Can I use BIMI without a VMC? Which email clients show the logo for free?

A common misconception is that BIMI requires a Verified Mark Certificate (VMC) to work at all. It does not. A BIMI record without the a= certificate tag is perfectly valid, and several mailbox providers display the logo from it for free — provided your email authentication is already in place.

Which clients display BIMI without a VMC

Per IntoDNS.ai's email-client support research, these providers show a BIMI logo with no certificate:

• Apple Mail (iOS and macOS) — displays BIMI logos natively since iOS 16 and macOS Ventura. Given Apple Mail's reach on mobile, this alone often makes BIMI worthwhile.
• Yahoo Mail — one of the earliest BIMI adopters; no VMC required.
• AOL Mail — same behaviour as Yahoo (same parent company).
• Fastmail — displays the logo without certificate verification.
• La Poste — French provider, an early European BIMI adopter.

Which clients require a certificate

• Gmail — the largest provider by user count. Gmail uses a certificate-backed BIMI path and requires either a VMC or the newer, more affordable CMC (Common Mark Certificate). A VMC additionally enables Gmail's blue verified checkmark. Without a certificate, Gmail simply ignores your BIMI record and falls back to the sender's initial or profile photo — the same experience as before BIMI, so you lose nothing.

Which clients don't support BIMI yet

• Microsoft Outlook / Office 365 — no BIMI support currently announced.
• ProtonMail — no BIMI support.
• Thunderbird — no native BIMI support.

The free, no-VMC setup

The setup is identical to a full implementation, minus the certificate:

1. Get authentication right: valid SPF, DKIM, and DMARC enforced at p=quarantine or p=reject.
2. Host a square SVG Tiny PS logo over HTTPS.
3. Generate the record with the free BIMI checker and generator and publish it at default._bimi, leaving the a= tag empty.

v=BIMI1; l=https://yourdomain.com/bimi/logo.svg; a=

That record will surface your logo in Apple Mail, Yahoo, AOL, and Fastmail today, at no cost beyond the authentication work. When you later decide Gmail coverage is worth it, adding a VMC or CMC is just a certificate plus a one-line DNS update — the hard part (DMARC, DKIM, SVG hosting) is already done.

For the full client-by-client breakdown, see the blog post BIMI Without VMC: Which Email Clients Show Your Logo for Free. To check whether your domain is technically ready before spending on a certificate, scan it with IntoDNS.ai or call https://intodns.ai/api/email/bimi?domain=yourdomain.com.