Free BIMI Record Generator: Load Your Live Record

Generate your record

Enter your domain, the HTTPS address of your SVG logo, and your VMC certificate address if you have one. The generator assembles the record and tells you exactly where to publish it.

Record ready? Have a specialist double-check it — the $49 Email Domain Trust Audit is a fixed-output report with risk notes and prioritized next steps.

After you publish

Publish it as a TXT record at default._bimi + your domain (for example default._bimi.example.com) — not at the domain root.
Enforce DMARC first — BIMI is gated on DMARC enforcement. If your DMARC policy is still p=none, generate a rollout record with the Free DMARC Record Generator and climb p=none → p=quarantine → p=reject before expecting a logo.
Wait for the logo to appear — DNS propagation takes minutes to hours, and mailbox providers verify and cache your record on their own schedule. Weeks, not days, is normal for first display.
Verify the record itself — once DNS propagates, run the Free BIMI Record Checker to confirm the v=BIMI1 record parses cleanly before you wait on the logo.

Publish it at your DNS provider

The record is the same everywhere: a TXT record at default._bimi + your domain (for example default._bimi.example.com), pasting the value from the generator. Only the buttons differ. Three common providers:

Cloudflare — Dashboard, your domain, DNS, Records, Add record. Type: TXT. Name: default._bimi. Content: paste the generated record. TTL: Auto. Save.

GoDaddy — My Products, DNS next to your domain, Add. Type: TXT. Host: default._bimi. TXT Value: paste the generated record. Leave the TTL default. Save.

Amazon Route 53 — Hosted zones, your domain, Create record. Record name: default._bimi. Record type: TXT. Value: paste the generated record inside double quotes (Route 53 requires them). Save.

Then confirm the plumbing is actually ready: BIMI sits on top of SPF, DKIM, and an enforced DMARC. Run the Free Email Domain Trust Checker and confirm DMARC reads enforced before you wait on the logo.

Complete the authentication set

BIMI is the fourth leg: it only displays when SPF, DKIM, and an enforced DMARC are all in place. Generate the rest of the set, free, in your browser:

Prefer done-for-you?

If you'd rather hand this to a specialist, submit your domain for the Email Domain Trust Audit — a fixed-output report with risk notes and prioritized next steps. When records are broken and you want them fixed, the 99 Mailbox Rescue gets them fixed within 48 hours, zero tech touch.

Frequently asked questions

What is BIMI? BIMI (Brand Indicators for Message Identification) puts your brand logo next to your emails in the inbox. It is a DNS TXT record — v=BIMI1 plus the address of your logo — published at default._bimi.yourdomain. Mailbox providers that support BIMI fetch the logo and display it once your domain passes their checks.

What do I need before BIMI displays my logo? DMARC must be enforced: a DMARC policy of p=quarantine or p=reject, with SPF and DKIM aligned and passing. At p=none (monitoring only) mailbox providers will not display your logo — BIMI is the reward for finishing the authentication work.

Where do I publish the BIMI record? Publish it as a DNS TXT record at the default._bimi subdomain of your domain (for example default._bimi.example.com), not at the domain root. DNS changes can take minutes to hours to propagate.

What logo format does BIMI require? An HTTPS URL pointing to an SVG file in the SVG Tiny P/S format the BIMI standard requires. The logo should be a registered trademark of your brand — that is what the Verified Mark Certificate certifies.

Do I need a Verified Mark Certificate (VMC)? Gmail requires a VMC issued by a Mark Verifying Authority before it displays your logo. Other mailbox providers may display your logo without one. You can publish the BIMI record without a VMC today and add the certificate later — the generator leaves the a= tag out when you skip it.

Put Your Logo in Inboxes with BIMI