Add the Blue Tick to Your Google Workspace Business Emails

Before applying for a blue checkmark, make sure:

1. Your organization owns a registered trademark - A VMC requires an officially registered trademark matching your logo.

2. Your email is authenticated with DMARC – You must have:

1. SPF (Sender Policy Framework)

2. DKIM (DomainKeys Identified Mail)

3. DMARC (Domain-based Message Authentication, Reporting, and Conformance)

4. DMARC policy set to p=quarantine or p=reject (Not p=none)

1. SPF Record (Add to DNS):

v=spf1 include:_spf.google.com ~all

2. DKIM Record (Enable in Google Workspace Admin):

• Go to Google Admin Console → Apps → Google Workspace → Gmail → Authenticate email

• Click Generate New Record and add the generated DKIM key to your DNS.

• Wait for DNS propagation and then click Start Authentication.

3. DMARC Record (Add to DNS):

v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@yourdomain.com; ruf=mailto:dmarc-reports@yourdomain.com;
 ruf=mailto:dmarc-reports@yourdomain.com

• Set p=quarantine or p=reject (required for blue tick approval).

1. Purchase a VMC from a certificate authority:

• Entrust: https://www.entrust.com

• DigiCert: https://www.digicert.com

2. Provide:

• Proof of trademark ownership

• DMARC-compliant email authentication

• SVG format of your official logo

3. The provider will verify and issue a VMC certificate.

1. Go to Google Admin Console → Apps → Google Workspace → Gmail

2. Enable BIMI (Brand Indicators for Message Identification)

Add the following BIMI DNS Record:

default._bimi.yourdomain.com TXT "v=BIMI1; l=https://yourdomain.com/logo.svg; a=https://yourdomain.com/vmc.pem"

Replace:

• logo.svg with the URL to your SVG logo
• vmc.pem with the VMC certificate URL

3. Save and wait for DNS propagation.

1. Google will check your setup and approve the blue tick after verifying:

• DMARC compliance
• Trademark
• Valid VMC

2. Once approved, Gmail users will see a blue checkmark next to your emails.

1. Use Google Admin Toolbox Check MX Tool: https://toolbox.googleapps.com/apps/checkmx/

2. Send an email to a Gmail account and check if the blue tick appears.

1. Google work space admin user login details.

2. DNS (Domain) login credentials.

3. Obtain a Verified Mark Certificate (VMC)

Purchase a VMC from a certificate authority (You need to buy a Verified Mark Certificate from Digicert)

• Entrust: https://www.entrust.com 
• DigiCert: https://www.digicert.com 

Provide:

• Proof of trademark ownership
• DMARC-compliant email authentication
• SVG format of your official logo

The provider will verify and issue a VMC certificate.

4. Logo in SVG format for BIMI (Brand Indicators for Message Identification).

Ready to transform your business with our technology solutions? Contact Us  today to Leverage Our AI/ML Expertise.