Free email-authentication toolkit
Enter a domain to fetch its BIMI record over DNS-over-HTTPS and see whether the logo will actually be displayed — not just whether the record parses. DMARC enforcement, the certificate tag and Gmail's stricter requirement are all checked. No signup, no backend: everything runs right here in your browser.
Enter a domain to look up its BIMI record. Leave Selector blank to use the standard default selector.
Checked at exactly this name — there is no organisational-domain fallback, so a subdomain is reported on its own.
The basics, briefly
BIMI (Brand Indicators for Message Identification) lets a domain publish a logo that supporting mailbox providers display next to authenticated email. The record is a DNS TXT record at selector._bimi.yourdomain.com pointing to an https:// SVG logo, and optionally a certificate that proves ownership of the mark.
BIMI requires DMARC to be enforced — p=quarantine or p=reject — at the domain the mail is sent from. A record published under a monitoring-only p=none policy will never trigger a logo, no matter how well-formed it is. Gmail additionally requires a Verified Mark Certificate (VMC) or Common Mark Certificate (CMC) in the a= tag; other providers such as Apple Mail, Yahoo, AOL and Fastmail will show a self-asserted logo without one.
It checks that the record parses, that the required v= and l= tags are present and well-formed, and that DMARC is at enforcement. It cannot verify that a certificate is valid or that the logo meets the SVG Tiny Portable/Secure profile mailbox providers require — neither can be checked from a browser. Your certificate issuer confirms both.