What is BIMI and do I need to set it up?

BIMI stands for Brand Indicators for Message Identification. It is the newest layer in the email authentication stack, and it displays your company logo next to authenticated emails in supporting inboxes. Gmail, Yahoo, Apple Mail, and Fastmail all support BIMI. Microsoft has been slower to adopt.

What BIMI does (and does not)

• BIMI displays your logo as a sender avatar in the recipient's inbox.
• It does not improve deliverability directly. The inbox-placement decision is already made before BIMI rendering happens.
• It does signal brand trust and may marginally improve engagement, since people are more likely to open visually-branded messages from known senders.
• It serves as a visible proof of authentication. If recipients see your logo, they know the message is real and authenticated.

Prerequisites for BIMI

• DMARC at `p=quarantine` or `p=reject` with pct=100. BIMI does not work on p=none.
• SVG logo in a specific format (SVG Tiny PS 1.2). Must be a perfect square.
• A Verified Mark Certificate (VMC) from an authorized issuer like DigiCert or Entrust. Costs around $1,500/year. Required by Gmail and Yahoo. Apple Mail accepts BIMI without a VMC.
• A BIMI DNS TXT record at default._bimi.yourdomain.com pointing to the SVG URL.

Is the VMC cost worth it?

Depends entirely on your brand visibility strategy:

• B2C brands with strong logo recognition. Yes. The visual real estate in inboxes is valuable, and BIMI is a direct signal of authenticity that fights phishing on your brand.
• B2B brands. Maybe. Your recipients are less likely to be visually scanning for logos, so engagement effects are smaller.
• Pre-launch or early-stage. No. Spend the $1,500 on DMARC enforcement and list verification first. Those produce direct deliverability gains.

BIMI is optional, DMARC is not

Don't conflate the two. DMARC at p=quarantine or higher is essential modern email hygiene and is required by Gmail and Yahoo for bulk senders. BIMI is a brand-visibility add-on. Get DMARC right first. See progressive DMARC setup.