BIMI Record Generator

Why generate a BIMI record?

You've invested in SPF, DKIM, and DMARC. BIMI is the visible payoff: your brand logo displayed in every recipient's inbox. Without it, your emails look the same as everyone else's.

Three reasons to set up BIMI:

• Brand visibility — Your logo appears next to every authenticated email in Gmail, Apple Mail, and Yahoo
• Increased trust — Recipients instantly identify your legitimate emails, which reduces phishing risk
• DMARC complement — BIMI turns your email authentication investment into a visible brand asset

How to use this BIMI record generator in 3 steps

Step 1: Enter your domain and logo URL

Enter the domain you want to configure for BIMI. Then add the HTTPS URL of your logo in SVG Tiny 1.2 P/S format.

The default selector is default. Use a custom selector only if you need different logos for different message types.

Step 2: Add a VMC (optional)

If you have a Verified Mark Certificate, add its HTTPS URL. Gmail requires a VMC to display your logo — without one, Gmail recipients won't see it.

VMCs are issued by DigiCert and Entrust. They require a registered trademark.

Step 3: Copy and publish the record

The tool generates the complete DNS record. Copy the value and create a TXT record with your DNS provider:

Host: default._bimi.captaindns.com
Type: TXT
Value: v=BIMI1; l=https://captaindns.com/brand/logo.svg; a=https://captaindns.com/certs/vmc.pem

Structure of a BIMI record

A BIMI record is a DNS TXT record published at selector._bimi.domain, as defined in the IETF BIMI draft:

v=BIMI1; l=https://captaindns.com/brand/logo.svg; a=https://captaindns.com/certs/vmc.pem

The a= tag is always included in the record, even when empty. An empty a= means the domain has no VMC.

Mandatory BIMI prerequisites

BIMI depends on a strict DMARC deployment (RFC 7489). Before publishing a BIMI record, verify that these prerequisites are met:

Configuration examples by DNS provider

Cloudflare

1. Go to your domain's DNS zone
2. Add a TXT record
3. Name: default._bimi
4. Content: the value generated by the tool
5. TTL: Auto

Amazon Route53

1. Go to your hosted zone
2. Create a TXT record set
3. Name: default._bimi.captaindns.com
4. Value: the generated value in quotes
5. TTL: 3600

OVH

1. Go to the DNS zone in your control panel
2. Add a TXT entry
3. Subdomain: default._bimi
4. Value: the value generated by the tool

Real-world use cases

Not sure where to start? These scenarios cover the most common BIMI deployments.

Case 1: First-time BIMI setup

Context: You've configured DMARC with a reject policy and want to display your logo.

Steps:

1. Prepare your logo in SVG Tiny 1.2 P/S format
2. Host it over HTTPS on your server
3. Use this generator to create the record
4. Publish it to your DNS
5. Verify with the BIMI Checker

Case 2: Adding a VMC for Gmail

Context: Your BIMI works on Apple Mail but not on Gmail.

Diagnosis: Gmail requires a VMC. Your record has an empty a= tag.

Action: Obtain a VMC from DigiCert or Entrust (requires a registered trademark), then regenerate the record with the VMC URL.

Case 3: BIMI decline for a selector

Context: You want to explicitly decline BIMI for a specific selector.

Action: Leave the logo URL empty. The tool generates a decline record v=BIMI1; l=; a= that signals this selector does not participate in BIMI.

❓ FAQ - Frequently asked questions

Q: What is a BIMI record?

A: BIMI (Brand Indicators for Message Identification) is a DNS TXT record published at selector._bimi.captaindns.com. It tells mail clients which brand logo to display next to your authenticated emails. The record contains your SVG logo URL and an optional VMC certificate URL.

Q: What are the mandatory prerequisites for BIMI?

A: BIMI requires three things. First, a DMARC policy set to quarantine (pct=100) or reject. Second, at least SPF or DKIM configured and aligned. Third, a logo in SVG Tiny 1.2 P/S format hosted over HTTPS. Without strict DMARC enforcement, BIMI will not work.

Q: Do I need a VMC to display my logo?

A: Not always. Apple Mail and Yahoo display BIMI logos without a VMC. Gmail, however, requires a VMC. VMCs are issued by DigiCert or Entrust and require a registered trademark.

Q: What format should the BIMI logo be?

A: The logo must use SVG Tiny 1.2 Portable/Secure (P/S) format. A standard SVG file will not work. SVG Tiny P/S prohibits scripts, external links, and interactive elements. Keep the file under 32 KB.

Q: What is a BIMI selector?

A: A selector lets you publish multiple BIMI records for the same domain. The default selector is default, published at default._bimi.captaindns.com. Custom selectors require a BIMI-Selector header in your emails to indicate which logo to use.

Q: Why isn't my BIMI logo displaying?

A: Start with DMARC: the policy must be quarantine or reject, not none. Then verify the record is published at selector._bimi.domain. Finally, confirm the logo is accessible over HTTPS in SVG Tiny P/S format. Use the BIMI Checker for a complete diagnosis.

Q: How long before BIMI is active?

A: Allow 24 to 48 hours for DNS propagation after publishing the record. Mail clients also cache BIMI data, so logo display may take a few additional days.

Complementary tools

Useful resources

• BIMI Group — Official BIMI working group website
• Draft IETF BIMI — Brand Indicators for Message Identification technical specification
• RFC 7489 - DMARC — DMARC specification (BIMI prerequisite)
• Google BIMI Support — Google Workspace guide for configuring BIMI
• SVG Tiny 1.2 — W3C specification for the SVG Tiny format required by BIMI