How to Add a BIMI Record in cPanel

Many email applications currently support Gravatar for showing images alongside sender email addresses. It’s been around for a long time, and it’s integrated with some some major websites and applications (e.g. WordPress), so this shouldn’t be too surprising. But there’s a new way to accomplish this without creating another online account. Below we’ll cover:

What is Brand Indicators for Message Identification (BIMI)?

Brand Indicators for Message Identification (BIMI) is an image that shows alongside the email address for authenticated email from your domain. This achieves a few things. It shows the email was sent using verified Sender Policy Framework (SPF) and Domain-based Message Authentication Reporting and Conformance (DMARC) records (along with other email authentication protocols) to ensure it originated from the organization. This also creates another opportunity for marketing specialists to build familiarity with potential customers and their brand.

Headed by the BIMI Group at BIMIgroup.org, there are a few requirements for implementing BIMI:

  • A BIMI TXT DNS record
  • A publicly available URL for your logo as a Scalable Vector Graphics (SVG) Tiny 1.2 Specification file

Here’s an example BIMI DNS record:

default._bimi.yourdomain.com. 3600 IN TXT v=BIMI1; l=https://domain.com/logo.svg

There are some important notes to keep in mind regarding BIMI:

  • As of June 2020, only Yahoo and Google have limited BIMI support
  • Therefore, many email recipients may not see it for a long time or ever depending on their email application(s)
  • SVG Tiny 1.2 specification can take a lot of effort to achieve without a conforming SVG generator (discussed below)
  • As of now, the best point of contact for BIMI implementation is BIMI Group via contact form

Secure your websites and protect websites with DNSsec on our Managed VPS Hosting.

Create an SVG Tiny File

You’ll need to convert your logo to a Scalable Vector Graphics (SVG) Tiny 1.2 Specification file. Then, you can edit SVG files in a text editor to remove non-compliant code. However, as the SVG Tiny 1.2 spec is still fairly new, we recommend using a Conforming SVG Generator to convert your logo to SVG and make adjustments before doing manual modifications to the raw file. Here are a few options:

You can use BIMI Group’s Creating BIMI SVG Logo Files blog and the raw data for our BIMI-certified logo draft for references. Keep in mind, many manual changes to the raw file were done with Inkscape and a text editor to meet compliance.

<?xml version="1.0" encoding="utf-8"?>
<!-- Generator: Adobe Illustrator 24.1.0, SVG Export Plug-In . SVG Version: 6.00 Build 0)  -->
<svg version="1.2" baseProfile="tiny-ps"
	 id="svg22" xmlns:cc="http://creativecommons.org/ns#" 
xmlns:dc="http://purl.org/dc/elements/1.1/" 
xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape" 
xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" 
xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd" 
xmlns:svg="http://www.w3.org/2000/svg"
	 xmlns="http://www.w3.org/2000/svg" 
xmlns:xlink="http://www.w3.org/1999/xlink" viewBox="0 0 222 222"
	 xml:space="preserve">
   <title>InMotion Hosting
<g class="layer">
   <rect fill="#FFFFFF" fill-rule="evenodd" height="222" id="rect3831" width="222" x="0" y="0"/>
  
<polygon
   points="26.4,33.6 200.6,33.5 196.9,51.5 "
   id="polygon129"
   fill="#c42227"
   transform="translate(12.276049,60.380243)" />
<polygon
   points="0,36.1 195.1,57.5 191.6,73.3 "
   id="polygon131"
   fill="#c42227"
   transform="translate(12.276049,60.380243)" />
</svg>

Listed below are the BIMI logo requirements per Mailkit.com BIMI inspector (you’ll use this tool to check for issues later):

  1. BIMI logo contains no embedded images (png, jpeg, etc.)
  2. Must have a background color – no transparency (you can fill the transparency with a white square layer as we did above in the g element)
  3. SVG has square dimensions (e.g. 10x10px, 222x222px)
  4. SVG doesn’t contain any rasterized data
  5. SVG contains no prohibited references
  6. SVG with proper color variance
  7. SVG contains no multimedia elements
  8. SVG contains no Base64 encoded data

You may continue without meeting all requirements but BIMI supporting email providers will be much less likely to display your logo once more widely supported.

Test SVG Tiny File

Before you add BIMI to your emails, it’s important to ensure it’s fully compliant with BIMI standards.

  1. Upload the SVG Tiny file to your server
  2. Ensure you place it in a public directory (e.g. public_html)
  3. Use the BIMIgroup.org BIMI Generator to inspect your SVG Tiny file (You can use this later to generate a BIMI record for cPanel)
  4. Enter your domain and the URL to the SVG file before pressing Get BIMI record
  5. Address any issues and retry before continuing

Again, you may continue without meeting the requirements but your logo will be less likely to display alongside emails.

Add BIMI in cPanel

After you upload and test your BIMI logo, create the BIMI DNS record in cPanel.

  1. Log into cPanel
  2. Ensure Sender Policy Framework (SPF) and Domain Key Identified Mail (DKIM) is enabled
  3. Ensure Domain-based Message Authentication Reporting and Conformance (DMARC) is set as strict as possible
  4. Create a new TXT record
  5. Add a BIMI DNS record with the following information:
    Value:
    default._bimi.yourdomain.com.
    TTL (time-to-live): (Optional but helpful in case you have any issues with BIMI SVG specification)
    60
    Record:
    v=BIMI1; l=https://yourdomain.com/path-to-logo.svg
    Although not required, you can contact EntrustDataCard for a verified Mark Certificate (VMC).
  6. (Optional) Test your email records at Mail-Tester.com for suggestions to improve email authentication and ensure your DNS records propagated
Example BIMI DNS record in cPanel
Your BIMI record should look similar to this, although your SVG URL and filename may differ.

Test BIMI Record

Once you add your BIMI TXT record, test your BIMI record at BIMIgroup.org and Mailkit.com using only your domain. Once the DNS record has propagated (this can take up to 48 hours in some cases), the BIMI record checkers should be able to test your domain without you manually supplying the SVG URL.

If you need an SSL certificate, enable AutoSSL for your hosting plan or purchase a dedicated SSL in your Account Management Panel (AMP).

As stated above, few email providers fully support BIMI at this time. Gmail and Yahoo are trail-blazing the implementation of this new technology. Live Support will only be able to assist with creating your BIMI DNS record and ensuring your SVG file is publicly accessible. Please forward any questions regarding BIMI or SVG Tiny specifications to our Community Support Center or the BIMI Group.

Like your brand’s logo, your cybersecurity posture is also a strong component of branding. If you’re looking to enhance your overall branding, you should audit your system for ways to harden your cPanel server.

Was this article helpful? Let us know!