How do I create a BIMI record?
Still have a question, spotted an error, or have a better explanation or a source we should cite?
Ready to publish your BIMI record? You're in the home stretch. This is just a single DNS TXT record that you'll drop into your domain's DNS settings.
The record goes at this exact location: default._bimi.yourdomain.com (replace yourdomain.com with your actual domain). You'll format it like this:
v=BIMI1; l=https://media.yourdomain.com/logo.svg; a=https://media.yourdomain.com/vmc.pem
But Here's what each field does. The v=BIMI1 part just signals the version. The l= field (that's 'l' for logo) points to your SVG Tiny Portable Secure logo file. The a= field (authority) points to your Verified Mark Certificate file if you have one.
Don't have a VMC yet? No problem. Just use a=; to show you're running self-asserted BIMI. Some mailbox providers like Yahoo will display your logo without the certificate.
And once you've built your record, log into your DNS registrar (GoDaddy, Cloudflare, Namecheap, Route53, or wherever your domain is hosted). Find the DNS records section, create a new TXT record, paste in the value above with your actual URLs, and save it. DNS changes take anywhere from a few minutes to 48 hours to propagate, so don't panic if it doesn't work instantly.
After you publish, verify the record is live with a BIMI validator tool to catch any syntax errors. Then check whether your mailbox provider supports BIMI so you know when to expect your logo to show up.
Contributors
Who worked on this answer
Every name links to their profile. Every company links to their site. Real people, real accountability.
