Skip to main content

In today’s digital world, email is the primary communication tool for businesses. However, phishing attacks and email spoofing have made it difficult for recipients to trust emails. To tackle this, Google introduced the blue verified checkmark in Gmail, allowing verified businesses to display a trust indicator in their emails.

For Google Workspace customers, deploying the Gmail blue checkmark requires a structured approach involving authentication protocols, logo verification, and compliance with Google’s Brand Indicators for Message Identification (BIMI). This guide provides an in-depth, step-by-step process for obtaining the blue tick and ensuring secure and credible email communication.

BIMI

Step 1: Trademark Registration for BIMI

To obtain a Verified Mark Certificate (VMC), your brand logo must be officially trademarked. This process varies by country, and businesses are responsible for obtaining their own trademark registration. Below are the relevant authorities in the GCC countries:

For international trademark registration, businesses can refer to the World Intellectual Property Organization (WIPO), which provides global trademark protection through the Madrid System. WIPO simplifies the registration process by allowing businesses to file a single international application that covers multiple countries.

Steps to Register a Trademark:

  1. Conduct a Trademark Search: Check if your logo is already registered.
  2. Prepare the Required Documents: Typically includes logo design, business details, and proof of usage.
  3. Submit an Application: File an application with the relevant authority.
  4. Pay the Registration Fees: Fees vary by country and application type.
  5. Await Approval: Processing time can take weeks to months.
  6. Receive Trademark Certificate: Once approved, you can use it for your VMC application.
Gmail Security

Step 2: Obtain a Verified Mark Certificate (VMC)

A Verified Mark Certificate (VMC) is a digital certificate issued by a trusted Certificate Authority (CA) that confirms the authenticity of your brand’s logo. This is a key requirement for BIMI implementation in Gmail.

How to Obtain a VMC

  1. Ensure DMARC is fully enforced – The policy must be set to quarantine or reject.
  2. Apply for a VMC through approved Certificate Authorities (CAs):
  3. Pass Certificate Authority Validation:
    • Your domain’s email security setup is checked.
    • Your trademark registration is verified.
  4. Receive your VMC and use it to publish your BIMI record.

Step 3: Configure SPF, DKIM, DMARC, and BIMI DNS Records

To ensure Gmail recognizes your domain and enables the blue checkmark, you need to configure the following DNS records:

SPF Record:

v=spf1 include:_spf.google.com ~all

DKIM Record:

v=DKIM1; k=rsa; p=PUBLIC_KEY

DMARC Record:

v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@yourdomain.com;

BIMI Record:

v=BIMI1; l=https://yourdomain.com/logo.svg; a=https://yourdomain.com/vmc.pem

Once these DNS records are in place, they may take some time to propagate across the internet.

Step 4: Verify Setup Using BIMI Inspector Tool

Use the BIMI Inspector Tool to check whether your records have propagated correctly. Once properly set up, when you send emails through Gmail, your customers and contacts should start seeing a brand-new checkmark right next to your name!

Can’t be bothered doing this yourself? Get in touch, and we can help you get verified!

About Us

Step 5: Additional Benefits of Partnering with Gulf Infotech

  • Dedicated Support: Our expert team will guide you through every step of the verification process.
  • Multi-Region Coverage: We serve UAE, Saudi Arabia, Oman, Qatar, Bahrain, Kuwait, and more.
  • Proven Track Record: 18+ years of experience helping enterprises optimize their Google Workspace security.
  • Comprehensive Security Solutions: Assistance with SPF, DKIM, DMARC, VMC, and BIMI setup.
  • Expert Consultation: We ensure compliance with Google’s stringent email authentication standards.
Get Started Today!

Don’t wait! Contact us to verify your domain today and start building trust with your audience.