BIMI record checker

Check a domain's BIMI record and confirm the DMARC policy meets the enforcement requirement that BIMI depends on.

What this catches

Every problem below is one this tool detects and explains, with the record to publish.

BIMI is not configured
No BIMI record, so your logo is not displayed alongside your mail.
BIMI record is malformed
The record does not parse as BIMI, so it is ignored.
BIMI record published without DMARC enforcement
BIMI requires a DMARC policy of quarantine or reject. The record will be ignored.
DMARC policy applies to only part of your mail
The pct tag is below 100, so the policy is applied to a sample of messages.
DMARC policy is set to none
The policy monitors but does not act — failing mail is still delivered.
DMARC record contains a syntax error
A tag in the DMARC record is malformed, which can invalidate the whole policy.
DMARC record requests no aggregate reports
There is no rua address, so you receive no data about who sends as your domain.
DMARC uses relaxed alignment
Subdomains of your organisational domain count as aligned. This is the default and is usually correct.
External reporting address is not authorised
Reports are directed to another domain that has not published the required authorisation record.
More than one DMARC record published
Multiple DMARC records exist at _dmarc, so receivers ignore the policy entirely.
No DMARC record found
There is no DMARC policy at _dmarc for this domain.
Subdomain policy is weaker than the domain policy
sp= is set to a laxer value than p=, leaving subdomains less protected.