How to Set Up DMARC, DKIM & SPF for Shopify Stores

If you're running a Shopify store and sending emails from your own domain, you need to configure SPF, DKIM, and DMARC for proper email authentication. This guide covers Shopify's email authentication requirements.

Understanding Shopify Email

Shopify sends several types of email on your behalf:

• Order confirmations
• Shipping notifications
• Customer account emails
• Marketing emails (if using Shopify Email)

SPF for Shopify

Add Shopify to Your SPF Record

Include Shopify's servers in your SPF record:

v=spf1 include:shops.shopify.com ~all

If you have other services:

v=spf1 include:shops.shopify.com include:_spf.google.com ~all

DKIM for Shopify

Shopify supports custom DKIM for sender authentication:

1. In Shopify Admin, go to Settings → Notifications
2. Look for "Sender email" or email authentication settings
3. Follow prompts to set up domain authentication
4. Add the provided DNS records to your domain

Custom Domain Email

If using a custom sender domain (e.g., orders@yourdomain.com):

• Verify your domain in Shopify settings
• Add required CNAME or TXT records
• Enable DKIM signing

DMARC for Shopify Stores

Create DMARC Record

Add at _dmarc.yourdomain.com:

v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com

Alignment Considerations

For DMARC to pass, Shopify emails must be configured to authenticate with your domain, not Shopify's. This requires custom domain authentication in Shopify settings.

Third-Party Email Services

If you use email services alongside Shopify:

Klaviyo

Add: include:_spf.klaviyo.com to SPF

Set up domain authentication in Klaviyo for DKIM

Mailchimp

Add: include:servers.mcsv.net to SPF

Enable domain authentication for DKIM

Other Platforms

Each marketing platform has its own SPF include and DKIM setup. Configure each for your sending domain.

Verification

1. Place a test order on your store
2. Check the confirmation email headers
3. Verify SPF, DKIM, and DMARC pass

Common Issues

Emails Going to Spam

• Verify SPF includes Shopify
• Enable domain authentication for DKIM
• Check DMARC alignment

Using Default Shopify Email

If sending from a @shopifyemail.com address, Shopify handles authentication. Custom domains need manual configuration.

Multiple Sending Services

Combine all services in one SPF record. Configure DKIM for each separately.

For complete guidance, see our Email Authentication Complete Guide.