Skip to content
inboxprobe

Checkers

Generators

Guides

Guides

SPF, DKIM and DMARC for Shopify Email

Shopify Email authenticates your domain with CNAME records that cover both DKIM and SPF, plus one DMARC record. Without them, your store's mail goes out from a shopifyemail.com address.

The records

Shopify generates CNAME records for your domain and shows them in the admin. The number of records can vary, so add every one shown. Their names and targets are specific to your store; copy them from Shopify.

Repeat for every record Shopify lists

Type
CNAME
Host / name
<each Name shown in Shopify>
Value
<its Value shown in Shopify>

DMARC: Shopify's minimum and default

Type
TXT
Host / name
_dmarc
Value
v=DMARC1; p=none;

Your domain must have only one DMARC record; Shopify notes that two make DMARC validation fail. If _dmarc already has one, keep it. The DMARC checker shows what's there now.

No separate SPF record

Shopify says the CNAME records handle SPF for your sender email automatically, and that you don't need to add a separate SPF TXT record or any IP addresses. Leave your existing SPF record (for Google Workspace, Microsoft 365 and so on) as it is.

Depends on where your domain is

DomainWhat to do
Bought through ShopifyNothing: Shopify sets up DKIM, SPF and DMARC for you. It adds v=DMARC1; p=none if you don't already have a DMARC record.
At Cloudflare, GoDaddy or IONOSShopify can configure the records automatically through Domain Connect.
Anywhere elseAdd the records manually at your DNS host.

You need an active paid plan. Shopify says CNAME records can't be added for dev stores, client transfer stores, or stores on the Pause and Build plan.

After setup

  • “Update recommended” in Settings → Notifications means Shopify has new CNAME records for your domain, or yours don't match. Update them.
  • Don't delete the CNAMEs later. Shopify warns it can cause bounces, and Shopify Email resets your sender to [email protected] until the records are back.
  • Check a real message: send yourself a test to Gmail and use Show original, or paste the headers into the email header analyzer.

Questions

Is authenticating my domain required for Shopify Email?

Shopify calls it optional but recommended. Without it, your sender address is rewritten to [email protected] (the number is your store's), and you can't use Google Postmaster Tools for your domain.

Do I need to add Shopify to my SPF record?

No. Shopify's help center says the CNAME records handle SPF for your sender email, and that you don't need a separate SPF TXT record.

Shopify says my records don't match.

Copy them again from Settings → Notifications; Shopify can issue new ones. Also look for the doubled-domain mistake (some DNS hosts append your domain to the name) and, at Cloudflare, make sure the records are DNS-only.

Is p=none enough?

It's the minimum Shopify requires. It meets Gmail and Yahoo's bulk-sender rule but doesn't stop spoofing. Add a report address, then tighten the policy once reports look clean.

Sources

Last reviewed: