Why Your Brand’s Email Inbox Visibility Matters

You send emails that deliver value. But how often do they even get seen past the subject line?

That’s not a delivery issue — it’s a visibility issue. Inboxes today sort by trust, not just content. A brand with no visual identity gets treated like any other sender, even if it’s legitimate.

BIMI (Brand Indicators for Message Identification) is the standard that gives your brand a visual presence in the inbox. Think of it as digital signage: not just a logo, but a signal that says, “This is the real deal.”

Setting up BIMI isn’t about vanity. It’s about proving your brand’s identity through DNS records, building recognition, and improving inbox placement over time.

Key takeaways

  • BIMI makes your brand visible in inboxes using a verified logo displayed next to your email.
  • It relies on DNS records (TXT and CNAME) to confirm ownership and authenticity.
  • Implementing BIMI signals consistency and reputation — factors that inbox providers prioritize.

What BIMI Is and How It Works Under the Hood

Let’s cut to the chase: BIMI stands for Brand Indicators for Message Identification. It’s a DNS-based standard that lets you display your brand logo next to your emails in compatible inboxes like Gmail and Apple Mail.

Think of it as a visual trust signal. When someone opens your email, they don’t just see your name— they see your logo, right in the inbox. It boosts recognition and can help reduce spam perception.

The Mechanics: How BIMI Connects to Your Domain

At its core, BIMI works by linking your domain to a verified SVG logo using a DNS TXT record. This record lives at a specific path under your domain, usually v=BIMI1; followed by details about where the logo is hosted.

You don’t upload a logo directly to Gmail or Apple. Instead, you publish a digital fingerprint of it—hosted securely on a web server, typically via a content delivery network or your own site. The logo must be in SVG format and meet strict size and security guidelines to be valid.

When Does the Logo Actually Show Up?

Here’s the key: your logo only appears if your email passes authentication checks. That means SPF, DKIM, and DMARC must all be set up correctly and pass validation on each message.

Even if you have a perfect BIMI record, the logo won’t show up if your domain fails DMARC policy checks. Gmail, for example, requires a DMARC policy of either reject or quarantine to allow BIMI rendering. You can verify this with tools like Dmarcian or MXToolbox.

BIMI doesn’t improve deliverability on its own. It’s a branding feature, not a deliverability fix. But it does signal that you’re a legitimate sender, which reinforces trust over time.

If you’re managing bulk email sends, you’ll want to verify your domain and email list thoroughly. That way, you know you’re not just setting up BIMI—but setting it up on an authenticated, clean foundation. MailTester’s bulk verification checks for valid addresses, catch-all domains, and role accounts, helping you maintain sender reputation and reduce hard bounces.

BIMI isn’t a magic switch, but it’s a smart tool for brands that care about inbox presence. It’s part of a broader email authentication stack, not a replacement for it. Set it up correctly, and you’ll give your brand a small but meaningful edge.

The Technical Path to BIMI: DNS Setup Explained

Let’s be clear: BIMI isn’t a standalone feature. It only works when your email foundation is solid. You can’t set up BIMI without SPF, DKIM, and DMARC already in place. These three are the backbone of email authentication. If any one of them is missing or misconfigured, BIMI won’t activate — and your email might not even reach the inbox.

Authentication First: SPF, DKIM, DMARC Alignment

SPF checks which servers are allowed to send email from your domain. DKIM signs each message cryptographically. DMARC tells receiving mail servers what to do when a message fails either SPF or DKIM. Without these, BIMI has no trust anchor.

DMARC is especially critical. Your policy must be set to p=reject or p=quarantine. RFC 7483 outlines this requirement explicitly — you need to enforce alignment to signal intent to receivers. Just setting p=none won’t cut it. You’re effectively telling receivers, “I don’t care if the sender is fake.” That’s not how BIMI works.

Use tools like inbox placement tests to verify your current authentication stack. You’ll catch misconfigurations before you try to add BIMI.

Adding the BIMI Record via DNS

Once your authentication is locked down, you can publish the BIMI record. It’s a TXT record in your DNS, but not under your domain root. Instead, it goes under a selector: _bimi.yourdomain.com.

The content of the record starts with v=BIMI1; to declare the version. Then you specify the image URL — hosted on a public, HTTPS-enabled server. The image must be a 140x140 pixel SVG or PNG. It should be simple, scalable, and unmistakably your brand.

There’s no need to add this to every subdomain. The BIMI record is domain-level. Once added, it propagates globally in minutes to hours, depending on your TTL settings.

Some email clients will display your logo next to your messages. Not all do — Gmail and Yahoo are strong adopters. But even if only a few support it, BIMI still adds visual credibility and reduces the chance of your message being mistaken for spam.

Let’s be honest: BIMI doesn’t stop spam. But it helps reduce the friction between your brand and the inbox. And if you’re sending email at scale, a verified visual identity is a small step that can lead to meaningful trust.

Before you add BIMI, verify your email list’s health. Use bulk verification to clean your address book and ensure you’re not sending to invalid or high-risk addresses. A clean list improves deliverability — and that’s what BIMI depends on.

How to Generate a BIMI Record Using Your Domain’s DNS

Let’s walk through the steps to set up a BIMI record. It’s not magic — just careful DNS configuration. The goal is to prove your brand is authentic and show your logo in inboxes when supported.

Start with a valid, publicly accessible SVG file. No PNGs, no JPGs. SVG is required because BIMI relies on scalable vector graphics to render cleanly at different sizes. Keep it under 300x300 pixels and under 4KB in size. Larger files may be rejected by email clients.

Save it as logo-bimi.svg and host it over HTTPS. For example: https://yourdomain.com/images/logo-bimi.svg. This URL must be publicly accessible — no internal servers or authentication required.

Generate and Add Your BIMI TXT Record

  1. Generate the BIMI record string using this format: v=BIMI1; l=https://yourdomain.com/images/logo-bimi.svg; h=sha256-; s=yourdomain.com. The h=sha256- part is important — it’s where you’ll later add a hash to verify the logo’s integrity.
  2. Copied the full record. Log in to your DNS provider’s dashboard — Cloudflare, AWS Route 53, Google Domains, or any standard provider — and create a new TXT record.
  3. Set the name (or host) to default._bimi.yourdomain.com. This is the standard subdomain used for BIMI discovery.
  4. Enter the BIMI record value exactly as generated. Some providers require quotes around the value; make sure they’re included if needed.
  5. Save the record. Propagation can take 24 to 72 hours. During this time, the record is not active in all email systems.

Verify and Monitor Propagation

After saving, use a DNS lookup tool like MXToolbox or run dig TXT default._bimi.yourdomain.com to confirm the record exists and is correctly formatted.

Check that the logo URL loads properly in a browser. If it doesn’t, you’ll need to fix the hosting path or HTTPS configuration. BIMI won't work if the logo is unreachable.

BIMI is supported by major providers like Google, Yahoo, and Microsoft (Outlook). You can find the official specification in the IETF BIMI draft, which outlines the technical requirements.

While BIMI improves brand recognition and trust, it's not a deliverability fix. If your email is still bouncing, it’s not a logo issue — it’s your sender reputation. Use MailTester’s bulk verification to clean your list and check for invalid email addresses.

BIMI vs. Other Branding Signals: A Reality Check

You might think BIMI is a magic bullet for email branding—but it’s not. It doesn’t replace SPF, DKIM, or DMARC. In fact, BIMI only works if those foundational authentication protocols are properly set up and passing. Without them, BIMI won’t load, no matter how nice your logo looks.

The Foundation Comes First

Let’s be clear: BIMI is a visual signal, not a security layer. It relies entirely on the results of your email authentication stack. If your DMARC policy is too strict or your DKIM signing fails, BIMI gets ignored. You can’t skip the basics just to show off a logo.

BIMI isn’t like a branded image embedded in a newsletter. Those are client-side, fragile, and easily blocked. BIMI is baked into the email infrastructure—server-level, consistent across compliant inboxes like Gmail, Apple Mail, and Yahoo. Once set up, it shows up automatically for users who support it.

Think of it like a badge, not a banner. It doesn’t make your email more likely to land in the inbox—but it signals that you’re a legitimate sender. And that supports your sender reputation over time.

How BIMI Fits Into the Bigger Picture

It doesn’t improve deliverability by itself. If your sender reputation is poor or you're on a blocklist, BIMI won’t help. But it does help users recognize your brand at a glance, reducing the chance someone mistypes your name or deletes your email out of suspicion.

Google and Yahoo both support BIMI, and it’s defined in the IETF BIMI specification—meaning it’s an open, standardized feature. That’s why it’s more reliable than proprietary branding plugins that work only in certain clients.

Still, BIMI only displays if the receiving server supports it and the email passes authentication. Not every inbox shows it. That’s why we don’t recommend relying on BIMI alone for branding or trust.

But if you're already managing SPF, DKIM, and DMARC correctly—like the 98.9% accurate checks MailTester delivers in bulk verification—you’re in a strong position to add BIMI without risk. Use MailTester’s bulk verification to audit your list and confirm your authentication setup is solid before you dive in.

BIMI isn’t about flashing a logo. It’s about proving you’re who you say you are—once the foundation is already in place.

Common BIMI Setup Mistakes (And How to Avoid Them)

The Basics You Can’t Skip

BIMI isn’t a plug-and-play feature. It only works when email authentication is solid. Let’s go over what breaks it — and how to fix it before your logo vanishes from inboxes.

  • Using a non-HTTPS hosted logo — BIMI requires HTTPS. If your logo is served over HTTP, email clients will ignore it. This is not optional. Check your host: only secure connections are accepted by BIMI specifications.
  • Uploading unsupported formats — BIMI supports SVG only. PNGs, JPEGs, or WebP won’t render. Verify your SVG code is clean and valid — malformed code breaks rendering. Use a validator like the W3C Markup Validator to ensure compliance.
  • Publishing BIMI without enforcing DMARC — BIMI only activates when DMARC is set to reject or quarantine. If your DMARC policy is none, BIMI won’t appear, even if everything else is correct. BIMI is designed to work as a visual signal of trust — no authenticator, no logo.
  • Using relative paths — Never use /logo.svg. Always use a full HTTPS URL: https://yourdomain.com/logo.svg. Relative paths break DNS resolution and aren’t interpreted correctly by email clients.
  • Failing to publish the record at the correct selector — BIMI records must be published under _bimi.yourdomain.com, not just bimi.yourdomain.com or with a different subdomain. Double-check the exact selector in your DNS settings.

Why These Matter (and How to Test Them)

Mistakes here don’t just cause a missing logo — they weaken your sender reputation. A failed BIMI setup can signal disorganization to email providers and reduce inbox placement over time.

Let’s make sure your setup is solid before sending to your list. Use a tool like MailTester’s inbox-placement test to simulate how your email appears across inboxes, including BIMI support. It checks DNS records, DMARC policy enforcement, and logo visibility — all in one run.

Still unsure if your BIMI configuration is correct? Run it through a BIMI validation tool from MXToolbox. It’s one of the most trusted tools in deliverability and catches common misconfigurations instantly.

Once you’ve confirmed your DMARC policy is enforced and your BIMI record is correct, your brand logo will appear in supported inboxes — a subtle but powerful signal of legitimacy.

Don’t assume your setup is working. Validate it. BIMI is a trust signal. But trust only matters if it’s real.

Why BIMI Is a Trust Signal, Not Just a Visual

Let's be clear: BIMI isn’t just about making your emails look nicer. It’s about signaling legitimacy. When an inbox supports BIMI—like Gmail, Yahoo, or Proton—and your logo appears next to your message, it tells users: “This sender is verified.” That visual cue reduces hesitation. People open emails they trust, and BIMI helps build that trust from the first glance.

BIMI Strengthens Identity in High-Volume Sending

If you send thousands or millions of emails a day, the risk of confusion or impersonation grows. BIMI helps reduce that risk by anchoring your brand to the sender identity in a standardized, verified way. A real logo displayed in the inbox is harder to spoof than a simple sender name or domain. It tells the user, “This email came from you,” not from someone pretending to be you.

Over time, consistent BIMI presence reinforces sender identity across multiple inboxes. It’s not a one-time fix—it’s a long-term reputation signal. Inboxes that support BIMI use it as part of their broader trust model. Regular, correct BIMI deployment signals continuity and authenticity, which helps avoid reputation drops caused by mistaken sender identities.

How BIMI Plays Into Deliverability and Reputation

BIMI doesn’t guarantee inbox placement. But it supports it. When you maintain a consistent brand identity—visible through BIMI—you're reducing ambiguity for both users and inboxes. That clarity lowers the chance your messages get quarantined as phishing attempts, especially for transactional or marketing sends.

And let’s not forget what happens when you send emails with invalid or missing authentication. A brand logo alone won’t fix SPF, DKIM, or DMARC issues. But when your BIMI setup is working, it’s often a sign you've already met the foundational requirements. That’s why services like bulk verification come in handy—checking for valid, deliverable addresses helps prevent sender reputation damage, which BIMI can’t compensate for.

At its core, BIMI is about trust, not just branding. The technical layer—DNS records (TXT, BIMI, and DMARC)—is what makes it work. The logo itself only appears if all layers align. That alignment is the real win.

When you see an email with your brand’s logo in Gmail, that’s not coincidental. It’s proof that your identity has been validated across multiple systems. That’s a quiet but powerful win in a world where inbox trust is harder to earn than ever.

How MailTester Helps Validate Your Email Infrastructure Before BIMI

Before you turn on BIMI, you need to make sure your email setup is solid. BIMI relies on strong authentication and reputation signals, so sending to invalid, risky, or spam-prone addresses will backfire. Let’s be clear: BIMI doesn’t fix bad infrastructure — it highlights it.

Check Your Basics First

Start by scrubbing your list with MailTester’s real-time verification API or bulk check. It flags invalid addresses, catch-alls, and disposable domains before you send. You won’t know what’s wrong until you test — and even a few bad addresses can hurt your sender reputation. Using the bulk verification tool helps you clean large lists fast, with 98.9% accuracy on valid vs. invalid emails. Then, validate your authentication setup. BIMI works only when SPF, DKIM, and DMARC are all correctly configured. MailTester checks these on the fly and flags misconfigurations. If your DNS doesn’t align, BIMI won’t work, no matter how strong your branding. A common mistake: forgetting that SPF limits to 10 lookup records. If you’re beyond that, you’ll need a mechanism like SPF delegation — and MailTester highlights it.

Test Delivery and Reputation

Now test how your emails land. Run inbox-placement tests to see if messages reach inboxes across Gmail, Outlook, and Yahoo — not just spam folders. This reveals issues with routing, alignment, and reputation. If your emails are blocked or filtered, BIMI isn't the fix. You're better off using inbox-placement testing to catch problems before they impact real campaigns. You also need to check your domain’s history. Has it been flagged for spam recently? Is it on any blocklists? MailTester checks for real-world blacklisting status across sources including Spamhaus and MxToolbox. A domain with a past history of abuse won’t earn BIMI trust, even with perfect alignment. Finally, make sure you’re not sending to catch-all domains — those that accept any email for your domain. They mask invalid addresses and inflate bounce rates. They also make your domain look less secure, which undermines BIMI’s trust signal. Let’s be honest: BIMI is not a quick branding win. It’s a signal that your domain is trusted. That trust comes from consistent, clean delivery — not from fancy logos. Use MailTester to verify every component of your email stack, from the header to the endpoint. Only then should you consider enabling BIMI. You can’t skip the foundation — not even to show off a logo.

BIMI Is Not Universal: Know the Limitations

Let’s be clear: BIMI isn’t a universal fix. You can set it up perfectly, but that doesn’t mean everyone will see your logo. Here’s what you need to know before investing in BIMI setup.

Only a few inboxes support BIMI today

  • BIMI works reliably only in Gmail and Apple Mail — that’s it.
  • Outlook, Yahoo Mail, Proton Mail, and most other email clients do not render BIMI logos, even if the DNS record is correct.
  • Some users may delay seeing the logo even in Gmail or Apple Mail due to caching or client-side delay policies.

Your BIMI logo can be blocked before it’s even seen

  • If your email lacks proper authentication (SPF, DKIM, or DMARC), BIMI won’t show, regardless of your logo file.
  • Even if DMARC is published, BIMI only activates when the policy is set to reject or quarantine. If it's set to none or none with spf=pass only, the logo won’t appear.
  • Mobile apps (like Outlook Mobile or Apple Mail on iOS) may ignore BIMI entirely unless the app explicitly implements BIMI rendering — which is uncommon.
  • Some email clients ignore BIMI if the image is too large, poorly formatted, or not in SVG format (BIMI requires SVG).

So while putting in the work to set up BIMI is worthwhile for Gmail and Apple users, don’t treat it as a brand signal for the broader inbox ecosystem.

Here’s what you can do to improve your chances of success:

  • Use a bulk verification tool to validate your email list before sending — ensure all addresses have valid MX and DNS setups.
  • Check your SPF, DKIM, and DMARC records using tools like MxToolbox or DMARC Analyzer.
  • Confirm your BIMI record uses an SVG logo hosted on a secure, publicly accessible HTTP(S) URL with proper CORS headers.
  • Test your BIMI setup in real inboxes using inbox placement testing to see how it appears across clients.
“BIMI is a branding tool, not a delivery tool. Its value lies in recognition, not deliverability.”

That’s the reality: BIMI enhances visibility in select platforms, but you still need strong authentication, clean lists, and solid sender reputation to reach inboxes at all.

Conclusion: BIMI as Part of a Full Deliverability Strategy

BIMI is not a substitute for proper email authentication or list hygiene. It functions as a visual trust signal in inboxes, but only if the underlying foundation is solid.

Implement BIMI only after verifying SPF, DKIM, and DMARC records are correctly configured, and your sending domain has a clean reputation with a valid, engaged email list.

Test your BIMI configuration using inbox placement tools that reflect real-world delivery results, and monitor reputation metrics like spam complaint rates and engagement signals over time.

Ready to put this into practice? MailTester verifies emails with 98.9% accuracy — start with 100 free verifications.

Frequently asked questions

Does BIMI improve email deliverability?

No. BIMI does not guarantee inbox placement, but it can improve trust signals that support reputation and reduce spam complaints.

Which inboxes support BIMI?

Currently only Gmail and Apple Mail support BIMI. Most other clients do not display the logo.

Can I use a PNG logo for BIMI?

No. BIMI requires an SVG file hosted over HTTPS. PNGs are not accepted by the standard.

Do I need to buy a BIMI certificate?

No. BIMI does not require a certificate—it relies on your domain’s DNS record and proper email authentication.

What happens if my BIMI record is wrong or invalid?

The logo will not appear in compatible inboxes. BIMI only activates when the record is valid and authentication passes.

How long does BIMI take to appear after setup?

Typically 24 to 72 hours after DNS propagation, but some inboxes cache records and may delay display.

Can BIMI be used with transactional emails?

Yes. BIMI works for both marketing and transactional mail, provided the email passes authentication.

Is BIMI free to implement?

Yes. BIMI is a public standard. You only need to maintain a valid SVG logo and correctly configure your DNS.

What’s the difference between BIMI and email branding?

BIMI is a universal, DNS-based signal showing your logo in compliant inboxes. Email branding (e.g. custom headers) is client-side and not standardized.

Can BIMI cause emails to be flagged as spam?

No. BIMI itself does not affect spam scoring. However, if it's implemented poorly (e.g. with incorrect DNS), it may contribute to authentication failures.

Can I test BIMI without sending real emails?

Yes. Use MailTester’s inbox-placement testing to simulate how your email appears across multiple mail clients with BIMI enabled.

Does BIMI work with shared domains or subdomains?

Yes, but only if the BIMI record is properly published at the domain level (e.g. _bimi.example.com). Subdomains must have their own BIMI record.