CMCs are supported.
• A community theater group wants inbox brand recognition without filing for a trademark.

Overall, certificates cost money and take time to issue, so confirm your provider supports the type you want before you buy.

How to set up BIMI

Setting up BIMI is a step-by-step process, and you can tackle it one piece at a time. If you’re new to email marketing, a few of these terms may be unfamiliar, and that’s completely normal.

Step 1: Turn on email authentication

Start by turning on SPF, DKIM, and DMARC for your sending domain, then set your DMARC policy to quarantine or reject.

These checks prove your mail is really from you, and BIMI won’t work until your DMARC sits at enforcement. Most email platforms like Constant Contact sets up SPF and DKIM for your sending domain, so you can focus on your DMARC policy and your logo.

Step 2: Create your logo file

If your logo only lives as a photo or a busy graphic, you’ll need a cleaner version first. Save it in the SVG Tiny PS format the standard requires, and keep the design simple and roughly square.

A clean logo reads well at small sizes on a phone screen, where most people check email. Maintaining consistent logos and colors across every campaign helps keep your overall branding aligned.

Step 3: Decide whether you need a certificate

Base your certificate choice on your audience’s primary email clients to balance cost against reach.

Choose between a self-asserted record, a VMC, or a CMC based on the inboxes you care about. Gmail and Apple Mail need a certificate, while Yahoo and AOL don’t, so match your spend to your audience.

Step 4: Publish your BIMI record

Once your logo and certificate are ready, add your BIMI record to your domain’s DNS so providers can find your logo. Your DNS is really just your domain’s address book, and this record simply lists where your logo lives.

After that, supported inboxes can look it up and start showing your logo on new messages. That’s the moment your setup goes from plan to reality.

How to check whether your BIMI logo is working

Your logo may not appear the moment you finish setup. A few quick checks tell you whether things are on track or need a fix.

Send test emails to Gmail and Yahoo

The fastest way to see results is to test with real accounts. Send yourself a message at a Gmail address and a Yahoo or AOL address, then look for your logo in the message list.

If nothing shows up at first, it happens to everyone, since providers can take time to refresh what they display. Give it a few hours before you assume something is broken.

Check your BIMI record and logo file

If your logo still isn’t appearing, start with your record and your file. Confirm that your BIMI record is published and that it points to a working SVG logo file.

A typo in the record or a logo saved in the wrong format is enough to keep your logo hidden. Free online BIMI checkers can read your record and flag common problems before you dig into your DNS settings again.

Watch your reputation and engagement

Providers weigh your sending history before they show a logo, so keep an eye on how recipients respond to you. Yahoo, for example, looks for sufficient sender reputation before it displays your logo.

Take time to check your email reputation and lean on your email reports to spot dips early. Steady engagement and clean lists give your logo the best chance to show.

Key BIMI guidelines for small businesses

Before you flip the switch, get clear on the rules that decide whether your logo actually shows.

Set DMARC to enforcement, not just none

BIMI needs your DMARC policy at enforcement, meaning quarantine or reject applied to 100% of your mail. As the official BIMI standard spells out, a none policy, or a partial rollout below 100%, isn’t accepted.

If your logo isn’t showing, an under-enforced policy is one of the first things to check. It’s the single most common reason a setup stalls.

Meet the Google and Yahoo sender requirements

If you send more than 5,000 messages a day to Gmail, you have to authenticate your mail and offer one-click unsubscribe. According to Google’s email sender guidelines, high-volume senders also have to keep their spam rate below 0.30%.

Here’s the catch: A DMARC policy of none satisfies this bulk-sender rule, but it doesn’t qualify you for a BIMI logo. Keeping clean lists and honoring unsubscribes helps you stay off spam lists and hold that rate down.

Match each inbox provider’s requirements

Each mailbox provider sets its own bar for showing your logo, so meeting the standard is only the start. Gmail requires a VMC or CMC and adds a checkmark for VMC-verified senders.

Yahoo and AOL can show a self-asserted logo when your DMARC is at enforcement, while Apple Mail requires a VMC. Knowing each provider’s rules keeps you from paying for more than your audience needs.

BIMI best practices

Protect your setup with a few simple habits:

• Authenticate first: Get SPF, DKIM, and DMARC authentication working before you touch anything BIMI-related.
• Keep DMARC at enforcement: Stay at quarantine or reject so providers keep trusting your record.
• Use a simple, square logo: Save it as SVG Tiny PS so it reads well on small screens.
• Stay consistent everywhere: Match your inbox logo to how you brand your emails across every campaign.
• Watch your reputation: Providers favor senders with clean lists and steady engagement.
• Test across inboxes: Check Gmail, Yahoo, AOL, and Apple Mail, since each one behaves differently.
• Weigh the certificate cost: Decide honestly whether a paid VMC or CMC is worth it at your size.
• Keep your records current: Update your DNS whenever your logo or domain changes.

Small, steady upkeep keeps your logo where your readers can see it.

Build trust and recognition in the box

You now know what BIMI is, how the setup options differ, and the rules that decide whether or not your logo shows up. Your next step is getting your authentication and brand visibility in order.

Start by reviewing our complete guide to email deliverability to protect your sending reputation, maintain clean lists, and keep your messages out of the spam folder. Then, explore how to brand your business to build a cohesive visual identity that carries seamlessly from your inbox logo across every customer touchpoint.

FAQs

1. Do I need a VMC to use BIMI?

Not always. Yahoo and AOL can show a self-asserted logo without a certificate, but Gmail and Apple Mail require a VMC or CMC.

2. Is BIMI free to set up?

A self-asserted setup is free beyond your normal domain costs. A VMC or CMC is a paid certificate you buy from an authorized provider such as DigiCert, GlobalSign, or SSL.com.

3. Will BIMI improve my open rates?

There’s no official evidence that BIMI raises open rates or delivery. It’s a trust and recognition signal, so pair it with strong content and clean lists.

4. How long does BIMI take to show up?

It varies. Once your record is live and your mail passes authentication, supported inboxes may still take some time to refresh before your logo appears.