How to set up SPF on Shopify

Step by step SPF setup for Shopify: complete instructions, examples, verification commands, and common pitfalls.

Want to check your domain while following this guide?

Run a free SPF, DKIM and DMARC check on your domain to see exactly what is passing and what needs fixing.

No signup required. Works on any domain.

This is a reference guide for configuring SPF on Shopify. Use it while editing DNS or when troubleshooting deliverability.

Tip: Configure SPF for Shopify in minutes. This guide keeps it practical and safe. Then verify everything with the InboxGreen Free Checker.

Provider-specific notes for Shopify

  • Shopify Email requires SPF and DKIM for custom sender domains. Follow the verification steps in Shopify Admin → Settings → Domains.
  • If you send transactional email through a third-party ESP alongside Shopify Email, add both providers' SPF includes into one record at your DNS provider.
  • Shopify Admin → Settings → Domains → DNS settings.

What you’ll need

  • Access to your DNS provider (for example, Cloudflare, Namecheap, GoDaddy).
  • Access to Shopify admin where you can confirm the services that send mail.

Add or update SPF

SPF is a single TXT record published at host @ that lists all systems allowed to send mail for your domain. If you already have an SPF record, edit it instead of adding a second one.

For Shopify, a typical SPF looks like:
v=spf1 include:shops.shopify.com ~all
If you also use another sender (for example, SendGrid), the combined record might be:
v=spf1 include:_spf.google.com include:sendgrid.net ~all
  1. Open your DNS provider and locate the existing TXT record at host @ that contains v=spf1.
  2. If it exists, edit its value and merge includes. If it does not exist, create a new TXT record:
    • Type: TXT
    • Name/Host: @
    • Value: v=spf1 include:shops.shopify.com ~all
  3. Prefer ~all while you are testing. Move to -all only when you are certain all real senders are covered.
  4. Save and wait for DNS propagation (often a few minutes, sometimes longer).

Verify SPF

Use any of these:

  • Run the InboxGreen checker on your domain.
  • Command line:
    dig TXT yourdomain.com +short
    nslookup -type=txt yourdomain.com

Common mistakes

  • Multiple SPF records instead of one. Always merge mechanisms into a single record.
  • Placing the record on www instead of the root @.
  • Forgetting secondary senders such as marketing or transactional tools.
  • Switching to -all too early and blocking legitimate traffic.

Pro tip: Turn on InboxGreen Monitoring to check these records daily and get alerts if something breaks.

Free Deliverability Scan

Check SPF, DKIM, DMARC and List-Unsubscribe for your domain in seconds.

Useful tools