How to Implement BIMI in Gmail, Yahoo & Apple Mail?

(1 votes, average: 5.00 out of 5)
BIMI Configuration Guide

The three Signet BIMI resources will be reviewed first, so as to keep the introduction correct in Gmail, Yahoo, and Apple Mail rules. Even after confirming Outlook/Microsoft 365 as a receiver, Outlook doesn’t render BIMI as a receiver, making the claim inaccurate.

If the design of a competitor is next to the From name and Gmail adds a blue check, it does not imply you were losing a design battle. An authentication leak is being left by you.

After DMARC passes, BIMI overlays your official logo with the From line. One DNS record works for Gmail, Yahoo, and Apple Mail.

The regulations for awards are different for certificates. A no-certificate logo will be displayed by Yahoo. A CMC for Gmail logo or a VMC for Gmail logo + blue check. Apple Mail does require a VMC.

As receiving apps, Microsoft 365 and Outlook still can’t render BIMI. The verified logos lift opens and trust, but it relies on the inboxes that carry them.

The Stack Every Inbox Checks First

Before reading your logo, what do Gmail, Yahoo, and Apple Mail do? If one misses, the other two will show it:

  • Use SPF and DKIM for all senders across your domain, such as ESP, CRM, billing, and support.
  • Implement DMARC `p=quarantine` or `p=reject`, using `pct=100`. policy with `p=none` results in no XHTML logo being visible.
  • Make sure all messages are aligned with both SPF and/or DKIM.
  • Serve JPEG/SVG Tiny PS to a square SVG location with `baseProfile=”tiny-ps”` on an HTTPS server, as a `Content-Type: image/svg+xml`. Remove the strip scripts, fonts, filters, and external references.
  • Select the certificate to receive in your inbox: CMC will only provide Gmail with a logo for this certificate. VMC (registered trademark plus an approved CA) provides the blue check to Gmail and the Apple Mail logo. There is no need for a certificate when signing up with Yahoo.
  • Generate a TXT record for the domain `default._bimi.yourdomain.com` with contents `v=BIMI1; l=https://…/logo.svg; a=https://…/certificate.pem`.
  • When testing, lower the TTL to 300 seconds. All URLs: `l=` and `a=` must be encrypted in HTTPS.

Same record. Every receiver gets to choose what to demonstrate.

How to Set up BIMI in Gmail?

Gmail is the most rigid of the recipients in this pile. Any check failure fails silently: grey letter avatar, no bounce, no failure.

There are two results: A CMC displays the logo. A VMC displays the blue check and logo on desktop + mobile.

  • Be sure that DMARC is set to p=quarantine or p=reject and PCR=100. Favourite check RUA reports before flipping them down to get to know which senders will break.
  • Demonstrate alignment between SPF and DKIM on production mail. Do not test a test box only, but aggregate and review message headers.
  • Make the SVG tiny, with a square viewBox from the logo. Remove all Strip, Font, Filter, and External References.
  • Issue a CMC if you wish to use just the Gmail logo (as you would normally use without the T or trademark). Use to register a trademark (〜 Registered Trademark〜) if you want the blue check – DigiCert, Sectigo, or GlobalSign. Run the PEM chain on HTTPS.
  • Add a TXT record to the default._bimi.yourdomain.com hostname, including the l= (logo) and a= (certificate) directives.
  • Set TTL to 300 seconds. Wait for Gmail to fetch every 48 hours. Allow at least 7–14 days for complete rollout of the cache.
  • Check whether the avatar is not stored in a Gmail account. See the Inbox list and the header of the message.

Google-thanks-to Gmail will not display a checkmark with a CMC. No bounce, no error, just the basic letter avatar.

Also Read: How to Setup BIMI and Add a Verified Logo to Your Business Emails?

Gmail Errors that look like “BIMI isn’t working”

Gmail fails quietly. No, this avatar is not changed; this is what is referred to as the debug order, not really a redesign problem.

SymptomLikely causeFix
Nothing showsDMARC `p=none` or `pct` less than 100 Implement policy and set pct=100
On Yahoo or Apple you see the logo, but with Gmail you don’t. Missing or invalid `a=` (no CMC/VMC) Host PEM chain & add an HTTPS URL for a=
You’ve requested a check mark, and received just the logo. CMC instead of VMC Trademark the brand and create VMC with CA.
Record is still blank; looks fine. Insufficient HTTP URL, 404, or Wrong Content-Type? Serve both files over HTTPS, in this case as `image/svg+xml`.
SVG rejectedNot Tiny PS: Not square or includes Scripts Run a validator and convert to SVG Tiny PS.
It functioned and then disappeared! The certificate has expired, or the logo URL has changed, or DMARC has been relaxed. Remember to renew the policy before it expires and to freeze it.
Update not visibleAggressive cacheWait 1-14 days, then end to churn the DNS record

Gmail re-validates on a Cache Window instead of on each message.

Also Read: Verified Mark Certificate (VMC) vs Common Mark Certificate (CMC): Key Differences

How to Set up BIMI in Yahoo Mail?

The first to ship was Yahoo in 2018 with BIMI. Unlike a Blue Check, there is no separate “trust” check. Self-asserted records work. Even at any volume, in large quantities, it is still important.

  • Set p=quarantine or p=reject; Do not change to p=hardfail or p=softfail; use pct=100. Yahoo requires each message sent to be aligned and does not average failures over 1000 messages.
  • You will need to get the same square SVG Tiny PS logo that you already issued for Gmail.
  • Post the TXT record on yourdomain.com, using the default._bimi.yourdomain.com name prefix. Yahoo doesn’t need `a=`. If you’re using both Gmail and Apple Mail, keep the URL of the certificate.
  • Ensure that you’re sending at large bulk volume. It’s possible for a low-volume domain to perform just great and yet not display a logo at all.
  • Wait 48 hours, max, before changing anything else to allow Yahoo to catch up on their BIMI cache.
  • Check Yahoo on the web, iOS, and Android. The grey initial in the list view needs to be replaced by the logo, and the same should show in the message header.

Even Yahoo hasn’t been covered by a record yet, when companies like Apple and Google already have their apps. It is easiest to see the first three labelled Yahoo.

Common Yahoo Errors and Fixes

Yahoo falls short where it could have done more. The grey initial remains stationary – first troubleshoot the message path; then the logo file.

  • Published yesterday, no logo: cache. Allow 48 hours to pass before contacting DNS again.
  • Some outgoing messages have a logo, others don’t: One ESP isn’t delivering DKIM or alignment. Understand and resolve DMARC problems per sender.
  • Currently, exporting SVG Tiny PS and removing all the scripts, embeds, and external references from SVG from Figma or Illustrator is rejected.
  • Volume gate, which never displays a volume list, is a tiny list. Yahoo BIMI is for bulk programs.
  • Marked as expected: Yahoo doesn’t mark one. Only the logo is obtained.

How to Set up BIMI in Apple Mail?

BIMI is included in Apple Mail on the version of iOS 16+, iPadOS 16+, macOS Ventura+, and iCloud. It will be here, while the grey initials are changed to the logo.

No blue check, the way Gmail has it. A CMC is not an effective methodology. You need a VMC. Apple verifies the location of the server-side and requires that it be BIMI-compliant (iCloud needs to be BIMI compatible), after which the application displays the mark.

  • Make sure that DMARC is set to ‘p=quarantine’ or ‘p=reject’ with ‘pct=100.3′.
  • Match your SPF and DKIM attributes to match the From domain of every message sent out.
  • Get a match of a registered trademark to the mark and then issue a VMC from DigiCert, Sectigo, or GlobalSign.
  • Provide an SVG Tiny PS logo. Apple is stringent at smaller sizes and in dark mode – don’t go fancy or think too much; keep it simple and centred.
  • Publish the TXT record (default._bimi.yourdomain.com), setting the `l=` and `a=` values to the VMC PEM.
  • Send a test to iCloud Mail or to Mail on a supported OS. Please make sure that you test using Gmail for Mac or Spark and NOT Gmail for iOS or Spark.
  • Optional only: ‘Branded Mail’ (iOS 18.2+) is Apple-only. Not to be used as a replacement for the VMC.

No logo appears on the screens of pre-iOS 16 and pre-Ventura devices. Any third-party application that you use will not display an iPhone logo.

Three Mistakes that Block Apple Mail (plus extras)

Apple Mail fails silently. The initials stay grey, so check these three first.

  • The most common miss is 1. DMARC left at `p=none`. Implement policy and re-check.
  • The file is not Tiny PS; it is “valid SVG”. The logo will be killed by gradients, filters, fonts, and external CSS. Convert and re-host.
  • You have issued a CMC and not a VMC. You can see a logo in Gmail. Apple will not.

Be sure to check out the test path too:

  • Using the wrong application (Outlook or Gmail for iOS).
  • The receiving email address isn’t found on a BIMI path.
  • A bogus mark that fails to display at inbox size.

Learn about BIMI in Microsoft 365 and Outlook (what to expect)

The standard BIMI logos are not recognised by Outlook, Outlook.com, Hotmail, and Exchange Online as recipients. As of 2026, Microsoft hasn’t set a short-term date or a general-availability date.

Gmail, Yahoo, and Apple Mail will be supported by a correct BIMI and VMC. They don’t add a ‘logo’ to the Microsoft 365 inbox.

Microsoft has its own path: the Brand Indicators path. That doesn’t use your BIMI DNS record or your `a=` VMC.

If the majority of the pages are B2B or Microsoft 365 products, then sell BIMI as “For every consumer besides B2B & Microsoft 365, the logo gets displayed,” plus DMARC hygiene.

Also Read: How to Get Verified Mark Certificate?

What each inbox actually shows

One record does not mean one result. Each receiver decides what to paint after the same checks pass.

InboxLogoCertificateExtra badgeWait after publish
GmailYesCMC = logo; VMC = logo + checkBlue check (VMC only)24–72h, up to 14 days
Yahoo MailYesNot requiredNoneUp to 48h
Apple MailYesVMC onlyNone (logo is the signal)After DNS + VMC live
Microsoft 365 / OutlookNoN/AN/A—

Checklist Before you call it live

Unless development is in production and not in lab send, DO NOT call BIMI live until the following are true:

  • DMARC is enforcing with pct=100
  • All senders are in sync.
  • The SVG Tiny PS logo is used for the scoring.
  • If required, a VMC exists, and the above screenshot is shown.
  • A valid `default._bimi` TXT record has been provided.
  • To see just as many results as anyone else, you tested in Gmail, Yahoo, and the native Apple Mail, not just one inbox.
  • Stakeholders are aware that Outlook will not display it.

BIMI displays a reward for authentication. The last hop is the logo first, with correct DMARC.

Janki Mehta

Janki Mehta

Janki Mehta is a Cyber-Security Enthusiast having 7+ years of experience and knowledge about Encryption, Digital Certificates and Online Security, She helps online users to stay safe and protect their online presence. Explore SSL Errors, Installation Guide and Security Tutorials for Safe Browsing and Web Security Experience.