Using BIMI in Fastmail

BIMI (Brand Indicators for Message Identification) is related to DMARC. It lets a sender display their brand logo next to their emails in supporting email clients. The brand’s logo will only be displayed if the email passes its DMARC authentication checks and has a strong or enforcing DMARC policy. This provides an added layer of branding as well as a visual confirmation that the email is legitimate and from a trusted source.

Fastmail supports BIMI for both received and sent emails.

BIMI for received emails

When an email is sent from an authenticated domain that has set up BIMI, Fastmail fetches the logo connected with that domain and displays it next to the sender’s email address. Combined with existing authentication protocols (SPF, DKIM, DMARC), this makes it easier for you to visually identify emails from a certain brand.

BIMI for sending emails

You can set up BIMI for your domain so that recipients can see your brand’s logo on messages you send.

To setup BIMI for sending emails:

1. Make sure that the SPF and DKIM for your domain are configured correctly. You can check this by going to Settings → Domains and clicking the Recheck DNS button for the domain. If there are no errors found, this confirms that SPF and DKIM are set up correctly.
2. Add a DMARC record for your domain in the control panel of your domain host, with a compliance policy of p=reject or p=quarantine. You can publish a DMARC policy by adding a TXT record for _dmarc.yourdomain.com. For more information and tools that can help you set up DMARC, we recommend going to DMARC.org.
   • A note regarding subdomains: If the domain has a subdomain policy (sp=), then it must not be sp=none. While you can set BIMI up on a subdomain, the DMARC policy of the main organizational domain must be reject or quarantine.
3. Create an SVG Portable/Secure file for your official logo. For more information on how to create the SVG file, we recommend going to BIMI Group’s page on creating BIMI SVG logo files.
4. Optional: If you have a registered trademark for your logo, you can acquire a Verified Mark Certificate (VMC) from a BIMI-qualified certification authority. Some receivers (such as Gmail) won’t show the logo without a VMC. Having a VMC also is not a guarantee that the logo will be displayed. For more information, we recommend going to BIMI Group's page on VMCs.
5. Publish a BIMI record for your domain in the control panel of your DNS host. You can add a TXT record for default._bimi.yourdomain.com with the value v=BIMI1; l=[SVG URL]; a=[PEM URL]. You can validate or create your BIMI record with the BIMI Inspector.