# SPF record for Shopify

URL: https://iblockspam.com/spf/shopify
Last updated: 2026-10-22

Include: None needed (CNAME records)
Where it goes: Not needed (CNAME records)
DNS lookups: 0 on your domain

You don't need to add a separate SPF TXT record for Shopify. Shopify says the CNAME records you add when you authenticate your sender email domain handle SPF automatically, and you don't need to add any IP addresses. What authentication doesn't add is DMARC: Shopify asks you to publish a _dmarc TXT record yourself.

## Example records

- Your main domain on Microsoft 365 stays as it is (TXT, host @): `v=spf1 include:spf.protection.outlook.com -all`
- Your main domain on Google Workspace stays as it is (TXT, host @): `v=spf1 include:_spf.google.com ~all`

## Notes

- Your store must be on an active paid plan to add the CNAME records; Shopify excludes client transfer stores, development stores and the Pause and Build plan.
- If you bought the domain through Shopify, Shopify says DKIM, SPF and DMARC are set up automatically.
- Until the domain is authenticated, Shopify rewrites the sender address to one on `shopifyemail.com`, such as `store+123@shopifyemail.com`.

## How to add it

- In the Shopify admin, go to Settings, then Notifications, and find the Sender email section.
- Click to authenticate your domain. Domains at Cloudflare, GoDaddy or IONOS can be set up automatically; otherwise add every CNAME record Shopify shows (the number varies).
- Add a DMARC TXT record at `_dmarc` if you don't have one. Shopify's default is `v=DMARC1; p=none;`.
- Wait for the status to change from Propagating to Authenticated. Shopify says it can take up to 48 hours.

## DKIM and DMARC

The same CNAME records set up DKIM for your sender email domain. Shopify warns that a DMARC record with strict alignment (`adkim=s` or `aspf=s`) should be relaxed to `adkim=r` and `aspf=r`, and that a domain must have only one DMARC record. See our [DMARC record examples](https://iblockspam.com/blog/dmarc-record-examples).

## Common mistakes

- Adding a Shopify include or Shopify IP addresses to your SPF record. Shopify says neither is needed.
- Deleting the CNAME records later. Shopify then resets your sender address until the records are back.
- Publishing a second DMARC record instead of updating the existing one.

**Q: Do I need to add Shopify to my SPF record?**
No. Shopify says the CNAME records from email domain authentication handle SPF for your sender email address, so you don't need a separate SPF TXT record or any IP addresses. Your existing SPF record stays as it is.

**Q: Why does Shopify send my store emails from shopifyemail.com?**
Because the sender email domain isn't authenticated, or the CNAME records were removed. Shopify rewrites the sender to an address such as `store+123@shopifyemail.com` until all the records are found and the status shows Authenticated.

**Q: What DMARC record does Shopify suggest?**
A TXT record with host `_dmarc` and value `v=DMARC1; p=none;`, Shopify's default. If you already have a DMARC record, update it rather than adding another, and avoid strict `adkim=s` or `aspf=s` alignment.

Sources:
- Shopify Help Center: Setting up your sender email address and domain authentication: https://help.shopify.com/en/manual/intro-to-shopify/initial-setup/setup-your-email

---

Source: iBlockSpam, https://iblockspam.com/spf/shopify (this is a Markdown copy; the HTML page is canonical). Quote with attribution and a link. Site index for AI assistants: https://iblockspam.com/llms.txt