--- title: "Everything you should know about obtaining a Verified Mark Certificate (VMC) | DuoCircle" description: "Everything you should know about obtaining a Verified Mark Certificate (VMC)." image: "https://www.duocircle.com/images/og-default.png" canonical: "https://www.duocircle.com/blog/email-security/everything-you-should-know-about-obtaining-a-verified-mark-certificate/" --- Quick Answer A Verified Mark Certificate (VMC) is a digital certificate that lets your trademarked logo display next to your messages in supporting inboxes, including Gmail, Yahoo Mail, and Fastmail under BIMI (Brand Indicators for Message Identification). VMCs prove your organization owns the logo, blocking spammers from using it. Benefits: enhanced trust and recognition, reduced phishing/spoofing risk, stronger overall email security posture, better deliverability, higher engagement, competitive differentiation, and alignment with major mailbox provider standards. To obtain a VMC: 1) Become DMARC-compliant with policy p=quarantine or p=reject. 2) Trademark your logo with an approved trademarking body. 3) Format the logo as SVG so it scales without pixelation and reads well at small sizes. 4) Purchase the VMC (Multi-SAN options exist for orgs with multiple domains, separate certs needed if logos differ per domain), then validate by confirming the trademark, providing notarized ID, and meeting a CA validation representative. 5) Upload the issued PEM file (with any intermediate CA certs) to a public web server and note the URL. 6) Add the BIMI TXT record to DNS pointing at the VMC URL. Everything you should know about obtaining a Verified Mark Certificate (VMC) Your browser does not support the audio element. [ Download episode](https://media.mailhop.org/duocircle/images/2024/08/Everything-you-should-know-about-obtaining-a-Verified-Mark-Certificate-VMC.mp3) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=undefined%2Fblog%2Femail-security%2Feverything-you-should-know-about-obtaining-a-verified-mark-certificate%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=Everything%20you%20should%20know%20about%20obtaining%20a%20Verified%20Mark%20Certificate%20%28VMC%29&url=undefined%2Fblog%2Femail-security%2Feverything-you-should-know-about-obtaining-a-verified-mark-certificate%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=undefined%2Fblog%2Femail-security%2Feverything-you-should-know-about-obtaining-a-verified-mark-certificate%2F "Share on Facebook") [ ](https://reddit.com/submit?url=undefined%2Fblog%2Femail-security%2Feverything-you-should-know-about-obtaining-a-verified-mark-certificate%2F&title=Everything%20you%20should%20know%20about%20obtaining%20a%20Verified%20Mark%20Certificate%20%28VMC%29 "Share on Reddit") [ ](mailto:?subject=Everything%20you%20should%20know%20about%20obtaining%20a%20Verified%20Mark%20Certificate%20%28VMC%29&body=Check out this article: undefined%2Fblog%2Femail-security%2Feverything-you-should-know-about-obtaining-a-verified-mark-certificate%2F "Share via Email") ![obtaining a Verified Mark Certificate](https://media.mailhop.org/duocircle/images/2024/08/sender-policy-framework-8296.jpg) When it comes to ensuring the success of your [email campaigns](https://influencermarketinghub.com/glossary/email-campaign/), something that is just as important as the content of the email is the trust it inspires in your recipients. The way the receivers and their mail servers perceive your emails tells a lot about your **brand’s identity and credibility**. Speaking of **brand identity**, one thing that makes your email stand out among the vast expanse of emails that one receives every day is the visible verification of its authenticity. A great way to reinforce authenticity is by using [BIMI](/resources/what-is-bimi) (Brand Indicators for Message Identification). _In fact, configuring BIMI is now more than just a recommended practice, as Google recently announced its adoption of the BIMI standard within Gmail, along with Yahoo Mail, and Fastmail, among others_. _To successfully display your BIMI logo, you need approval stating that your brand’s logo is verified and trustworthy_. This approval certificate is called a Verified Mark Certificate (VMC). It is a [digital certificate](https://www.fortinet.com/resources/cyberglossary/digital-certificates) issued by the **certifying authority** that certifies your logo, ensuring [email clients](/email-security/understanding-email-client-how-you-can-choose-an-email-client-for-your-business-needs/) recognize and display it properly. Now that you know that you need a Verified Mark Certificate (VMC) to get your emails to stand out from the crowd, let’s take a look at what exactly this certificate is, why you need one, and how to **obtain a VMC**. ## What is a Verified Mark Certificate (VMC)? A [Verified Mark Certificate (VMC)](https://www.digicert.com/faq/email-trust/what-is-a-verified-mark-certificate) is a digital certificate that lets your organization display your **trademarked logo** directly in the recipient’s inbox next to your email messages. _Just as a profile picture helps people recognize you on social media, a VMC lets your organization display your trademarked logo directly in the recipient’s inbox next to your email messages so that your recipients can easily recognize you_. The primary purpose of a VMC is to ensure that your organization is the legitimate owner of the logo. This helps to **prevent spammers** and [malicious users](https://thehackernews.com/2024/08/new-android-trojan-blankbot-targets.html) from using your brand logo to fulfill their nefarious intentions. Moreover, it is the last step in the series of measures undertaken to enhance security through DMARC (Domain-based Message Authentication, Reporting & Conformance). That is to say; before you go on to obtain your VMC, you should align all the other verification parameters, such as the logo being trademarked, the physical identity of the purchaser being authenticated through an in-person validation meeting, and confirming ownership of the email domain. This also means that you can only get a VMC if your domain is authenticated with [DMARC](/email/dmarc) with policies and **BIMI records** published in the DNS. ## Why do you need a Verified Mark Certificate (VMC)? A logo displayed next to the sender field within the email isn’t just another visual branding exercise; it’s a crucial component of establishing trust and authenticity in your email, which in turn has **broader implications**. Let’s take a look at how obtaining a VMC can spruce up your [email marketing](https://en.wikipedia.org/wiki/Email%5Fmarketing) game on various levels: ### Enhance trust and recognition _By displaying your trademarked logo next to your emails in a recipient’s inbox, VMCs ensure that your recipients can identify and trust your messages at first glance_. This seemingly unassuming visual cue can **significantly strengthen** your brand’s credibility and make your emails stand out in a crowded inbox. ### Protect against phishing and spoofing VMC also mitigates the risk of phishing and spoofing attacks. Since a verified logo is displayed next to the sender’s details to verify its identity, it becomes difficult for a [threat actor](https://thehackernews.com/2024/07/tag-100-new-threat-actor-uses-open.html) to **impersonate your domain** and launch [malicious attacks](https://www.csoonline.com/article/575213/attacks-increasingly-use-malicious-html-email-attachments.html). Without this logo, it will be harder to distinguish a legitimate email from a spoofed one. ### Improve Email Security _Since VMC is one of the last layers of defense in the email security cycle, it means that you have done everything necessary to secure your emails_. That is to say, it will make it all the more difficult for the attackers to bypass and intercept your email. Once they are **authenticated and secure**, your emails are less likely to be tampered with or forged, providing a robust shield against various [cyber threats](https://www.defense.gov/News/News-Stories/Article/Article/3663799/us-can-respond-decisively-to-cyber-threat-posed-by-china/). ### Boost email deliverability As you know, verified emails are less likely to be marked as spam; with VMC, your emails are more likely to **reach recipients’ inboxes**. This improves the effectiveness of your email campaigns by ensuring your messages are seen and interacted with. Not to mention, the higher the [deliverability rate](/dmarc/how-to-boost-your-email-deliverability-rates-using-dmarc/), the higher the possibility of engaging and converting prospects. ### Increase engagement rates When recipients come across a known logo, the chances are that they will open it and engage with the email. This might mean better [click-through rates](https://www.investopedia.com/terms/c/clickthroughrates.asp) and, eventually, better responses to your email marketing efforts. Apart from this, it is important to understand that **increased engagement** will not only boost your **campaign metrics** but also foster stronger relationships with your audience, leading to greater customer loyalty and retention. [![ click-through rates](https://media.mailhop.org/duocircle/images/2024/08/spf-record-tester-1.jpg)](https://media.mailhop.org/duocircle/images/2024/08/spf-record-tester-1.jpg) ### Gain competitive advantage _As a marketer, you might have pulled a lot of strings to ensure your campaigns stand out_. Early adoption of VMC is one such tactic, which is presenting your logo next to your emails to distinguish your brand from competitors. This not only gives you an edge from the **marketing perspective** but also showcases your commitment to security and trust. ### Meet standards set by leading email providers Major email providers, like Google, Yahoo Mail, and Fastmail, all support the BIMI standard, which requires a VMC. Having a VMC will ensure your [emails pass security standards](https://www.darkreading.com/vulnerabilities-threats/3-major-email-security-standards-falling-down-on-the-job) set by these providers. Compliance with these standards not only enhances your **email visibility** but also aligns your organization with industry best practices, establishing your commitment to security. ## How to get a Verified Mark Certificate (VMC)? To get your logo to appear in your recipient’s inbox, configure BIMI; you first need to get a VMC. This certificate is crucial for displaying your trademarked logo next to your email messages, building trust, and **enhancing security**. To obtain a VMC for your organization, here are a few steps that you should take: ### Be DMARC compliant The first step to obtaining a VMC is to ensure that your domain is authenticated with DMARC. This [email authentication](/resources/email-authentication) protocol enhances the security of the entire email ecosystem by requiring messages to pass validation checks. This establishes a **higher degree of baseline security** and defines actions on how to handle emails that would fail these checks, for instance, quarantining or rejecting. This is why, when implementing DMARC, make sure to configure it with the policy of ‘p=quarantine’ or ‘p=reject.’ ### Trademark your logo The next thing you need to get a Verified Mark Certificate is a trademarked logo. Without a registered logo (which serves as proof of **ownership and authenticity**), you will not be able to reinforce your brand’s legitimacy to your audience. So, make sure your logo is registered with an approved trademarking body. ### Format your logo For your logo to appear next to your sent email, it needs to meet certain **specific requirements**. Your organization’s logo must be in an [SVG (Scalable Vector Graphics)](https://www.techopedia.com/definition/5239/scalable-vector-graphics-svg) format to comply with BIMI requirements and ensure that it does not pixelate at different sizes. Moreover, the logo should be designed to look good in small sizes since it will be displayed in email clients. Test different sizes to ensure readability and visual appeal. ### Purchase Your VMC Now that you have **done all the preparations**, the next step is to purchase a VMC. If your organization uses more than one domain, it is recommended that you choose Multi-SAN VMCs. if each domain has a different logo, you would need a different VMC for each one of the domains. After you have purchased the VMC, make sure you validate it by: 1. Confirming your logo’s **registered trademark** 2. Providing the notarized copies of ID documents 3. _Meeting a certificate authority’s validation team representative to verify your identity vis-à-vis the documents provided_ After you complete these steps, your VMC will be issued. ### Upload the certificate to your web server Once your VMC has been issued, you will receive an email with the certificate in a PEM file. If you receive any intermediate certificates from your CA to go with that, add those into your PEM file. Now upload the complete [PEM file](https://medium.com/@yashschandra/anatomy-of-a-pem-file-727f1690df18) to your **public web server**. Take note of the URL of this file as you will need it in the next step. ### Add the BIMI TXT record to your domain The last step of this process is to add your [BIMI record](https://www.site24x7.com/learn/bimi-record.html) in the form of a [DNS TXT record](https://www.cloudflare.com/learning/dns/dns-records/dns-txt-record/). To do this, you can also **seek assistance** from your domain provider. That’s it, you’re done! [![email security](https://media.mailhop.org/duocircle/images/2024/08/spf-record-tester-4286.jpg)](https://media.mailhop.org/duocircle/images/2024/08/spf-record-tester-4286.jpg) Now that you know how to get a VMC for your domain, what are you waiting for? Take this as a sign to boost your [email security](/), enhance your brand’s credibility, and **increase engagement** with your recipients. While you’re at it, you should also set up [DMARC reporting](/resources/dmarc-aggregate-report) for all your email-sending domains to keep track of your email authentication status and ensure **ongoing compliance**. To know more, [book a demo today!](https://dmarcreport.com/book-a-demo/) ## Topics DMARCemail security ![Brad Slavin](https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg) Brad Slavin General Manager General Manager at DuoCircle. Product strategy and commercial lead across the email security portfolio. ## Secure your email infrastructure Protect, authenticate, and deliver. Contact our team to find the right solution. [Contact Sales](/contact/) [Explore Products](/products/) ## Related Articles [ Email Security 8m Designing A Custom Dkim Architecture For High-Volume Email Senders Apr 28, 2026 ](/blog/designing-custom-dkim-architecture-for-high-volume-email-senders/)[ Email Security 12m DMARC, SPF, and DKIM in 2026: Why Email Authentication Is Now a Regulatory Requirement, Not Just a Best Practice Apr 29, 2026 ](/blog/dmarc-spf-dkim-2026-email-authentication-regulatory-requirement-best-practice/)[ Email Security 5m Email Monitoring Tools: A Complete Guide to Protecting Your Email Ecosystem May 7, 2026 ](/blog/email-monitoring-tools-guide-protecting-your-email-ecosystem-security/)[ Email Security 15m 12 Best Hosted SMTP Servers for High Deliverability in 2026 Apr 8, 2026 ](/blog/email-security/12-best-hosted-smtp-servers-for-high-deliverability-in-2026/) ```json {"@context":"https://schema.org","@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}],"sameAs":["https://www.linkedin.com/company/duocircle","https://x.com/duocirclellc","https://www.facebook.com/duocirclellc","https://www.g2.com/products/phish-protection-by-duocircle/reviews","https://github.com/duocircle","https://www.crunchbase.com/organization/duocircle-llc"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://support.duocircle.com"},"knowsAbout":["Email Security","Email Authentication","SPF","DKIM","DMARC","Phishing Protection","Spam Filtering","SMTP Relay","Email Deliverability","Email Forwarding"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"DuoCircle LLC","url":"https://www.duocircle.com","description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}} ``` ```json [{"@context":"https://schema.org","@type":"BlogPosting","headline":"Everything you should know about obtaining a Verified Mark Certificate (VMC)","description":"Everything you should know about obtaining a Verified Mark Certificate (VMC).","url":"https://www.duocircle.com/blog/email-security/everything-you-should-know-about-obtaining-a-verified-mark-certificate/","datePublished":"2024-08-06T15:52:32.000Z","dateModified":"2025-04-23T15:24:39.000Z","dateCreated":"2024-08-06T15:52:32.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/email-security/everything-you-should-know-about-obtaining-a-verified-mark-certificate/"},"articleSection":"email-security","keywords":"DMARC, email security","wordCount":1515,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/08/sender-policy-framework-8296.jpg","caption":"obtaining a Verified Mark Certificate","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}},{"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":2,"name":"Email Security"},{"@type":"ListItem","position":3,"name":"Everything you should know about obtaining a Verified Mark Certificate (VMC)","item":"https://www.duocircle.com/blog/email-security/everything-you-should-know-about-obtaining-a-verified-mark-certificate/"}]}] ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://www.duocircle.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://www.duocircle.com/blog/"},{"@type":"ListItem","position":3,"name":"Email Security","item":"https://www.duocircle.comundefined"},{"@type":"ListItem","position":4,"name":"Everything you should know about obtaining a Verified Mark Certificate (VMC)","item":"https://www.duocircle.com/blog/email-security/everything-you-should-know-about-obtaining-a-verified-mark-certificate/"}]} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"Everything you should know about obtaining a Verified Mark Certificate (VMC)","description":"Everything you should know about obtaining a Verified Mark Certificate (VMC).","url":"https://www.duocircle.com/blog/email-security/everything-you-should-know-about-obtaining-a-verified-mark-certificate/","datePublished":"2024-08-06T15:52:32.000Z","dateModified":"2025-04-23T15:24:39.000Z","dateCreated":"2024-08-06T15:52:32.000Z","author":{"@type":"Person","@id":"https://www.duocircle.com/authors/brad-slavin/#person","name":"Brad Slavin","url":"https://www.duocircle.com/authors/brad-slavin/","jobTitle":"General Manager","description":"Brad Slavin runs DuoCircle, the company behind DMARC Report, AutoSPF, Phish Protection, and Mailhop. His focus is product strategy, customer relationships, and the commercial and compliance side of email authentication (DPAs, SLAs, enterprise procurement).","image":"https://media.mailhop.org/dmarcreport/images/team/brad-slavin.jpg","knowsAbout":["Email Security Strategy","SaaS Product Management","Enterprise Compliance","Customer Success","Email Deliverability Business"],"worksFor":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com"},"sameAs":["https://www.linkedin.com/in/bradslavin"]},"publisher":{"@type":"Organization","name":"DuoCircle LLC","url":"https://www.duocircle.com","logo":{"@type":"ImageObject","url":"https://www.duocircle.com/images/duocircle-logo.png"},"description":"DuoCircle is a portfolio of specialized email products covering protection, authentication, delivery, and routing. We deliver about 90% of category-leader capability at roughly half the price, backed by experts who own the outcome. Trusted by 50,000+ organizations since 2014.","subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://www.duocircle.com/blog/email-security/everything-you-should-know-about-obtaining-a-verified-mark-certificate/"},"articleSection":"email-security","keywords":"DMARC, email security","wordCount":1515,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/duocircle/images/2024/08/sender-policy-framework-8296.jpg","caption":"obtaining a Verified Mark Certificate","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ```