[email protected]
The cart is empty
DKIM, SPF, DMARC, and Now BIMI

DKIM, SPF, DMARC, and Now BIMI

DKIM, SPF, DMARC, and Now BIMI

BIMI (Brand Indicators for Message Identification) is a technology that allows organizations to enhance their email communication and increase user trust by adding verified logos to emails. This guide assumes that you already have a DMARC policy set up for your domain.

1. Preparing Your Logo in SVG 1.2 Format

  • Your logo must be in SVG version 1.2 format.
  • The file size of the logo must not exceed 32 KB.
  • The dimensions should be set to 256x256 pixels.

2. Obtaining a VMC Certificate from EUIPO

  • It is recommended to obtain a VMC (Verified Mark Certificate) for your logo from the European Union Intellectual Property Office (EUIPO). BIMI only works with a certificate from an authorized certification body that confirms you are the rightful owner of the brand.
  • Save the URL of your certificate, as you will need it for configuring the BIMI record.

3. Creating a DMARC Record with an Enforced Policy

  • If you don’t already have one, create a DMARC DNS record for your domain. The DMARC record should have a policy set to either quarantine or reject for maximum protection and to meet BIMI requirements.
  • Example of a DMARC record: 
    "v=DMARC1; p=reject; rua=mailto:This email address is being protected from spambots. You need JavaScript enabled to view it."
​

4. Creating a BIMI DNS Record

  • Create a TXT record in the DNS for your domain with the prefix default._bimi.

  • The record should contain the following attributes:

    • v=BIMI1; specifies the BIMI version.
    • l=LOGO_URL; URL of your logo in SVG format.
    • a=CERTIFICATE_URL; URL of the certificate from EUIPO.

  • Example of a BIMI DNS record:

    default._bimi.yourdomain.com. IN TXT "v=BIMI1; l=https://yourdomain.com/logo.svg; a=https://yourdomain.com/bimi_cert.pem"

5. Verifying the Configuration

  • After creating the BIMI DNS record, use DNS and BIMI verification tools to ensure that your record is correctly configured and accessible.
  • Also, verify that your DMARC policy is correctly set and functioning, as BIMI requires the DMARC policy to be at the quarantine or reject level.

6. Monitoring and Maintenance

  • Regularly check and update your BIMI and DMARC records to reflect any changes in your organization or policies.
  • Monitor DMARC reports to identify and resolve any email delivery issues.

Once successfully set up, your organization’s logo will be displayed alongside emails sent from your domain in supporting email clients, enhancing sender trust and helping to combat phishing and fraud.

Tip: An image to SVG v.2 converter can be found at: https://image2svg.com/