---
title: "Getting started with BIMI for Zoho Mail | DMARC Report"
description: "BIMI (Brand Indicators for Message Identification) displays a brand"
image: "https://dmarcreport.com/og/blog/getting-started-with-bimi-for-zoho-mail.png"
canonical: "https://dmarcreport.com/blog/getting-started-with-bimi-for-zoho-mail/"
---

Quick Answer

BIMI (Brand Indicators for Message Identification) displays a brand's verified logo next to authenticated emails in supporting clients. BIMI requires a DMARC policy of \`quarantine\` or \`reject\` - \`p=none\` is not sufficient. Getting started with BIMI for Zoho Mail Getting started with BIMI for Zoho Mail

Related: [Free DMARC Checker](/tools/dmarc-checker/) ·[How to Create an SPF Record](/tools/spf-record-generator/) ·[SPF Record Format](/blog/spf-format-checker-dos-and-donts-for-email-authentication/) 

Share 

[ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Fgetting-started-with-bimi-for-zoho-mail%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Getting%20started%20with%20BIMI%20for%20Zoho%20Mail&url=undefined%2Fblog%2Fgetting-started-with-bimi-for-zoho-mail%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Fgetting-started-with-bimi-for-zoho-mail%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Fgetting-started-with-bimi-for-zoho-mail%2F&title=Getting%20started%20with%20BIMI%20for%20Zoho%20Mail "Share on Reddit") [ ](mailto:?subject=Getting%20started%20with%20BIMI%20for%20Zoho%20Mail&body=Check out this article: undefined%2Fblog%2Fgetting-started-with-bimi-for-zoho-mail%2F "Share via Email") 

![Getting started with BIMI for Zoho Mail](https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg) 

![Dmarc report 7619 150x150](https://media.mailhop.org/dmarcreport/images/2024/12/dmarc-report-7619-150x150.jpg) 

BIMI (Brand Indicators for Message Identification) displays a brand’s verified logo next to authenticated emails in supporting clients. BIMI requires a DMARC policy of `quarantine` or `reject` \- `p=none` is not sufficient.

> The most common mistake we see during DMARC setup is jumping straight to p=reject without monitoring first, says Vasile Diaconu, Operations Lead at DuoCircle. Start at p=none, analyze your reports for at least a full quarter - you need to catch monthly, quarterly, and annual email senders that only fire periodically. Then fix any legitimate senders that fail before enforcing. We walk every customer through this sequence.

```
					DMARC Report					

				
```

Getting started with BIMI for Zoho Mail

```
					<button title="Play" aria-label="Play Episode" aria-pressed="false" class="play-btn">
						
```

Play Episode

```
					</button>
					<button title="Pause" aria-label="Pause Episode" aria-pressed="false" class="pause-btn hide">
						
```

Pause Episode

```
					</button>
				

					<audio preload="none" class="clip clip-18926">
						<source src="https://media.mailhop.org/dmarcreport/images/2024/12/Getting-started-with-BIMI-for-Zoho-Mail.mp3">
					</audio>
						

							<button class="player-btn player-btn__volume" title="Mute/Unmute">
								
```

Mute/Unmute Episode

```
							</button>
							<button data-skip="-10" class="player-btn player-btn__rwd" title="Rewind 10 seconds">
								
```

Rewind 10 Seconds

```
							</button>
							<button data-speed="1" class="player-btn player-btn__speed" title="Playback Speed" aria-label="Playback Speed">1x</button>
							<button data-skip="30" class="player-btn player-btn__fwd" title="Fast Forward 30 seconds">
								
```

Fast Forward 30 seconds

```
							</button>
						

							<time class="ssp-timer">00:00</time>
							
```

/

```
							<!-- We need actual duration here from the server -->
							<time class="ssp-duration" datetime="PT0H2M29S">2:29</time>
			

								<nav class="player-panels-nav">
												<button class="subscribe-btn" id="subscribe-btn-18926" title="Subscribe">Subscribe</button>
																		<button class="share-btn" id="share-btn-18926" title="Share">Share</button>
										</nav>

						
```

RSS Feed

```
							<input value="https://dmarcreport.com/feed/podcast/dmarc-report" class="input-rss input-rss-18926" title="RSS Feed URL" readonly />
						

						<button class="copy-rss copy-rss-18926" title="Copy RSS Feed URL" aria-label="Copy RSS Feed URL"></button>
					

						Share						
					

						<a href="https://www.facebook.com/sharer/sharer.php?u=https://dmarcreport.com/blog/podcast/getting-started-with-bimi-for-zoho-mail/&t=Getting started with BIMI for Zoho Mail" target="blank" rel="noopener noreferrer" class="share-icon facebook" title="Share on Facebook">
							

						</a>
						<a href="https://twitter.com/intent/tweet?text=https://dmarcreport.com/blog/podcast/getting-started-with-bimi-for-zoho-mail/&url=Getting started with BIMI for Zoho Mail" target="blank" rel="noopener noreferrer" class="share-icon twitter" title="Share on Twitter">
							

						</a>
						<a href="https://media.mailhop.org/dmarcreport/images/2024/12/Getting-started-with-BIMI-for-Zoho-Mail.mp3" target="blank" rel="noopener noreferrer" class="share-icon download" title="Download" download>
							

						</a>
					

						Link						
					

						<input value="https://dmarcreport.com/blog/podcast/getting-started-with-bimi-for-zoho-mail/" class="input-link input-link-18926" title="Episode URL" readonly />
					

					<button class="copy-link copy-link-18926" title="Copy Episode URL" aria-label="Copy Episode URL" readonly=""></button>
					

						Embed						

					
```

/\*! This file is auto-generated \*/ ’ title=“Embed Code” class=“input-embed input-embed-18926” readonly/>

```
					<button class="copy-embed copy-embed-18926" title="Copy Embed Code" aria-label="Copy Embed Code"></button>


```

Zoho users should [implement BIMI](https://dmarcreport.com/blog/why-email-marketers-should-care-to-implement-bimi/) so that their logos are displayed alongside authenticated emails in recipients’ inboxes. This way, more people will trust your messages, and your [domain’s reputation](https://www.activecampaign.com/blog/domain-reputation) will improve. Moreover, a logo creates a \*\*professional and consistent presence in emails. The visual logo reinforces that the email is sent by a [legitimate source](https://www.forbes.com/sites/petersuciu/2024/12/04/elon-musk-claims-x-is-a-legitimate-source-for-news-can-it-be-trusted/), ultimately boosting engagement and open rates.

Zoho encourages and supports BIMI and, hence, offers easy integration with [DNS settings](https://www.ntchosting.com/encyclopedia/dns/settings/) for [SPF](https://dmarcreport.com/what-is-spf/), DKIM, and **DMARC**.

## Requirements for deploying BIMI for Zoho Mail

Here are 4 things you need to ensure to start with BIMI setup-

As of 2025, DMARC is mandatory under multiple compliance frameworks. [CISA BOD 18-01](https://www.cisa.gov/news-events/directives/bod-18-01) requires p=reject for US federal domains. [PCI DSS v4.0](https://www.pcisecuritystandards.org/) mandates DMARC for organizations processing payment card data as of March 2025\. Google and Yahoo require DMARC for bulk senders (5,000+ messages/day) since February 2024, and [Microsoft began rejecting](https://learn.microsoft.com/en-us/defender-office-365/email-authentication-dmarc-configure) non-compliant email in May 2025\. The UK [NCSC](https://www.ncsc.gov.uk/collection/email-security-and-anti-spoofing), Australia’s [ASD](https://www.cyber.gov.au/resources-business-and-government/essential-cyber-security/ism/cyber-security-guidelines/guidelines-email), and Canada’s [CCCS](https://www.cyber.gc.ca/en/guidance/implementation-guidance-email-domain-protection) all mandate DMARC for government domains. Cyber insurers increasingly require DMARC enforcement as an underwriting condition.

## 1\. Properly configured SPF for your domain

Ensure your SPF record doesn’t have the following configurations that could make it overly permissive-

- Use of +all mechanism
- Use of wide IP ranges
- Not specifying the ‘all’ mechanism
- **Excessive wildcarding** \- Mixing too many mechanisms
- Not removing deprecated or unused entries
- Overusing the ‘\*\*include’ mechanism Run your SPF record through an online lookup tool to see if any of the above issues exist. If detected, contact an expert and have it fixed.
![Dmarc analyzer](https://media.mailhop.org/dmarcreport/images/2024/12/dmarc-analyzer-7622.jpg) 

## 2\. Properly configured DKIM for your domain

[DKIM](https://dmarcreport.com/what-is-dkim/) helps ensure the integrity of emails sent from your domain by verifying if the email was truly sent by the claimed sender and checking for any changes during transit. It uses a pair of **cryptographic keys**: a [private key](https://www.investopedia.com/terms/p/private-key.asp) to sign emails and a [public key](https://www.techtarget.com/searchsecurity/definition/public-key) to verify them.

## 3\. Properly configured DMARC for your domain

To use BIMI, you must set up a [DMARC record](https://dmarcreport.com/dmarc-record/) for your domain and publish it in your DNS. DMARC works with SPF and DKIM to help [mail servers](https://www.cloudflare.com/learning/email-security/what-is-a-mail-server/) handle fake emails from your domain.

[DMARC](https://dmarcreport.com/) has three policy options: **‘none,’ ‘quarantine,’ and ‘reject**.’ However, BIMI requires a policy stronger than ‘none,’ as it only monitors and doesn’t provide protection. For Zoho BIMI, first enforce a stricter [DMARC policy](https://dmarcreport.com/blog/what-is-a-dmarc-policy-and-how-does-it-affect-sending-my-emails/), then proceed with the BIMI setup .

## 4\. Getting a Verified Mark Certificate (VMC)

A [Verified Mark Certificate](https://www.digicert.com/faq/email-trust/what-is-a-verified-mark-certificate) (VMC) confirms that you own your brand logo, allowing you to use it to set up BIMI. While a VMC isn’t mandatory for all email providers, platforms like \*\*Zoho Mail require one to enable BIMI. VMCs are issued by trusted certification authorities such as DigiCert , ensuring the authenticity of your logo and enhancing brand credibility in [email communications](https://writingcenter.unc.edu/tips-and-tools/effective-e-mail-communication/).

## How Do You Configure BIMI for Zoho Mail?

## 1\. Create your brand logo

- Use a BIMI SVG logo converter to convert your logo to SVG Tiny 1.2 format.
- Make sure the logo is square, **under 32 KB in size**, and has a solid background.
- Ensure the logo does not include animations or interactive features.

## 2\. Generate a BIMI record for your domain

- Sign up for free on online **BIMI record-generating tools**.
- Enter your domain name, logo URL, VMC, selector (optional), and email address (optional).  
![Create dmarc record](https://media.mailhop.org/dmarcreport/images/2024/12/create-dmarc-record-3.jpg)

## 3\. Create and configure your BIMI record

- Enter your domain name, logo URL, and VMC certificate details.
- Publish the generated [BIMI record](https://manage.accuwebhosting.com/knowledgebase/4490/What-is-a-BIMI-Record.html) in your **DNS**.
- Example[ TXT record](https://dnsmadeeasy.com/post/what-is-a-txt-record): v=BIMI1;l=<https://domain.com/image.svg;a=https://domain.com/certificate.pem>

## 4\. Verify your BIMI record

Use a credible [BIMI lookup tool](https://www.mailmodo.com/tools/bimi-checker/) to confirm that the record is correctly set up. Once you have done this, your BIMI logo will appear in Zoho Mail and other **BIMI-supporting email clients**.

## Sources

- [CISA Binding Operational Directive 18-01](https://www.cisa.gov/news-events/directives/bod-18-01)
- [Microsoft Outlook DMARC Enforcement May 2025](https://learn.microsoft.com/en-us/defender-office-365/email-authentication-dmarc-configure) (2025)
- [PCI DSS v4.0 - DMARC Requirement](https://www.pcisecuritystandards.org/) (2025)

## Topics

[ BIMI ](/tags/bimi/)[ dkim ](/tags/dkim/)[ DMARC ](/tags/dmarc/)[ dmarc record ](/tags/dmarc-record/)[ SPF ](/tags/spf/) 

![Vishal Lamba](https://media.mailhop.org/dmarcreport/images/team/vishal-lamba.jpg) 

[ Vishal Lamba ](/authors/vishal-lamba/) 

Content Specialist

Content Specialist at DMARC Report. Writes vendor-specific email authentication guides and troubleshooting walkthroughs.

[LinkedIn Profile →](https://www.linkedin.com/in/vishal-lamba/) 

## Take control of your DMARC reports

Turn raw XML into actionable dashboards. Start free - no credit card required.

[Start Free Trial](https://app.dmarcreport.com/) [Check Your DMARC Record](/tools/dmarc-checker/) 

## Related Articles

[  Foundational 7m  4 sectors that need email authentication the most and why  Oct 15, 2024 ](/blog/4-sectors-that-need-email-authentication-the-most-and-why/)[  Foundational 9m  Answering Your Webinar Questions: Email Security - From The Desk Of DMARCReport  Dec 2, 2025 ](/blog/answering-webinar-questions-email-security-dmarcreport-desk-insights-guide/)[  Foundational 12m  Best DMARC Checker Tools Comparing Dmarcian, Mxtoolbox, And Proofpoint  Dec 1, 2025 ](/blog/best-dmarc-checker-tools-comparing-dmarcian-mxtoolbox-and-proofpoint/)[  Foundational 11m  What are common issues revealed by DMARC aggregate reports and how should I prioritize them?  Feb 4, 2026 ](/blog/common-dmarc-aggregate-report-issues-and-how-to-prioritize-them/)

```json
{"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]}
```

```json
{"@context":"https://schema.org","@type":"WebSite","name":"DMARC Report","url":"https://dmarcreport.com","description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","publisher":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}}
```

```json
[{"@context":"https://schema.org","@type":"BlogPosting","headline":"Getting started with BIMI for Zoho Mail","description":"BIMI (Brand Indicators for Message Identification) displays a brand's verified logo next to authenticated emails in supporting clients.","url":"https://dmarcreport.com/blog/getting-started-with-bimi-for-zoho-mail/","datePublished":"2024-12-06T12:14:51.000Z","dateModified":"2026-04-16T15:53:43.000Z","dateCreated":"2024-12-06T12:14:51.000Z","author":{"@type":"Person","@id":"https://dmarcreport.com/authors/vishal-lamba/#person","name":"Vishal Lamba","url":"https://dmarcreport.com/authors/vishal-lamba/","jobTitle":"Content Specialist","description":"Vishal Lamba writes DMARC Report's how-to guides and vendor-specific configuration walkthroughs. His work focuses on step-by-step implementation guides for major email platforms (Google Workspace, Microsoft 365, SendGrid, Mimecast, Proofpoint, Brevo, and others), troubleshooting common SPF and DMARC errors, and translating RFC-level specifications into practical deployment procedures for IT administrators.","image":"https://media.mailhop.org/dmarcreport/images/team/vishal-lamba.jpg","knowsAbout":["SPF Vendor Configuration","Email Platform Integrations","SPF Troubleshooting","Technical Documentation","Step-by-Step Guides"],"worksFor":{"@type":"Organization","name":"DMARC Report","url":"https://dmarcreport.com"},"sameAs":["https://www.linkedin.com/in/vishal-lamba/"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com","logo":{"@type":"ImageObject","url":"https://dmarcreport.com/images/dmarcreport-logo.png"},"description":"DMARC reporting and email authentication management. Monitor aggregate and forensic DMARC reports, analyze authentication results, and enforce DMARC policies across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138898167","https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.g2.com/products/dmarc-report/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc","https://www.trustradius.com/products/duocircle/reviews"],"aggregateRating":{"@type":"AggregateRating","ratingValue":"4.8","reviewCount":"470","bestRating":"5","worstRating":"1","url":"https://www.g2.com/products/dmarc-report/reviews"},"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://dmarcreport.com/support/"},"knowsAbout":["DMARC","DMARC Reporting","DMARC Aggregate Reports","DMARC Forensic Reports","Sender Policy Framework","DKIM","Email Authentication","Email Security","DNS Management","Email Deliverability"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://dmarcreport.com/blog/getting-started-with-bimi-for-zoho-mail/"},"articleSection":"foundational","keywords":"BIMI, dkim, DMARC, dmarc record, SPF","wordCount":916,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/dmarcreport/images/2022/04/dmarc-alignment-6379.jpg","caption":"Getting started with BIMI for Zoho Mail","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}}]
```

```json
{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://dmarcreport.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://dmarcreport.com/blog/"},{"@type":"ListItem","position":3,"name":"Foundational","item":"https://dmarcreport.com/foundational/"},{"@type":"ListItem","position":4,"name":"Getting started with BIMI for Zoho Mail","item":"https://dmarcreport.com/blog/getting-started-with-bimi-for-zoho-mail/"}]}
```