What is the purpose of BIMI?

Still have a question, spotted an error, or have a better explanation or a source we should cite?

So you've set up DMARC alignment, and now you're wondering if there's a next level. That's where BIMI comes in. Its job is simple: get your logo to appear next to your sender name in Gmail, Yahoo Mail, Apple Mail, and other inboxes.

But BIMI isn't just about looking pretty. It's a trust signal. When recipients see your logo, they know two things: (1) your domain is verified and authenticated, and (2) this is actually you, not someone spoofing your brand. That logo only appears if you've got DMARC set to at least p=quarantine. It's a visible way to show that phishing attacks can't fake your identity.

Think of it as visual proof that you're legitimate. Next step: check if your current DMARC alignment is at p=reject or p=quarantine, because that's the foundation BIMI needs.

Contributors

Who worked on this answer

Every name links to their profile. Every company links to their site. Real people, real accountability.

Yanna-Torry (YT) Aspraki

Founder · Author

Review My Emails

Ask an AI · tailored to your setup

Get a personalized explanation for your specific email setup.

I read this on the Email Almanac about "What is the purpose of BIMI": "When recipients see your logo, they know your domain is verified and authenticated. That logo only appears if you've got DMARC set to at least p=quarantine." Help me understand how this applies to MY specific situation. I need: 1. A simpler explanation of the key concepts 2. What I should check or configure for my setup 3. Common mistakes to avoid 4. How to verify I have it right --- My details (fill in what applies the more you share, the better the advice): - Email platform/ESP: e.g. Mailchimp, SendGrid, Postmark, HubSpot, custom SMTP - Domain(s): your sending domain(s) - Sending volume: e.g. 5,000/month or 500/day - Domain registrar: e.g. GoDaddy, Cloudflare, Namecheap - DNS provider: same as registrar / Cloudflare / Route53 / other - Current records: SPF: yes/no, DKIM: yes/no, DMARC: yes/no - DMARC policy (if set): none / quarantine / reject - Multiple sending services?: list all ESP, CRM, transactional, etc. - Subdomains used for email: e.g. mail.example.com, em.example.com - Using email forwarding?: yes/no this affects SPF/DKIM - Any current authentication failures: describe if you see SPF/DKIM/DMARC failures

Edit the yellow boxes, then send to the AI of your choice.