BIMI and Microsoft 365.
Does Outlook support BIMI? The current state of Microsoft's BIMI implementation, what works today, and what the roadmap looks like.
Microsoft Outlook does not currently support BIMI logo display in any of its email clients, despite growing adoption of the standard across competing platforms.
Current Status in Microsoft Products
As of mid-2024, neither Outlook for Windows, Outlook for Mac, nor Outlook on the web displays BIMI-verified logos in the inbox. Microsoft has participated in the AuthIndicators Working Group—the consortium that develops the BIMI specification—but has not announced a timeline for implementation.
This absence stands in contrast to Microsoft's support for the underlying authentication infrastructure. Exchange Online, Microsoft's cloud email platform, fully supports DMARC enforcement at the quarantine and reject policies. Organizations using Microsoft 365 can implement the authentication requirements that BIMI depends on. The logos simply won't appear in Microsoft's email clients.
What Outlook Shows Instead
Microsoft email clients display sender photographs sourced from LinkedIn profile pictures and Gravatar accounts. This system predates BIMI and operates independently of email authentication. A sender with a verified BIMI record but no LinkedIn profile will appear without any visual identifier in Outlook. Conversely, a sender with poor email authentication but an active LinkedIn account may display a profile photo.
The two systems serve different purposes. LinkedIn integration shows personal identity. BIMI displays verified brand logos tied to authenticated domains. Neither system replaces the other, though they occupy similar visual space in email interfaces.
Where BIMI Works Today
Gmail displays BIMI logos for authenticated senders across its web interface and mobile apps. Yahoo Mail and AOL Mail, both operated by Yahoo, also show verified marks. Apple Mail added BIMI support in iOS 16 and macOS Ventura. Fastmail, the Australian email provider, implemented BIMI display in 2022.
These platforms collectively represent hundreds of millions of mailboxes. Gmail alone accounts for approximately 1.8 billion active accounts. Organizations implementing BIMI today reach substantial audiences despite Microsoft's absence from the ecosystem.
Enterprise Decision Considerations
IT teams frequently pause BIMI implementation while waiting for Outlook support. This hesitation stems from the enterprise dominance of Microsoft 365, which holds significant market share in business email. Decision-makers question the value of implementing BIMI when internal employees using Outlook won't see the benefits.
This calculus overlooks external recipients. Customer-facing email—transactional messages, marketing campaigns, service notifications—reaches mailboxes across all platforms. B2C companies communicate primarily with consumers using Gmail, Yahoo Mail, and Apple Mail. These audiences see BIMI logos today.
The technical groundwork also transfers directly. DMARC policies implemented for BIMI strengthen email security regardless of logo display. SPF and DKIM authentication protect domain reputation. The VMC (Verified Mark Certificate) establishes brand verification through a standard certificate authority process.
Authentication Requirements Remain Constant
BIMI requires DMARC enforcement at quarantine or reject policy. Microsoft 365 supports this configuration through Exchange Online Protection. Organizations can publish BIMI DNS records and obtain VMCs while using Microsoft as their email provider. The authentication stack functions completely. Only the visual display awaits Microsoft's client-side implementation.