BIMI Record Generator
Build a ready-to-publish BIMI TXT for Amazon SES domains — logo URL, optional VMC/CMC PEM, live validation, copy, download, and DNS verify.
- No signup
- Copy-paste DNS
- DoH verify
Host / name
—
TXT value
—
Read the full breakdown — Companion pricing guide covers billing dimensions, traps, and a 30-day cleanup plan.
Who This Tool Is For
DevOps, deliverability, and marketing-ops teams publishing BIMI for domains that send through Amazon SES.
Why We Built This Tool
Hand-built BIMI TXT records often miss HTTPS requirements, omit the PEM URL Gmail expects, or use the wrong selector host. This generator produces a syntactically correct record and can verify what is live in DNS via DNS-over-HTTPS.
What Problem It Solves
- Wrong host name. BIMI lives at selector._bimi.domain — not at the apex.
- HTTP logo URLs. Mailbox providers require HTTPS for l= and a=.
- Missing mark certificate. Without a=, Gmail and Apple Mail typically will not show the logo.
Also check your domain with the BIMI Readiness Checker and validate the SVG with the SVG Validator.
Frequently Asked Questions
What does a BIMI TXT record look like?
A typical record is v=BIMI1;l=https://…/logo.svg;a=https://…/certificate.pem published at default._bimi.example.com. The l= tag is the logo; a= is the mark certificate PEM when you have a VMC or CMC.
Do I need a VMC or CMC in the a= tag?
For Gmail and Apple Mail logo display, yes — those providers expect a mark certificate. Yahoo is more permissive. Publishing without a= is valid syntax but often yields no logo.
When should I NOT publish BIMI yet?
Do not publish BIMI while DMARC is still p=none, while pct is below 100 on an enforcement policy, or while the SVG fails Tiny PS validation. Fix authentication and the logo first.
Does Amazon SES create the BIMI record for me?
No. SES authenticates mail (DKIM, optional custom MAIL FROM / SPF). You publish BIMI in your DNS provider (Route 53, Cloudflare, etc.). SES does not display logos — mailbox providers do.
Need SES + BIMI done right?
FactualMinds helps teams reach DMARC enforcement, host BIMI assets on CloudFront, and validate logo display across major mailbox providers.
Book a free deliverability review →