--- title: "How do you set up SPF and DKIM for Shopify? | AutoSPF" description: "Shopify is an e-commerce platform based out of Canada, and if you have an online store listed on it, then adding SPF and DKIM records is important." image: "https://autospf.com/og/blog/how-do-you-set-up-spf-and-dkim-for-shopify.png" canonical: "https://autospf.com/blog/how-do-you-set-up-spf-and-dkim-for-shopify/" --- Quick Answer Shopify is an e-commerce platform based out of Canada, and if you have an online store listed on it, then adding SPF and DKIM records is important. This ensures no unauthorized entity sends spoofed emails on your behalf to fool recipients into sharing personal and financial details. ## Try Our Free DKIM Lookup Auto-discover DKIM selectors for any domain. [ Discover DKIM Selectors → ](/tools/dkim-lookup/) Share [ ](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fautospf.com%2Fblog%2Fhow-do-you-set-up-spf-and-dkim-for-shopify%2F "Share on LinkedIn") [ ](https://twitter.com/intent/tweet?text=How%20do%20you%20set%20up%20SPF%20and%20DKIM%20for%20Shopify%3F&url=https%3A%2F%2Fautospf.com%2Fblog%2Fhow-do-you-set-up-spf-and-dkim-for-shopify%2F "Share on X/Twitter") [ ](https://www.facebook.com/sharer/sharer.php?u=https%3A%2F%2Fautospf.com%2Fblog%2Fhow-do-you-set-up-spf-and-dkim-for-shopify%2F "Share on Facebook") [ ](https://reddit.com/submit?url=https%3A%2F%2Fautospf.com%2Fblog%2Fhow-do-you-set-up-spf-and-dkim-for-shopify%2F&title=How%20do%20you%20set%20up%20SPF%20and%20DKIM%20for%20Shopify%3F "Share on Reddit") [ ](mailto:?subject=How%20do%20you%20set%20up%20SPF%20and%20DKIM%20for%20Shopify%3F&body=Check out this article: https%3A%2F%2Fautospf.com%2Fblog%2Fhow-do-you-set-up-spf-and-dkim-for-shopify%2F "Share via Email") ![spoofed emails](https://media.mailhop.org/autospf/images/2024/01/how-to-create-spf-record-0402.jpg) Shopify is an [e-commerce platform](https://www.optimizely.com/optimization-glossary/ecommerce-platform/#:~:text=An%20ecommerce%20platform%20is%20the,goods%20or%20providing%20remote%20services.) based out of Canada, and if you have an online store listed on it, then adding [SPF](/blog/spf-records-benefits-uses-and-generation/) and DKIM records is important. This ensures no unauthorized entity sends [spoofed emails](https://www.spiceworks.com/it-security/security-general/news/smtp-smuggling-spoof-emails-bypass-security/) on your behalf to fool recipients into sharing personal and financial details. _DKIM ([RFC 6376](https://datatracker.ietf.org/doc/html/rfc6376)) signs email messages cryptographically, and unlike SPF, the signature survives email forwarding - which is why DMARC alignment via DKIM is more reliable than SPF alignment for forwarded mail and mailing lists._ For setup instructions covering Shopify and dozens of other platforms, see our [SPF Record Setup Guide](/blog/spf-record-setup-guide-every-platform/). You can test your email address by sending a message from your account to [check-auth@verifier.port25.com](mailto:check-auth@verifier.port25.com). You will receive a summary of your email host’s authentication methods. So, if the [SPF check](/spf-validator/) result is ‘pass,’ then your address meets Shopify’s security settings. Now, let’s understand how to add SPF and [DKIM records](/10-reasons-for-regular-spf-record-checks-in-cybersecurity/dkim-record-check/) for Shopify. ## Why Should Sellers Care to Setup SPF and DKIM for Shopify? Setting up SPF and DKIM for Shopify sellers is crucial for enhancing the security and reliability of their email communication. SPF helps [prevent email spoofing](/10-reasons-for-regular-spf-record-checks-in-cybersecurity/spf-checker/) by specifying which IP addresses are authorized to send emails on behalf of a domain. This ensures that only legitimate sources are recognized, reducing the likelihood of phishing and [unauthorized email activities](https://thehackernews.com/2023/12/mongodb-suffers-security-breach.html). On the other hand, DKIM adds a layer of authentication by digitally signing emails, allowing recipients to verify the email’s origin and integrity. For Shopify sellers, these authentication mechanisms are particularly important because they instill trust in customers and help maintain a positive [sender reputation](https://www.campaignmonitor.com/resources/knowledge-base/what-is-email-sender-reputation/). _Properly configured SPF and DKIM records not only shield from [malicious activities](https://www.ncsc.gov.uk/news/star-blizzard-continues-spear-phishing-campaigns) but also increase email deliverability, ensuring that essential communications, such as order confirmations and [shipping notifications](https://www.easyship.com/blog/shipping-notifications-guide), reach customers’ inboxes reliably._ ![email deliverability](https://media.mailhop.org/autospf/images/2024/01/how-to-create-spf-record-0401.jpg) ## How Do You Create a Custom Domain in Shopify? 1. Go to [your Shopify](https://www.digitalsilk.com/web-design/shopify/) account and select the ‘Domains’ tab. 2. Add your new custom domain to Shopify by clicking on the ‘Connect existing domain’ option. 3. Then, add your domain name and select the ‘Next’ button. We also recommend adding a subdomain so there aren’t any discrepancies with [root domain](https://world.siteground.com/kb/what-is-a-root-domain/#:~:text=Simply%20put%2C%20a%20root%20domain,net%2C%E2%80%9D%20etc.) sources. 4. Once you click the “Next” button, proceed to your DNS provider (such as CloudFlare, GoDaddy, etc.) to establish a new [CNAME record](https://en.wikipedia.org/wiki/CNAME%5Frecord). Specify the domain name in the “Name” section, and set the “Target” section to point to shops.myshopify.com. 5. Once done, click on the ‘Verify Connection’ option. _After clicking on the button, a message will appear stating that the process was concluded successfully._ ## How Do You Configure the SPF Record? You need to create an [SPF record](/explaining-sender-policy-framework-spf-macros/spf-record-syntax/) using the [include mechanism](http://www.open-spf.org/SPF%5FRecord%5FSyntax/) like this: include:shops.shopify.com To generate a new SPF record, follow these steps: 1. Go to [SPF Record Generator](/generative-ai-and-phishing-threats/spf-record-generator/). 2. Include include:shops.shopify.com in the include:\_\_ section. 3. _Choose a Policy from the options: Fail (Rejected if not compliant), [SoftFail](/blog/spf-softfail-or-spf-hardfail/) (Accepted but marked if not compliant), or Neutral (Mails will probably be accepted)._ 4. Once you’ve completed the necessary steps, click “Generate SPF Record.” Once done, all you are left with is updating the SPF record on your domain’s DNS. ![DNS](https://media.mailhop.org/autospf/images/2024/01/how-to-create-spf-record-0403.jpg) ## DKIM Setup for Shopify 1. Access your Shopify account as an Administrator. 2. Go to the Sender email page within the portal. 3. Click on the “Authenticate” option on the page. 4. You will be redirected to a new tab containing instructions to publish four CNAME records in your domain’s DNS to activate [DKIM for Shopify](https://www.pipiads.com/blog/shopify-dkim-records/). 5. Follow the provided instructions to visit your DNS provider’s management console and publish the records in the appropriate section. 6. Save the changes. Please note that it may take your DNS 24-48 hours to process the changes, and once completed, you’re finished! If you require any assistance, please feel free to reach out to us at [Autospf.com](/). We are here to help. ## Topics [ DKIM ](/tags/dkim/)[ DKIM record ](/tags/dkim-record/)[ email security ](/tags/email-security/)[ SPF record ](/tags/spf-record/) ![Vishal Lamba](https://media.mailhop.org/autospf/images/authors/vishal-lamba.jpg) [ Vishal Lamba ](/authors/vishal-lamba/) Content Specialist Content Specialist at AutoSPF. Writes vendor-specific SPF configuration guides and troubleshooting walkthroughs. [LinkedIn Profile →](https://www.linkedin.com/in/vishal-lamba/) ## Ready to get started? Try AutoSPF free — no credit card required. [ Book a Demo ](/book-a-demo/) ## Related Articles [ Advanced 10m AutoSPF’s Guide to Configuring SPF & DKIM for Avanan: A Detailed Walk-through Nov 26, 2025 ](/blog/autospf-guide-configuring-spf-dkim-for-avanan-detailed-setup-walkthrough/)[ Advanced 3m Resolving custom domain configuration issues for Azure Email Communication Oct 23, 2024 ](/blog/resolving-custom-domain-configuration-issues-for-azure-email-communication/)[ Advanced 8m What is the ‘554 5.7.5’ permanent error in DMARC and how to fix it? Jul 9, 2024 ](/blog/554-5-7-5-permanent-error-in-dmarc-and-how-to-fix-it/)[ Advanced 24m Best DNS Security Tools for Email in 2026 SPF, DKIM & DMARC Management Compared Apr 28, 2026 ](/blog/best-dns-security-tools-email-2026-spf-dkim-dmarc-compared/) ```json {"@context":"https://schema.org","@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]} ``` ```json {"@context":"https://schema.org","@type":"WebSite","name":"AutoSPF","url":"https://autospf.com","description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","publisher":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]}}} ``` ```json {"@context":"https://schema.org","@type":"BlogPosting","headline":"How do you set up SPF and DKIM for Shopify?","description":"Shopify is an e-commerce platform based out of Canada, and if you have an online store listed on it, then adding SPF and DKIM records is important.","url":"https://autospf.com/blog/how-do-you-set-up-spf-and-dkim-for-shopify/","datePublished":"2024-01-16T16:18:13.000Z","dateModified":"2026-04-18T02:36:41.000Z","dateCreated":"2024-01-16T16:18:13.000Z","author":{"@type":"Person","@id":"https://autospf.com/authors/vishal-lamba/#person","name":"Vishal Lamba","url":"https://autospf.com/authors/vishal-lamba/","jobTitle":"Content Specialist","description":"Vishal Lamba writes AutoSPF's how-to guides and vendor-specific configuration walkthroughs. His work focuses on step-by-step implementation guides for major email platforms (Google Workspace, Microsoft 365, SendGrid, Mimecast, Proofpoint, Brevo, and others), troubleshooting common SPF errors, and translating RFC-level specifications into practical deployment procedures for IT administrators.","image":"https://media.mailhop.org/autospf/images/authors/vishal-lamba.jpg","knowsAbout":["SPF Vendor Configuration","Email Platform Integrations","SPF Troubleshooting","Technical Documentation","Step-by-Step Guides"],"worksFor":{"@type":"Organization","name":"AutoSPF","url":"https://autospf.com"},"sameAs":["https://www.linkedin.com/in/vishal-lamba/"]},"publisher":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com","logo":{"@type":"ImageObject","url":"https://autospf.com/images/autospf-logo.png"},"description":"Automatic SPF flattening and email authentication management. Resolve SPF lookup limits, flatten SPF records, and maintain email deliverability across all your domains.","parentOrganization":{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138883901","name":"DuoCircle LLC","url":"https://www.duocircle.com","sameAs":["https://www.wikidata.org/wiki/Q138883901","https://www.crunchbase.com/organization/duocircle-llc","https://www.linkedin.com/company/duocircle","https://github.com/duocircle"],"subOrganization":[{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138898167","name":"DMARC Report","url":"https://dmarcreport.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897474","name":"AutoSPF","url":"https://autospf.com"},{"@type":"Organization","@id":"https://www.wikidata.org/wiki/Q138897912","name":"Phish Protection","url":"https://www.phishprotection.com"}]},"sameAs":["https://www.wikidata.org/wiki/Q138897474","https://www.linkedin.com/company/autospf","https://x.com/autospf01","https://www.g2.com/products/autospf/reviews"],"contactPoint":{"@type":"ContactPoint","contactType":"customer support","url":"https://autospf.com/contact-us/"},"knowsAbout":["SPF Record Flattening","Sender Policy Framework","Email Authentication","DNS Management","DMARC","DKIM"]},"mainEntityOfPage":{"@type":"WebPage","@id":"https://autospf.com/blog/how-do-you-set-up-spf-and-dkim-for-shopify/"},"articleSection":"advanced","keywords":"DKIM, DKIM record, email security, SPF record","wordCount":644,"image":{"@type":"ImageObject","url":"https://media.mailhop.org/autospf/images/2024/01/how-to-create-spf-record-0402.jpg","caption":"spoofed emails","width":900,"height":600},"speakable":{"@type":"SpeakableSpecification","cssSelector":[".answer-block","h1"]}} ``` ```json {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://autospf.com/"},{"@type":"ListItem","position":2,"name":"Blog","item":"https://autospf.com/blog/"},{"@type":"ListItem","position":3,"name":"Advanced","item":"https://autospf.com/advanced/"},{"@type":"ListItem","position":4,"name":"How do you set up SPF and DKIM for Shopify?","item":"https://autospf.com/blog/how-do-you-set-up-spf-and-dkim-for-shopify/"}]} ```