How do I authenticate my Shopify email domain with SPF and DKIM?

To make sure your Shopify order and notification emails reach your customers’ inbox (not spam), you must authenticate your branded sender email domain using SPF, DKIM, and DMARC records.

Why authentication is required

From February 1, 2024, Gmail and Yahoo require all branded sender emails to be authenticated. If your domain is not authenticated, Shopify rewrites your sender email to:

[email protected]

To keep your branded email (for example: [email protected]), authentication is mandatory.

Step 1 – Set your Sender Email

1. Go to Settings > Notifications.
2. In Sender email, enter your branded email (example: [email protected]).
3. Click Save.

Step 2 – Authenticate your domain in Shopify

1. Go to Settings > Notifications.
2. Under Sender email, click Authenticate your domain.
3. Shopify will display CNAME records that must be added to your domain provider.

Step 3 – Add Shopify CNAME records (SPF & DKIM)

Log in to your domain provider (GoDaddy, Cloudflare, Namecheap, etc) and add the CNAME records shown inside your Shopify admin.

These records connect your domain to Shopify’s SPF and DKIM authentication system.

Step 4 – Add DMARC record

Add the following TXT record to your domain DNS:

This DMARC policy allows Shopify to legally send emails on behalf of your domain.

Step 5 – Wait and verify

DNS propagation can take up to 48 hours.

Go back to:

Settings → Notifications → Sender Email

Status should show: Authenticated.

If authentication is not completed

• Your sender email is rewritten to [email protected]
• Emails may land in spam
• Brand trust and deliverability are reduced

Final Result

Once SPF, DKIM, and DMARC are authenticated, your Shopify store can send:

• Order confirmations
• Shipping notifications
• Marketing emails

from your branded domain securely and reliably.