BIMI Explained: How to Get Your Logo Showing in Gmail and Yahoo Inboxes

BIMI is the reason some companies' emails show up in your inbox with their actual logo next to the sender name, instead of a plain letter avatar. It's one of the few email standards that has a directly visible payoff — recipients recognize a trusted logo faster than they read a sender name — but it also has the strictest prerequisites of any check we run, which is why most domains that could qualify simply haven't set it up.

What BIMI actually requires

BIMI (Brand Indicators for Message Identification) won't work in isolation — it's built on top of the authentication you should already have:

• DMARC at enforcement — your domain needs a DMARC policy of p=quarantine or p=reject (not p=none). Gmail and Yahoo won't display a BIMI logo for a domain that isn't actually enforcing its DMARC policy, since BIMI is a trust signal and an unenforced DMARC record proves nothing.
• A square SVG logo — specifically SVG Tiny Portable/Secure (SVG-PS), a restricted subset of SVG. A regular SVG exported from most design tools won't validate; it needs to go through a BIMI-specific validator/converter.
• A BIMI DNS record — a TXT record at default._bimi.yourdomain.com pointing to the hosted logo URL.
• A VMC, for Gmail specifically — Gmail requires a Verified Mark Certificate, a paid certificate from an authorized issuer that proves you legally own the trademark for your logo. Yahoo and some other providers will show a BIMI logo without one; Gmail currently won't.

Why most domains fail before they even reach the logo

In practice, the DMARC enforcement requirement is where most domains get stuck — not the logo or the certificate. A domain sitting at p=none (DMARC present but not enforcing, the single most common finding we've written about before) will never show a BIMI logo no matter how correct everything else is. If you haven't already moved your DMARC policy to quarantine or reject, that's the actual first step, not the logo.

Is it worth doing without the Gmail certificate?

If your customers are mostly on Yahoo, AOL, or other BIMI-supporting providers that don't require a VMC, yes — the DNS and logo setup alone gets you a visible result. If Gmail is your primary audience, the VMC is a real cost (typically a few hundred pounds a year from an authorized issuer) worth weighing against how much brand recognition in the inbox is actually worth to your business.