BIMI Without a VMC: Which Inboxes Show Your Logo for Free

The short answer

Yes, you can run BIMI without a Verified Mark Certificate. The DNS record supports it, and it costs nothing but the work.

Here is what the providers we checked said in their own documentation on August 27, 2026. Yahoo Mail and AOL will show it. Fastmail will show it. Apple Mail will show a logo too, but through a separate Apple product rather than through BIMI. Gmail will not show anything without a certificate. Outlook.com and Exchange Online render BIMI logos for nobody, certificate or not.

If your goal is the Gmail logo, or the blue checkmark beside your name in Gmail, a self-asserted record will not get you there. Skip to the last two sections.

What a self-asserted BIMI record actually is

BIMI stands for Brand Indicators for Message Identification. It is a TXT record in your DNS that points a receiving mail server at a copy of your logo. When a message from you passes authentication, a supporting provider can fetch that logo and draw it beside your name.

The record lives at default._bimi.yourdomain.com. The specification defines five tags, and three of them matter here. The v tag is the version, the l tag is the URL of your SVG logo, and the a tag is the URL of a certificate file. The BIMI Group's implementation guide lists the a tag as currently optional, reserved for a Verified Mark Certificate or a Common Mark Certificate.

Leave the a tag off and you have a self-asserted record. You are asserting that the logo is yours, and no third party has checked that claim. That is the entire difference. The BIMI Group is blunt about the consequence: "Self-Asserted BIMI records have limited support across the various Mailbox Providers".

BIMI is also not a finished standard. The current specification is an Internet-Draft, draft-brand-indicators-for-message-identification-14, dated May 1, 2026, and it is not an RFC. Every rendering rule below is a provider's own policy, not something you can hold a provider to.

• With a certificate: v=BIMI1; l=https://example.com/logo.svg; a=https://example.com/cert.pem
• Self-asserted: v=BIMI1; l=https://example.com/logo.svg
• Host name: default._bimi.yourdomain.com, published as a TXT record

The part that is not free

Dropping the certificate does not drop the prerequisites. Every provider that renders BIMI gates it behind DMARC, and DMARC is the slow part.

The BIMI Group requires your DMARC policy to be at enforcement on the organizational domain and on subdomains, meaning p=quarantine with sp=quarantine, or p=reject with sp=reject. Policies of none, and any pct value below 100, are not accepted.

Your logo also has to be an SVG in the Tiny Portable/Secure profile, which strips out scripting and external references. Fastmail adds a size ceiling of less than 16 KB. A logo exported straight from a design tool will not pass without conversion work.

How to publish one

Four steps, in order. None of them requires a vendor.

• Get SPF and DKIM passing and aligned with the domain in your From line, then move DMARC to p=quarantine or p=reject with a matching sp value and pct=100.
• Convert your logo to SVG Tiny Portable/Secure. Square, solid background, no scripts, no external references, under 16 KB.
• Host the SVG over HTTPS at a publicly reachable URL, with no hotlink protection, no blocked user agents and no redirect chain.
• Publish a TXT record at default._bimi.yourdomain.com with the value v=BIMI1; l= followed by your SVG URL, leaving the a tag off.

Provider by provider, against their own documentation

Provider policy has moved, so older articles may not match what follows. Every statement below is sourced, to the provider's own page where one exists and to the BIMI Group where it does not.

Yahoo Mail and AOL will display a self-asserted logo. Yahoo's sender page says it plainly: "We currently do not require VMCs to be set up for BIMI logos to appear in Yahoo applications." There are conditions. Yahoo wants a valid SVG, DMARC at quarantine or reject, a mailing sent to a large number of recipients, and sufficient reputation and engagement for the sending address. Yahoo states it does not display brand logos for personal email. Logos appear in the message list and read view of the Yahoo and AOL mobile apps, and in the read view on desktop webmail.

Fastmail will display a self-asserted logo. Its setup article lists the certificate as an optional step, notes that some receivers such as Gmail will not show a logo without one, and warns that "Having a VMC also is not a guarantee that the logo will be displayed."

Apple Mail is two separate things wearing one name. The BIMI path at Apple is certificate-based: Apple describes messages carrying logos as digitally certified, and the BIMI Group's sender FAQ names Apple among the providers that want a certificate. The other path is Branded Mail, Apple's own product, which needs no VMC or CMC. It requires a brand and logo approved by Apple, an organization verified by Apple, a commercial email domain, DMARC with DKIM authentication, and a TXT record Apple gives you. Apple states that authentication by SPF alone is not supported. These brand tools now live in Apple Business, which absorbed Apple Business Connect in an announcement dated March 24, 2026.

Zoho Mail's own admin console instructions tell you to generate a Verified Mark Certificate and enter a VMC URL as part of setup. Treat Zoho as a certificate path, not a free one.

Microsoft renders nothing. The BIMI Group's provider infographic lists Microsoft under providers that do not support BIMI, and on Microsoft Learn a Microsoft moderator confirmed in a May 21, 2026 update that no implementation date has been announced. If your audience sits on Outlook or Microsoft 365, no BIMI work of any kind changes what they see.

Gmail is the inbox you mean, and Gmail says no

If Gmail is the inbox you care about, here is the answer without hedging.

Google's setup page states: "BIMI requires third-party certification for your domain and logo." That certification has to be a Verified Mark Certificate or a Common Mark Certificate. A record with no a tag gets you nothing in Gmail.

The logo and the checkmark are two different rewards behind two different gates. Google's page says: "In Gmail, you'll see a checkmark next to senders verified with a VMC." A CMC can put your logo in Gmail. Only a VMC produces the checkmark. DigiCert draws the same line on its own product page, listing the blue authenticated checkmark in Gmail as a VMC feature and describing a CMC as validating logos that have not been registered as a trademark.

No registered trademark? Here is what you can actually get

This is the real question behind the search, so here are the three tiers as they stand today.

Tier one costs nothing. Publish a self-asserted record and you can earn a logo at Yahoo, AOL and Fastmail, subject to their volume and reputation checks. Set up Apple Branded Mail and you can earn one in Apple Mail. No trademark, no certificate, no certificate authority.

Tier two buys the Gmail logo without a trademark. A Common Mark Certificate exists for logos protected by prior use rather than registration. SSL.com's requirement is specific: "Your logo must have been in active, continuous use on a domain you own for at least 12 months. No trademark required." It says it verifies that history through archive.org. As listed on August 27, 2026, SSL.com prices its CMC at $1,150 per year on a one-year term, and DigiCert lists both its VMC and its CMC at $1,416.00 for a 12 month subscription, noting prices are subject to change.

Tier three is the checkmark, and it requires a registered trademark. DigiCert states that a VMC "Requires a logo to be a registered trademark or a government mark". If you do not have one, Google's own page sets the expectation: "The trademark process can take 6 to 12 months." There is no shortcut around that, and a vendor promising one is describing something else.

Note that DigiCert puts the maximum validity of a mark certificate at 397 days, so either certificate is an annual cost rather than a one-time purchase.

• Free: Yahoo, AOL and Fastmail through self-asserted BIMI, plus Apple Mail through Branded Mail
• CMC: adds the Gmail logo, based on 12 months of documented prior use, no trademark needed
• VMC: adds the Gmail checkmark, requires a registered trademark or a government mark
• Available at no tier: Outlook.com, Exchange Online, Microsoft 365

When the honest answer is to publish nothing

Self-asserted BIMI is cheap, but cheap is not the same as worthwhile.

If you send a few hundred transactional emails a month, Yahoo's bulk mail and reputation conditions may mean your logo never appears. If your customers are business buyers on Microsoft 365, no inbox in that estate renders anything you publish.

The one thing worth doing regardless is DMARC at enforcement. It asks receiving servers to quarantine or reject mail that is not really from you, it protects delivery as providers tighten sender rules, and it is the prerequisite for every logo program above. Do that first and treat any logo as a bonus that follows.

Working with us

Verified Everywhere is run by JWC Apps in San Diego. We ran this stack on our own business first: Bench Clearers, a hockey apparel store, which holds a Verified Mark Certificate issued through GlobalSign and has BIMI live in Gmail with the checkmark. If you want help choosing between a self-asserted record, a CMC and a VMC, or getting DMARC to enforcement without breaking your own mail, we will look at your domain and tell you which tier is worth it. We screen work before quoting, and we never ask for passwords, ID documents or card numbers.