dotvitals

BIMI Record Generator

Generate a valid BIMI DNS record pointing to your SVG logo and optional Verified Mark Certificate.

The record goes under `default._bimi` at this name, and mailbox providers only look it up for the domain a message is from — and only while that domain's DMARC is enforcing. A logo published on the wrong name is never shown to anybody.

About the bimi record generator

A BIMI record is a TXT record at default._bimi.yourdomain.com pointing to your logo's HTTPS URL and, optionally, to a Verified Mark Certificate. This generator builds the record from those two URLs and checks the DMARC prerequisite before letting you finish, since a technically valid BIMI record still will not display anywhere if DMARC is not enforced. It reminds you of the logo's format requirements rather than validating the file itself in depth: it must be an SVG in the restricted SVG Tiny Portable/Secure profile, served over HTTPS, without scripts or external references, since most logo files created in general design tools need to be re-exported specifically to meet this restricted profile.

If you have a Verified Mark Certificate, the generator includes its URL in the a= tag; if you do not, it still produces a valid record without one, since a VMC is only required by some mailbox providers such as Gmail, and other providers display the logo from the SVG alone. Before finishing, it checks that your domain's DMARC policy is at p=quarantine or p=reject with no sp=none and no leftover pct tag, and flags it clearly if not, since publishing a BIMI record before DMARC is enforced produces a record that will simply be ignored by every mailbox provider that checks the prerequisite.

Testing the finished record with a BIMI checker confirms the DNS entry, the logo file and the DMARC prerequisite are all correctly aligned before assuming the logo will actually appear, since any one of those three pieces being slightly off is enough to keep the logo from displaying. Running that combined check right after publishing catches a mismatch immediately, rather than leaving you to guess weeks later why the logo never appeared despite every individual piece looking correct in isolation.

Common questions

Do I need a Verified Mark Certificate?
Only for some providers, notably Gmail. Others display the BIMI logo from a valid SVG and enforced DMARC policy alone, without requiring a certificate.
What logo format does BIMI require?
An SVG in the restricted SVG Tiny Portable/Secure profile, served over HTTPS, without scripts or external references; most logos made in general design tools need to be re-exported to meet this.
Why does the generator check my DMARC record?
Because BIMI requires DMARC enforcement at p=quarantine or p=reject as a prerequisite; a record published before DMARC is enforced will be ignored by mailbox providers that check for it.
Can I update the logo later without changing the DNS record?
Yes, as long as the logo URL itself stays the same and you replace the file at that URL; the DNS record only needs to change if the URL itself moves.