Email senders · Shopify

How do I set up Shopify so its email passes DMARC?

Publish the records Shopify shows in your account for your domain.

Last read from the sources at the foot of this page.

Check my firm
01

What does Shopify ask me to publish?

As the From email address when your customers receive automatic notification emails, order confirmation emails, and any marketing emails sent from your store.

Shopify makes the values for your account, so we do not print any here.

02

Where in Shopify are my values shown?

From your Shopify admin, go to Settings > Notifications . In the Sender email section, click authenticate your domain .

In your Shopify admin, go to Settings, then Notifications, and in the Sender email section choose authenticate your domain.

Copy each value from there exactly as shown, and add each record at your DNS host.

03

How do I add Shopify to the SPF record I already have?

SPF implementations MUST limit the total number of those terms to 10 during SPF evaluation, to avoid unreasonable load on the DNS. If this limit is exceeded, the implementation MUST return "permerror".

Add the include Shopify shows you inside the one SPF record you have, before its last word, and keep every service already in it. Never add a second SPF record: two make the check fail for every message.

An SPF record may make at most 10 DNS lookups. Each include counts, and so do the includes inside it. Past 10, the check fails, so remove services you no longer use before you add a new one.

04

Will p=reject block Shopify email?

In the Record name/DNS host name field, add _dmarc . Some domain hosts automatically add the domain portion, such as _dmarc.example.com . After you add the TXT record, verify that it's formatted correctly. In the Text Record Value field, add v=DMARC1; p=none; .

Not once Shopify signs your email with your domain's DKIM key. DMARC passes when a message passes DKIM or SPF for your own domain, and the DKIM records Shopify gives you are on your domain.

Shopify needs a DMARC record on the domain. Its default is v=DMARC1; p=none.

If a DMARC record already exists, it must not contain adkim=s or aspf=s. Shopify says strict alignment can stop its mail from authenticating.

Without the records, Shopify rewrites your sender address to a Shopify address.

Shopify also asks that your domain has a DMARC record. A domain has one DMARC record: if you have one, keep it and do not add another.

Before you raise your policy, read your DMARC reports and check that email from Shopify passes.

Sources

Where does this come from?

Related
06 · Check my firm

See what is open before anyone else does.

We read from outside, find each way in first, and show it with a check anyone can re-run. No access, nothing tested, no obligation.

What we readPublic sources only
Who sees itYou alone
Delivery72 hours from confirmation
Meeting firstNone
Reading requestPrivate
Problem: Enter your firm's name.
Problem: Enter your name.
Problem: Enter a full address, like [email protected].
Problem: That does not look like a website. Try yourdomain.com.

A person reads every request. Your outside reading comes by email within 72 hours from [email protected]. Privacy