What is BIMI? Brand logos in the inbox
BIMI is how some inboxes display your logo beside messages that pass DMARC. The DNS record points to an SVG (and often a certificate) so receivers can trust the mark.
What CrowWake checks
We look up TXT at default._bimi.yourdomain for a record that includes v=BIMI1. Missing BIMI is a warn—many domains never publish it. When present, we summarize the published record so you notice accidental deletes. The free BIMI checker uses the same DNS lookup with no login. For the repeat “watch this hourly” job, see the dedicated BIMI monitoring guide.
Why it matters
BIMI does not replace SPF, DKIM, or DMARC. Receivers only show a logo when authentication is strong—typically DMARC at quarantine or reject with alignment. Brands chase BIMI for recognition; attackers cannot easily fake a verified mark when the stack is correct.
What “good enough” looks like
DMARC enforcement first (p=quarantine or p=reject with alignment). Then a BIMI TXT with an HTTPS URL to a square SVG Tiny Portable/Secure logo your brand owns. Host the SVG on a stable HTTPS URL you control. Some providers also require a Verified Mark Certificate (VMC/CMC)—check your ESP or mailbox provider docs before you expect logos everywhere.
Publish checklist (order matters)
1) Confirm SPF and DKIM pass for your real senders. 2) Move DMARC off p=none once reports look clean. 3) Host a BIMI-compliant SVG (square, HTTPS, Tiny PS). 4) Add TXT at default._bimi with v=BIMI1 and the l= logo URL (and a= if you have a VMC). 5) Re-check with the free BIMI checker, then add the domain so CrowWake crows if the record disappears.
If CrowWake crows
No BIMI → optional unless you want inbox logos; publish default._bimi only after DMARC is ready. Broken or emptied record after a DNS cleanup → restore from your BIMI provider. Logo not showing → fix DMARC policy/alignment before debugging the SVG or certificate.
Watch this on CrowWake
Add the domain, leave the boxes checked, and the flock will crow when this drifts.
Or try the free BIMI checker with no login.
Deep dive: BIMI monitoring — watch default._bimi so a silent wipe crows early, with the same free BIMI checker.
Pair with DMARC monitoring, DMARC, SPF monitoring, and DKIM monitoring — logos only after enforcement.