EStore Tools

Shopify Domain Connection Checker

Enter your domain to see which DNS record is stopping it connecting to Shopify, and get the exact records to fix it.

Describe the result you need. AI will set up the tool and ask for any missing details.

Configure with AI

Enter to submit · Shift + Enter for a new line

Sent to AI. Leave out passwords and private customer data.

What Shopify needs from your DNS

A third-party domain connects to Shopify through three records at your DNS host. The checker looks each one up from public DNS and compares it with Shopify's instructions:

TypeNameValueNotes
A@23.227.38.65Only one. Shopify says a different last number, such as 23.227.38.32, is also valid.
AAAA@2620:0127:f00f:5::Only one. Delete any AAAA record left over from an old host.
CNAMEwwwshops.myshopify.com.Many DNS hosts want the trailing period.

It also checks for the four things that most often block a connection: extra A records (browsers pick one at random), stray AAAA records from an old host, a Cloudflare proxy (orange cloud), and CAA records that don't allow Shopify's certificate authorities.

Example: a domain moved from another host

A record
76.76.21.21 (old host)
AAAA record
None
www
CNAME to the root domain

1 problem to fix (the A record), plus 2 yellow items: add the AAAA record and point www straight at shops.myshopify.com. The tool lists 76.76.21.21 under Delete these records.

How to fix the connection

  1. 01

    Open your DNS host

    Make changes where your nameservers point. The checker shows this as DNS host (for example Cloudflare, GoDaddy or your registrar).

  2. 02

    Set the three records

    Copy them from DNS records for Shopify, and delete anything listed under Delete these records. Leave your MX and TXT records alone: they run your email.

  3. 03

    Turn off any proxy

    On Cloudflare, set the A, AAAA and www records to DNS only (grey cloud). Shopify doesn't support proxies, and they can stop the SSL certificate issuing.

  4. 04

    Connect in Shopify

    In Shopify admin go to Settings > Domains > Connect existing domain, enter the domain without www, and click Connect domain.

  5. 05

    Give it time

    DNS changes can take up to 48 hours. While they spread, Shopify may show the SSL certificate as pending.

Common problems and limits

  • SSL stuck on pending. A stray AAAA record is a frequent cause: Let's Encrypt, one of the certificate authorities Shopify uses, tries IPv6 first. CAA records that don't list letsencrypt.org, pki.goog and ssl.com can block it too.
  • A CAA value of `;` means no certificate authority may issue at all. Replace it with the three CAA records the tool gives you, or delete it.
  • Subdomains such as shop.example.com need a CNAME to shops.myshopify.com. Enter the subdomain and the checker switches to checking that CNAME.
  • Cached answers. The tool reads from Cloudflare's and Google's public resolvers, so a change made minutes ago may not show yet.
  • Headless and custom setups (a storefront hosted elsewhere) won't match Shopify's records on purpose. The tool reports what DNS says. It can't know your architecture.

Questions people ask

Why is my domain not connecting to Shopify?

Usually the A record still points at an old host, there's an extra A or AAAA record, or Cloudflare's proxy is on. Run the check and fix the red items first.

What IP address does Shopify use for the A record?

23.227.38.65. Shopify says addresses with a different last number, like 23.227.38.32, are valid regional variations.

Do I need an AAAA record for Shopify?

Shopify's manual setup steps include one: 2620:0127:f00f:5:: on @. The store works over IPv4 without it, but any other AAAA record must go.

Can I keep Cloudflare's proxy on with Shopify?

No. Shopify doesn't support proxies and says they can break SSL and connectivity. Keep Cloudflare as your DNS host with the records set to DNS only.

How long does a Shopify domain take to connect?

Shopify allows up to 48 hours for DNS changes to spread and for the SSL certificate to issue.

Related tools

Shopify SSL Pending DiagnoserFind the CAA, AAAA, proxy or DNS record holding up your Shopify SSL certificate.Shopify DNS Setup GeneratorPick your DNS host and get the exact records to add and delete to connect your domain to Shopify, without breaking email.Shopify Email Authentication CheckerCheck the DMARC, SPF and CNAME records Shopify needs before it sends from your own address instead of shopifyemail.com.Store Email Deliverability CheckerCheck your store's SPF, DKIM, DMARC and MX records against Gmail and Yahoo's sender rules, and get corrected records to copy.

Want this builtinto your store?

I'm Emmanuel, a Shopify and WooCommerce developer. If this tool pointed at something you'd rather have fixed for you (a faster store, cleaner product data, a migration, a custom feature), send me a note.

Emmanuel Asika

Emmanuel Asika

Shopify & WooCommerce developer, Dublin

I build and fix online stores: new builds, migrations, speed, SEO and the custom bits apps can't do.

hello@emmanuelasika.com
See my work

Last reviewed 30 September 2026.

Sources: Shopify Help: Connecting a third-party domain manually · Shopify Help: Troubleshooting domains connected to Shopify · Shopify Help: Enabling secure connections (CAA records) · Cloudflare: IP ranges · Cloudflare: Proxy status · Let's Encrypt: IPv6 support · ARIN: Shopify IPv6 registration (2620:127:f000::/44)