EStore Tools

Shopify Email Authentication Checker

Check the DMARC, SPF and CNAME records Shopify needs before it sends from your own address instead of shopifyemail.com.

Describe the result you need. AI will set up the tool and ask for any missing details.

Configure with AI

Enter to submit · Shift + Enter for a new line

Sent to AI. Leave out passwords and private customer data.

Settings > Notifications > Sender email in Shopify admin. Copy a CNAME name that contains _domainkey.

Why your emails come from shopifyemail.com

Since February 2024, Gmail and Yahoo require bulk senders to authenticate their domain and publish DMARC. Shopify applies that to every store: until your sender domain passes, Shopify rewrites the From address to something like store+123@shopifyemail.com.

To send as your own address, your domain needs two things:

  • Shopify's CNAME records. Shopify generates them for your store. They handle DKIM and SPF for Shopify's emails, so you don't add a separate SPF include for Shopify.
  • Exactly one DMARC record. The minimum is v=DMARC1; p=none. Two DMARC records cancel each other out, and Shopify's docs ask you to avoid strict alignment (adkim=s or aspf=s).

The checker reads your DMARC, SPF and MX records from public DNS. Shopify's CNAME names are unique to each store and can't be guessed, so paste one into Shopify CNAME name to confirm it resolves to Shopify.

How to authenticate your domain in Shopify

  1. 01

    Open the sender settings

    In Shopify admin go to Settings > Notifications and find Sender email.

  2. 02

    Authenticate the domain

    Choose to authenticate. If your domain is on Cloudflare, GoDaddy or IONOS, Shopify can add the CNAMEs automatically. Otherwise, copy each CNAME name and value into your DNS host exactly as shown.

  3. 03

    Add DMARC yourself

    Automatic setup doesn't add DMARC. Add one TXT record named _dmarc using the record the tool gives you. If you already have one, edit it rather than adding a second.

  4. 04

    Check again

    DNS changes can take up to 48 hours. Run the checker with one of the CNAME names to confirm, then check the status in Shopify admin.

From p=none to real protection

p=none meets Shopify's and Gmail's requirements, but it only reports. It doesn't stop anyone spoofing your domain. Google recommends starting at none and tightening once the reports look right. The tool gives you each step:

StageRecordWhen to move on
1. Monitorv=DMARC1; p=none; rua=mailto:…After a few weeks of reports showing Shopify, your mailbox and every other sender passing
2. Quarantinev=DMARC1; p=quarantine; rua=mailto:…Once quarantine causes no delivery problems
3. Rejectv=DMARC1; p=reject; rua=mailto:…Final setting

Older guides ramp up with pct=. RFC 9989 (May 2026) removed that tag from the DMARC standard, so the tool steps the policy up instead.

Questions people ask

Why are my Shopify emails sent from shopifyemail.com?

Your sender domain isn't authenticated yet. Add Shopify's CNAME records and exactly one DMARC record, and Shopify will send from your address.

What DMARC record does Shopify need?

At minimum v=DMARC1; p=none as a TXT record named _dmarc. Adding rua=mailto: with a reporting address is strongly worth it.

Do I need to add Shopify to my SPF record?

Not for Shopify's own emails. Shopify says its CNAME records handle SPF, so you don't need a separate SPF TXT record for it.

Why can't the tool find my Shopify CNAME records?

Their names are unique to your store. Copy one from Settings > Notifications > Sender email into the optional field, and the tool checks it.

I have two DMARC records. Is that a problem?

Yes. Receivers discard all of them when there's more than one, so you effectively have none. Merge them into one.

Related tools

Store Email Deliverability CheckerCheck your store's SPF, DKIM, DMARC and MX records against Gmail and Yahoo's sender rules, and get corrected records to copy.DMARC Record GeneratorBuild a DMARC TXT record with presets for Shopify Email, Klaviyo and Google Workspace.Shopify Domain Connection CheckerEnter your domain to see which DNS record is stopping it connecting to Shopify, and get the exact records to fix it.Klaviyo Sending Domain CheckerCheck whether your Klaviyo branded sending domain's DKIM is live, plus SPF and DMARC, in one DNS lookup.

Want this builtinto your store?

I'm Emmanuel, a Shopify and WooCommerce developer. If this tool pointed at something you'd rather have fixed for you (a faster store, cleaner product data, a migration, a custom feature), send me a note.

Emmanuel Asika

Emmanuel Asika

Shopify & WooCommerce developer, Dublin

I build and fix online stores: new builds, migrations, speed, SEO and the custom bits apps can't do.

hello@emmanuelasika.com
See my work

Last reviewed 30 September 2026.

Sources: Shopify Help: Set up your sender email address · Shopify Help: Displaying your store's sending email · Google: Email sender guidelines · Yahoo Sender Hub: Sender best practices · RFC 7208: SPF (DNS lookup limits) · RFC 9989: DMARC · Google Workspace: Set up SPF · Google Workspace: Set up DKIM · Google Workspace: Set up DMARC · Microsoft: Set up SPF for Microsoft 365 · Microsoft: DKIM for custom domains