Do you want your brand logo to show next to your emails in Gmail and other inboxes? To make that happen, you need two things, first is DMARC and a second is Verified Mark Certificate (VMC).
Actually, a DMARC is an email security protocol that helps stop others from sending fake emails using your domain. You also need to publish a BIMI (Brand Indicators for Message Identification) record in your DNS to display your logo. While a VMC proves that your logo is officially linked to your domain.
In this guide, we’ll show you step by step how to set up DMARC and get a VMC for your logo.
What is DMARC and Why Your Brand Needs It
DMARC (Domain-based Message Authentication, Reporting & Conformance) is a way to protect your email domain. It works together with SPF (Sender Policy Framework) and DKIM (DomainKeys Identified Mail) to stop scammers from sending fake emails that look like they came from your brand.
Setting up DMARC helps block these fake emails, improves the chances of your real emails reaching inboxes, and gives you reports showing who is using your domain to send messages.
It also builds trust with your email recipients by showing that your emails are safe and verified. Plus, DMARC is required if you want to show your brand logo using a Verified Mark Certificate (VMC) and BIMI (Brand Indicators for Message Identification).
Why Every Brand Needs a Verified Mark Certificate ( VMC ) for Email Visibility
A Verified Mark Certificate (VMC) is a digital certificate issued by a trusted certificate authority that proves you own your brand’s logo. When we use BIMI (Brand Indicators for Message Identification) and if we properly set up DMARC policy, then it allows your official logo to show up next to your emails in inboxes like Gmail and Apple Mail.
This matters because it helps your emails instantly to build trust with recipients, improves how people recognize your brand, increases open rates and engagement, and makes your emails stand out from others in a crowded inbox.
What are the Prerequisites to Get a VMC
To get a Verified Mark Certificate, your domain and brand must meet the following prerequisites:
- Trademarked Logo: Your logo must be registered with a recognized trademark office.
- SVG Logo Format: The logo should be in SVG Tiny 1.2 format.
- DMARC Policy: Your domain must have a DMARC policy set to either quarantine or reject.
- SPF and DKIM Records: Both must be correctly configured and aligned.
- BIMI Record: A DNS TXT record that points to your hosted logo and VMC.
- Verified Certificate Authority: Purchase the VMC from a trusted provider
You can read this article : Do You Need a CSR for a Verified Mark Certificate?
How to Setup a DMARC for Your Domain
Setting up DMARC might sound technical, but it becomes simple when you follow the steps one by one. DMARC works best when SPF and DKIM are already in place.
Here's how you can set it up for your domain:
Step 1: Configure SPF and DKIM
SPF: Add a TXT record to your DNS that specifies which mail servers are allowed to send emails on behalf of your domain.
DKIM: Generate a public/private key pair and publish the public key as a DNS TXT record. Your email server will sign outgoing messages using the private key.
Step 2: Create a DMARC Record
Add the following TXT record to your DNS:
v=DMARC1; p=reject; rua=mailto:dmarc-reports@yourdomain.com
- p=reject instructs receivers to reject emails that fail DMARC checks
- rua collects aggregate reports from receiving mail servers
Step 3: Publish the DMARC Record
Add the above record to your DNS as a TXT entry at:
_dmarc.yourdomain.com
Step 4: Monitor Reports
Use tools like DMARC Analyzer, Postmark, or Dmarcian to view DMARC reports, monitor performance, and troubleshoot any issues.
Also Read : What is DMARC & How to Set It Up for Your Organization
How to Create and Publish Your BIMI Record
Once your DMARC is properly set up and you have a Verified Mark Certificate (VMC), the next step is to create your BIMI record. This allows email providers to display your brand logo beside your messages in supported inboxes. Follow these steps to set it up:
Step 1: Convert and Host Your Logo
- Convert your trademarked logo to SVG Tiny 1.2 format
- Host it on a secure HTTPS server
Step 2: Create the BIMI DNS Record
Add this TXT record to your DNS:
default._bimi.yourdomain.com IN TXT
"v=BIMI1; l=https://yourdomain.com/logo.svg;
a=https://yourdomain.com/VMC.pem"
- l= specifies the logo URL
- a= points to the hosted Verified Mark Certificate
Step 3: Publish in DNS
Make sure your BIMI record is added correctly under your DNS settings.
How to Buy and Install a Verified Mark Certificate
To display your brand logo in email inboxes using BIMI, you need to purchase and set up a Verified Mark Certificate (VMC).
This process involves choosing a trusted provider, proving your brand’s identity, and linking the certificate to your BIMI record. Here’s how to do it:
Step 1: Choose a Certificate Authority
Select a trusted certificate authority to issue your VMC. SSL2BUY offers both the DigiCert Verified Mark Certificate and the DigiCert Common Mark Certificate at competitive prices.
Step 2: Submit Trademark Documentation
Only logos that are officially trademarked are eligible for a VMC.
Step 3: Complete Validation
The CA will verify:
- Your domain ownership
- Your organization’s legal identity
- Your logo’s trademark registration
Step 4: Install and Link the VMC
Once issued:
- Host the VMC (.pem) file securely
- Update your BIMI record to include a link to the VMC file
Final Thoughts
Learning how to set up a DMARC is the foundation for email protection and brand visibility. Once your authentication policies are in place, getting a Verified Mark Certificate opens the door to next-level brand recognition in the inbox.
By following this guide, your organization can prevent spoofing, look more professional, and stand out to every recipient.