Shopify emails going to spam: how to fix it

Updated 10 November 2026 · by Mohamed, Growth with MK

If Shopify order confirmations, shipping updates or Shopify Email campaigns are ending up in spam, or your sender address keeps changing to something like store+12345@shopifyemail.com, the cause is almost always domain authentication. Here's how to fix it properly.

Why it happens

Shopify sends your store's emails from its own servers but "from" your address, for example hello@yourshop.co.uk. Inbox providers need proof that Shopify is allowed to do that. Since February 2024, Gmail and Yahoo require that proof: SPF and DKIM authentication plus a DMARC record for anyone sending in bulk.

Shopify's own help centre says that to send from your branded address you need to authenticate your domain and have a DMARC record. If you don't, Shopify rewrites your sender to store+…@shopifyemail.com so mail keeps flowing. That's better than nothing, but customers see an unfamiliar address, and it does nothing for your own domain's reputation.

Step 1: authenticate your sender email in Shopify

1. In Shopify admin, go to Settings → Notifications.
2. In the Sender email section, open Email domain authentication.
3. If your domain is with Cloudflare, GoDaddy or IONOS, you can choose Authenticate automatically. Otherwise choose manual setup.
4. Add every CNAME record Shopify shows to your domain's DNS. These handle both SPF and DKIM for Shopify, so you don't need to add Shopify to an SPF TXT record for this.
5. Wait for the status to change to authenticated. DNS changes can take up to 48 hours.

If you bought your domain through Shopify, it sets these records up for you, but check that DMARC is there too.

Step 2: add one DMARC record

Shopify's automatic authentication doesn't create DMARC. Add one TXT record:

You must have only one DMARC record. Shopify notes that multiple DMARC records cause validation to fail. Start on p=none, check the reports, then move to p=quarantine once your genuine mail passes.

Step 3: authenticate everything else that sends as you

Shopify is rarely the only sender. Check each one:

• Your mailbox (Google Workspace, Microsoft 365, Zoho): switch on DKIM and make sure it's in your SPF record.
• Klaviyo: set up a branded sending domain under Settings → Domains.
• Mailchimp or Brevo: use their domain authentication pages and add the records they list.
• Review, loyalty or helpdesk apps that send "from" your address: look for a domain authentication setting.

Keep a single SPF record. If two tools each tell you to add "an SPF record", merge their includes into one.

Step 4: check the basics of your marketing emails

• Only email people who signed up, and make unsubscribing easy. Gmail and Yahoo's bulk-sender rules require one-click unsubscribe for marketing mail and expect spam complaint rates to stay below 0.3%.
• Send from the same authenticated address consistently.
• If you send to lots of Gmail users, set up Google Postmaster Tools (free) to see your domain's spam rate and authentication results.

Step 5: test

Run the free domain check, then place a test order to a Gmail address and use Show original to confirm SPF, DKIM and DMARC all say PASS.

Related: customers not getting order confirmation emails.

Related guides

• Customers not getting your order confirmation emails? Here's why
• Klaviyo or Mailchimp emails going to spam? How to fix it
• Why are my business emails going to spam? How to fix it