What’s changing
Since 2021, Brand Indicators for Message Identification (BIMI) has been critical in building trust between email senders and email recipients. To qualify for BIMI, senders must adopt best practices and have their domains and brand logos verified by a third party. Together, this helps foster trust among recipients, allowing them to easily identify emails for legitimate sources. Today, we’re pleased to announce two additional updates for BIMI that will continue to keep inboxes safe:
Gmail now supports Common Mark Certificates (CMC), a new type of BIMI certificate being issued by Certificate Authorities (CA). CMCs allow a broader range of senders to utilize BIMI, who might not have the registered trademark required for a Verified Mark Certificate (VMC). With a CMC, the sender's brand avatar will be displayed without the Gmail verified checkmark that's displayed for VMCs.
BIMI verified check marks are now displayed on Android and iOS.
Currently, Gmail on the web will display a verified checkmark for senders who have adopted BIMI with a registered trademark (VMC). Over the next few weeks, users will also see those verified checkmark icons while using the Gmail application on Android and iOS (Apple Mail or other mail applications are not supported). Note that this update is applicable for VMCs only.
Who’s impacted
Admins and end users
Why it’s important
BIMI promotes another layer of security to Gmail by requiring strong authentication and verification of logos before they’re displayed in Gmail as avatars. Strong email authentication helps users and email security systems identify and stop spam, and also enables senders to leverage their brand trust. This increases confidence in email sources and gives readers an immersive experience, creating a better email ecosystem for everyone.
Getting started
- Admins:
- Visit the Help Center to learn more about setting up BIMI.
- To learn more about BIMI and see the latest news, visit the working group’s website.
- To take advantage of BIMI for your outgoing emails to Gmail and other platforms, ensure that your organization has adopted DMARC, and that you have validated your logo with a VMC, issued by a Certification Authority.
- End users: Users will see verified brand logos, and sometimes a checkmark icon, for senders who have adopted BIMI.
Rollout pace
- Rapid Release and Scheduled Release domains: Gradual rollout (up to 15 days for feature visibility) starting on September 24, 2024
Availability
- Available to all Google Workspace customers and users with personal Google accounts