Will BIMI become mandatory?

Short answer: no. BIMI won't be formally mandated anytime soon. But that framing might be the wrong question to ask.

The more useful question is whether not having BIMI will start to look like a gap. Think about what happened with HTTPS for websites. Nobody passed a law saying every site had to use it. But browsers started flagging HTTP sites as "not secure," and suddenly the default changed. BIMI is following a similar arc.

Right now, Gmail and Yahoo Mail both support BIMI-based logo display. When a sender has BIMI set up correctly, their brand logo shows up next to the email in the inbox. When they don't, nothing shows. As more brands adopt it, that blank space will start to stand out (and not in a good way).

Here's the catch: BIMI has real prerequisites. You need DMARC at enforcement level, meaning p=quarantine or p=reject. Not p=none. That's a meaningful bar. A lot of senders haven't hit it yet, which is part of why BIMI adoption is still relatively low across the broader sending world. The most established providers also require a Verified Mark Certificate (VMC) from a recognized authority, which adds cost and a trademark verification step.

So the practical question is whether you should implement it now or wait. If your DMARC is already at enforcement and your brand invests in inbox presence, now is a fine time. You'll get logo display, and you'll stay ahead of the curve rather than scrambling later. If you're still working toward DMARC enforcement, fix that first. BIMI on top of a weak authentication setup doesn't help.

It won't become a rule. But it's trending toward becoming the expectation, and the gap between senders who have it and those who don't will get more visible over time.

Not sure where your DMARC stands? You can check your record instantly with our free DMARC parser. That's the real starting point before BIMI is even worth thinking about.