BIMI Record Generator

Why generate a BIMI record?

A BIMI record displays your brand logo next to authenticated emails in Gmail, Apple Mail, and Yahoo. SPF, DKIM, and DMARC already do the hard part. BIMI is what makes that work visible in the inbox.

A logo beside the sender name lifts recognition and cuts the odds that someone falls for a lookalike. Inboxes without one all read the same. Yours stops looking generic.

BIMI also turns your DMARC project into something users can see. The authentication you deployed to block spoofing now doubles as a brand asset on every message you send.

How to use this BIMI record generator in 3 steps

Generating a BIMI record takes three inputs: your domain, your logo URL, and an optional VMC. The tool checks the syntax and returns a record ready to paste into your DNS zone.

Step 1: Enter your domain and logo URL

Enter the domain you want to configure for BIMI. Then add the HTTPS URL of your logo in SVG Tiny 1.2 P/S format.

The default selector is default. Use a custom selector only if you need different logos for different message types.

Step 2: Add a VMC (optional)

If you have a Verified Mark Certificate, add its HTTPS URL. Gmail requires a VMC to display your logo - without one, Gmail recipients won't see it.

VMCs are issued by DigiCert and Entrust. They require a registered trademark.

Step 3: Copy and publish the record

The tool generates the complete DNS record. Copy the value and create a TXT record with your DNS provider:

Host: default._bimi.captaindns.com
Type: TXT
Value: v=BIMI1; l=https://captaindns.com/brand/logo.svg; a=https://captaindns.com/certs/vmc.pem

Structure of a BIMI record

A BIMI record is a DNS TXT record published at selector._bimi.domain, as defined in the IETF BIMI draft:

v=BIMI1; l=https://captaindns.com/brand/logo.svg; a=https://captaindns.com/certs/vmc.pem

The a= tag is always included in the record, even when empty. An empty a= means the domain has no VMC.

Mandatory BIMI prerequisites

BIMI depends on a strict DMARC deployment (RFC 7489). Before publishing a BIMI record, verify that these prerequisites are met:

Configuration examples by DNS provider

Publish the record as a TXT entry at default._bimi in your DNS zone. The host and value stay identical from one provider to the next; only the control panel changes.

Cloudflare

1. Go to your domain's DNS zone
2. Add a TXT record
3. Name: default._bimi
4. Content: the value generated by the tool
5. TTL: Auto

Amazon Route53

1. Go to your hosted zone
2. Create a TXT record set
3. Name: default._bimi.captaindns.com
4. Value: the generated value in quotes
5. TTL: 3600

OVH

1. Go to the DNS zone in your control panel
2. Add a TXT entry
3. Subdomain: default._bimi
4. Value: the value generated by the tool

Real-world use cases

The scenarios below map the BIMI setups we see most often, from a first publish to declining a selector. Match yours and follow the steps.

Case 1: First-time BIMI setup

Context: You've configured DMARC with a reject policy and want to display your logo.

Steps:

1. Prepare your logo in SVG Tiny 1.2 P/S format
2. Host it over HTTPS on your server
3. Use this generator to create the record
4. Publish it to your DNS
5. Verify with the BIMI Checker

Case 2: Adding a VMC for Gmail

Context: Your BIMI works on Apple Mail but not on Gmail.

Diagnosis: Gmail requires a VMC. Your record has an empty a= tag.

Action: Obtain a VMC from DigiCert or Entrust (requires a registered trademark), then regenerate the record with the VMC URL.

Case 3: BIMI decline for a selector

Context: You want to explicitly decline BIMI for a specific selector.

Action: Leave the logo URL empty. The tool generates a decline record v=BIMI1; l=; a= that signals this selector does not participate in BIMI.

FAQ - Frequently asked questions

Q: What is a BIMI record?

A: BIMI (Brand Indicators for Message Identification) is a DNS TXT record published at selector._bimi.captaindns.com. It tells mail clients which brand logo to display next to your authenticated emails. The record contains your SVG logo URL and an optional VMC certificate URL.

Q: What are the mandatory prerequisites for BIMI?

A: BIMI requires three things. First, a DMARC policy set to quarantine (pct=100) or reject. Second, at least SPF or DKIM configured and aligned. Third, a logo in SVG Tiny 1.2 P/S format hosted over HTTPS. Without strict DMARC enforcement, BIMI will not work.

Q: Do I need a VMC to display my logo?

A: Not always. Apple Mail and Yahoo display BIMI logos without a VMC. Gmail, however, requires a VMC. VMCs are issued by DigiCert or Entrust and require a registered trademark.

Q: What format should the BIMI logo be?

A: The logo must use SVG Tiny 1.2 Portable/Secure (P/S) format. A standard SVG file will not work. SVG Tiny P/S prohibits scripts, external links, and interactive elements. Keep the file under 32 KB.

Q: What is a BIMI selector?

A: A selector lets you publish multiple BIMI records for the same domain. The default selector is default, published at default._bimi.captaindns.com. Custom selectors require a BIMI-Selector header in your emails to indicate which logo to use.

Q: Why isn't my BIMI logo displaying?

A: Start with DMARC: the policy must be quarantine or reject, not none. Then verify the record is published at selector._bimi.domain. Finally, confirm the logo is accessible over HTTPS in SVG Tiny P/S format. Use the BIMI Checker for a complete diagnosis. See our complete guide: BIMI Logo Not Showing: 5 Common Errors.

Q: How long before BIMI is active?

A: Allow 24 to 48 hours for DNS propagation after publishing the record. Mail clients also cache BIMI data, so logo display may take a few additional days.

Complementary tools

Useful resources

• BIMI Group — Official BIMI working group website
• Draft IETF BIMI — Brand Indicators for Message Identification technical specification
• RFC 7489 - DMARC — DMARC specification (BIMI prerequisite)
• Google BIMI Support — Google Workspace guide for configuring BIMI
• SVG Tiny 1.2 — W3C specification for the SVG Tiny format required by BIMI