MailParse/Tools/BIMI Record Checker
DNS over HTTPS

Free BIMI Record Checker

A BIMI record is a DNS TXT record at default._bimi.yourdomain.com that points supporting inboxes to your brand logo and Verified Mark Certificate. This tool looks up the record, parses its tags, and checks the logo URL, VMC, and DMARC policy.

Pair this with the SPF Record Checker and DKIM Checker to verify the underlying authentication BIMI relies on. Want this automated on every inbound email? MailParse captures authentication results automatically.

Check a BIMI record

Enter the domain and (optional) selector you want to validate.

DNS name queried

default._bimi.example.com

How to check a BIMI record

Step 1

Enter the domain

Type the domain you want to check and an optional selector. Most BIMI deployments use the default selector.

Step 2

Click check

The tool queries Cloudflare and Google DNS over HTTPS for selector._bimi.domain and inspects the TXT record.

Step 3

Review results

Confirm the BIMI tags, logo URL, VMC certificate, and DMARC policy. Apply the recommended fix for any failed or warning check.

Frequently asked questions

What is a BIMI record?

BIMI (Brand Indicators for Message Identification) is a DNS TXT record published at default._bimi.yourdomain.com that points receiving inboxes to your brand logo and, optionally, a Verified Mark Certificate. Supporting providers display that logo next to authenticated messages from your domain.

Do I need a VMC for BIMI?

Gmail and Yahoo require a Verified Mark Certificate (VMC) or Common Mark Certificate (CMC) before they will display the BIMI logo in the inbox. Some other providers honor BIMI without a VMC, but for full Gmail and Yahoo support you need an a= tag pointing to a valid VMC.

Which mailbox providers support BIMI?

Gmail, Yahoo, Apple Mail (iCloud Mail), Fastmail, La Poste, and several smaller providers display BIMI logos. Outlook and Microsoft 365 do not currently render BIMI but the record will not cause delivery problems.

Does BIMI require DMARC enforcement?

Yes. BIMI is only honored when the domain publishes a DMARC policy with p=quarantine or p=reject and a measurable rollout percentage. A monitor-only DMARC policy (p=none) is not enough and inbox indicators will not show.

How do I get a VMC certificate?

VMCs are issued by certificate authorities such as DigiCert and Entrust. You must own a registered trademark for the logo, complete identity validation, and supply an SVG Tiny PS logo. Once issued, the VMC PEM file is hosted at an HTTPS URL referenced by the BIMI a= tag.

Related tools

Need authentication validation on every inbound email?

MailParse captures headers, SPF, DKIM, and DMARC results, MIME structure, and webhook-ready JSON so you can debug deliverability without manual DNS lookups.