When it comes to improving the authenticity and security of the emails you send, implementing BIMI in your email can be a crucial step. BIMI allows organizations to display their logo in emails as a verification mark in email clients that support it, such as Gmail, which not only helps protect the brand against phishing, but also increases user trust. In this post, we explain what BIMI is and the step-by-step instructions on how you can get the BIMI verification mark for your emails.
TABLE OF CONTENTS
What is BIMI?
What steps should be taken to obtain BIMI and the blue check mark?
1. Preliminary stage
2. BIMI Implementation
3. Obtaining the Verified Trademark Certificate (VMC)
4. Getting the Gmail Blue Check Mark
Benefits of obtaining BIMI
BIMI Challenges to Consider
Conclusions Safeguard your brand and build trust with BIMI and the Gmail blue checkmark
1. Protection against counterfeiting and fraud
2. Symbol of legitimacy and trust
3. Greater engagement and conversions
4. Strengthening brand affinity
What is BIMI?
BIMI (Brand Indicators for Message Identification) is a standard for increasing the security of incoming email messages. It emerged in 2021 as a response to phishing, spoofing and fraudulent emails, and aims to make sent emails safer for recipients.
By implementing BIMI, companies can display their logos on emails next to the sender's name. BIMI verifies that the email is actually from the sender it claims to be. The BIMI protocol is supported by Google, Yahoo, Fastmail, and ESPs such as MDirector .
In May 2023, Google introduced a new security feature: the blue check mark. This mark indicates that the Google account has validated the identity of the sender, meaning that emails sent from that account are authentic and come from a trusted source.
What steps should be taken to obtain BIMI and the blue check mark?
Obtaining BIMI and the Gmail verification mark is a long road and requires patience in completing all the required steps.
1. Preliminary stage
The configuration of the SPF, DKIM and DMARC security protocols is absolutely mandatory . And regarding DMARC, a DMARC quarantine or reject policy must be established (p = quarantineeitherp = reject).
A trademark must be registered internationally with all variants of your logo. It is advisable that you add as many logos as possible to your international trademark because only one of the registered logos can be used for BIMI.
2. BIMI Implementation
The steps to follow are as follows:
You must create and upload an SVG file of your brand logo to your public web server via HTTPS. The file size must not exceed 32 KB, must be square in shape, the background cannot be transparent, and a solid color is recommended. An important thing to consider is that during the VMC certification process, only the logo as registered with the trademark will be accepted. Additionally, after BIMI implementation, all emails sent from your employees' corporate addresses will include the logo (if your employees previously had photos, these will be changed to display the company logo).
Add the TXT record for BIMI to your domain's DNS hotspots.
Once implemented, you can verify the existing BIMI using the BIMI Generator Inspector tool .
This is what the records for our domain mdirector.com look like :
VisualBIMI
3. Obtaining the Verified Trademark Certificate (VMC)
The VMC (Verified Mark Certificates) is a digital certificate that confirms t hong kong whatsapp number data he authenticity of your logo and the fact that you are its true owner. To obtain such a certificate, you need to contact a brand verification organization, but you must already have the trademark registered. During the process of obtaining the VMC, the authenticity of your ly verified.
Currently, only two organizations are authorized to provide VMC: Digicert and Entrust . Please note that VMC can cost upwards of $1,000 for the first year.
During the process of obtaining VMC you will have to confirm that you comply with all protocols (SPF, DKIM and DMARC) and have registered your brand and your company logos. In addition, you will have to:
To start the process, you need to complete the order request and provide all required documentation.
It is crucial to carefully follow all instructions and recommendations provided by these organizations.
You may receive a phone call to verify the validity and authenticity of the information provided.
To opt out of the use of deep fakes, you will be asked to provide relevant identification and complete the required actions.
After obtaining the VMC, you must create a DNS record that points to the files provided to you and thus complete the BIMI approval process.