BIMI DNS record examples

BIMI is enabled via a DNS TXT record at default._bimi for your sending domain. The record points to a hosted SVG logo URL, and optionally a VMC URL.

Before you publish BIMI: ensure SPF and DKIM are passing and DMARC is enforced (p=quarantine or p=reject).

Check SPF & DKIM • Verify DMARC

Example: basic BIMI record (logo only)

Many deployments start with a logo URL:

default._bimi  IN TXT  "v=BIMI1; l=https://example.com/.well-known/bimi/logo.svg;"

Example: BIMI record with a VMC

If your target mailbox provider requires a VMC, you may publish a certificate URL:

default._bimi  IN TXT  "v=BIMI1; l=https://example.com/.well-known/bimi/logo.svg; a=https://example.com/.well-known/bimi/vmc.pem;"

Hosting tips for the SVG

HTTPS: host the SVG on HTTPS and ensure it’s publicly accessible.
Stable URL: treat the logo URL like an API endpoint—avoid changing it frequently.
Correct content type: serve it as image/svg+xml if possible.
No redirects: some validators/providers are picky about multi-hop redirects.

Quick troubleshooting checklist

DMARC enforcement: you need p=quarantine or p=reject (not p=none). Check DMARC.
Correct domain: publish the BIMI record on the domain that is actually used for 5322.From / alignment.
DNS propagation: wait for TTL and check from multiple resolvers. Check BIMI record.
Logo validation: validate the SVG (Tiny 1.2, no embedded raster, square framing). Convert SVG.

Next: review BIMI logo requirements or whether you need a VMC.