Setup guide
Shopify Email: SPF, DKIM and DMARC
Shopify authenticates your sender email with CNAME records that cover both DKIM and SPF, plus a single DMARC record. Without them the sender address is rewritten to store+123@shopifyemail.com.
By Ahmet Karaca · Updated · Checked against Shopify Email documentation on
DNS records to add
<each CNAME name from Shopify admin><matching value from Shopify admin>Get this value from your provider's dashboard.DKIM and SPF for your sender email domain; add every CNAME Shopify lists
_dmarcv=DMARC1; p=none;Shopify's default DMARC record
Steps
- In Shopify admin open Settings → Notifications and find Sender email.
- For a domain at Cloudflare, GoDaddy or IONOS, click Email domain authentication → Authenticate automatically and approve the change with your provider.
- Otherwise authenticate the domain manually by adding every CNAME record Shopify shows at your DNS host.
- Add the _dmarc TXT record yourself, because automatic authentication sets up the CNAME records but not DMARC.
Common mistakes
- A DMARC record containing adkim=s or aspf=s stops authentication through Shopify. Change them to adkim=r and aspf=r.
- Publishing a second DMARC TXT record makes DMARC validation fail, and Shopify then falls back to the store+123@shopifyemail.com sender.
- Deleting the CNAME records later hurts deliverability and sends the sender back to the shopifyemail.com address until they're restored.
- CNAME records can't be added for client transfer stores, development stores or stores on the Pause and Build plan.
Good to know
- Domains bought through Shopify are authenticated automatically, with DKIM, SPF and DMARC configured by Shopify.
- You don't need a separate SPF TXT record or any IP addresses; the CNAME records handle SPF.
- Until you authenticate, Shopify Email sends marketing email from a fully authenticated shopifyemail.com subdomain and rewrites the sender address onto it.
Frequently asked questions
What if Shopify still shows Update recommended after a day?
Compare the record values with the Shopify admin and submit again. Authentication can take up to 48 hours.
Can my Shopify sender email be a no-reply address?
Avoid it. Shopify notes that some email hosts automatically reject addresses that include wording such as no-reply, do-not-reply or noreply.
Is authenticating a domain required for Shopify Email?
It's optional but recommended. Without it, marketing emails go out from a shopifyemail.com subdomain instead of your own domain.
What changed for Shopify senders in February 2024?
Since February 1, 2024, Gmail and Yahoo require an authenticated domain and a DMARC record to send from a branded email address.
Adding records at your DNS host
Check your setup
After publishing, use the check below or run the domain health check. DNS changes usually appear within minutes, but can take up to a few hours. Official reference: Shopify Email documentation.
Check your Shopify Email setup
Or open the SPF checker, DKIM checker or DMARC checker directly.