Ecom Store Pro

How to Edit DNS Records on Shopify: TXT, MX and CNAME

Edit DNS on a Shopify-managed or third-party domain: where to add TXT, MX and CNAME records, what to leave alone, and how to check the change.

Listen to a short brief of this article
Hands-free while you multitask

The short version

To add or change a DNS record on a Shopify-managed domain, go to Settings > Domains, click your domain and click Manage under DNS settings, unless it uses custom nameservers, which hide the records from its DNS settings page; a domain connected from another provider is edited in that provider's account.

Copy the record exactly from the service that asked for it, and save a copy of your current records first.

Leave the default A, AAAA and CNAME records alone, because changing them can break the connection between your domain and Shopify.

Shopify's DNS settings page for Shopify-managed domains says up to 24 hours and its troubleshooting page says up to 48 hours for a change, so make no other DNS changes while you wait, and check the record with a free lookup tool.

A service has asked you to add a TXT record or change your MX records, and you're not sure where those live or what else you might break. The first question is who holds your domain's DNS, because that decides whether you edit anything in Shopify at all.

Where Do You Edit DNS for Your Domain?

Key takeaway

Find your row by how the domain came to your store. Shopify-managed means you bought it through Shopify or transferred it to Shopify; third-party means it stays with another provider and is only connected.

Where your DNS records are edited
How the domain reached your storeWhere its DNS records are editedYour next move
You only have the myshopify.com addressNowhere yet: DNS settings need a custom domainAdd a custom domain
Bought through Shopify, or transferred to Shopify (a Shopify-managed domain)Your Shopify adminSettings > Domains > your domain > DNS settings > Manage
Shopify-managed, but using custom nameserversNot on the DNS settings page, which shows a banner instead of your recordsClick Restore Shopify nameservers to manage records in your admin again; Shopify says a Shopify-managed domain needs to use the default Shopify nameservers
Connected from another provider and still managed thereYour domain provider's account, or the DNS host if another provider such as Cloudflare hosts your DNSMake the change there; Shopify Support can't log in for you

Source: Shopify Help Center pages on DNS settings and third-party domains, read November 6, 2026.

Not sure which you have? Our domains guide sets out what differs between Shopify-managed and third-party domains, stage by stage.

In Shopify adminOpen in your store
  1. Settings
  2. Domains
A store with no custom domain lists only its myshopify.com address, with the ways to add one at the top.

Still unsure? Open the domain's page and read the line under its name. As of November 6, 2026, a test domain we started connecting in our development store showed Managed by Cloudflare there, and the store's myshopify.com address showed Managed by Shopify. We saw only those two states, so treat the line as a clue.

If it names another provider, go to that provider's account. If it names Shopify, look for a DNS settings section on the same page. The myshopify.com page we saw has no such section, and Shopify's DNS settings page says a store on a myshopify.com domain needs to add a custom domain before it can access DNS settings.

In Shopify adminOpen in your store
  1. Settings
  2. Domains
  3. Your myshopify.com address
Managed by Shopify sits on this page, yet a myshopify.com address has no DNS settings section to open.

If your domain uses custom nameservers

Your records aren't displayed on the DNS settings page: Shopify shows a Custom nameservers enabled banner instead. To manage them in your Shopify admin again, click Restore Shopify nameservers in that banner. Our separate answer covers whether a Shopify-managed domain needs Shopify's nameservers.

A third-party domain is edited at your provider

Key takeaway

Shopify's page on third-party domains says you manage the domain, including DNS settings, renewals and billing, in your provider's account. Shopify Support can't log in to that account for you, even if you give your explicit permission.

Shopify's connection guide says to use your domain provider's default nameservers unless you manage your DNS somewhere else. If another provider, such as Cloudflare, already hosts your DNS, the record goes in there, and you don't need to move back to your registrar's default nameservers.

While you're still connecting the domain, Shopify tells you what to enter there. As of November 6, 2026, Manual setup on our test domain named Cloudflare, listed one TXT record called shopify_verification with its value, and ended with an I updated DNS records button. Copy what your own screen lists, because a different domain can need different records.

In Shopify adminOpen in your store
  1. Settings
  2. Domains
  3. Your domain
Manual setup names the provider, lists the record with its value, and ends with I updated DNS records.

Once the domain is connected, values come from whichever service is asking, not from Shopify: see which record each request means.

A Safe Order for Any DNS Change

Key takeaway

A DNS change can take a day or more to show, so this is a list you'll come back to. Tick the steps off as you go; progress is saved in this browser.

Change DNS records without breaking anything elseThe same seven steps apply on a Shopify-managed domain and at a third-party provider; only the place you edit differs.

Change DNS records without breaking anything else

The same seven steps apply on a Shopify-managed domain and at a third-party provider; only the place you edit differs.

0 of 7 done
  1. Use the table at the top of this guide: your Shopify admin for a Shopify-managed domain, your provider's account for a third-party domain.

  2. Take the record type, name and value from that service's own instructions.

  3. Note each record and its value somewhere outside your DNS settings before you change anything.

  4. Add or edit the records the service named, and leave the default A, AAAA and CNAME records alone.

  5. Shopify says additional changes during propagation can reset the timer and cause further delays.

  6. Look the record up with whatsmydns.net or DNS Checker and compare the value with what you entered. If it differs from your settings, Shopify says to wait 48 hours before making additional changes.

  7. Run that service's own check, then keep or delete the record as that service says.

How to Add, Edit or Remove a Record in Shopify

Key takeaway

Shopify's DNS settings page lets you access and edit six record types on a Shopify-managed domain: A, CNAME, MX, TXT, AAAA and SRV. To add a record:

  1. From your Shopify admin, go to Settings > Domains.
  2. Click the domain that you want to configure.
  3. In the DNS settings section, click Manage.
  4. Click Add custom record, and then select the record type.
  5. Enter the details the service gave you, and then click Confirm.
In Shopify adminOpen in your store
  1. Settings
  2. Domains
  3. Your domain
  4. DNS settings
  5. Manage

To change or delete a record, start from the same Manage page:

  • To edit: click Actions > Edit for the record, change its details and click Confirm.
  • To remove: click Actions > Remove for the record, and then click Remove.

The rules the record form enforces

Key takeaway
  • MX and TXT records: don't edit the name field when you add a new one.
  • CNAME records: you can have several, but each one must have a unique name, such as www or shop.

Shopify's page also says this about a new CNAME record:

When you create a new CNAME record, Shopify automatically adds .email.DOMAINNAME.com.
Shopify Help Center — Editing the DNS settings for your Shopify-managed domain ·

After you save a new CNAME, compare the record on the page with what the service asked for. If it differs, ask Shopify Support before you rely on it.

When a TXT value is too long

Key takeaway

Enter a longer value and you get the error Value is too long (maximum is 255 characters). Shopify says you can't split it into multiple strings or add quotation marks.

DKIM records hit this limit most often
Shopify says the limit often affects DKIM records from third-party email services, such as Google Workspace, that use a 2048-bit key. Generate a new key with a 1024-bit length in your email service's settings, ask the service for a value of 255 characters or fewer, or transfer the domain to a provider that supports longer TXT records.

Which Record Does Each Request Mean?

Key takeaway

Find the service that asked. The last column is where the rules differ most.

What each request asks you to add
Who is askingRecordWhere the value comes fromWhat to watch
Google Search Console, Domain propertyTXT in the most common case; CNAME if Google's Admin Toolbox finds a CNAME whose target is a parent domainSearch Console's verification instructionsDon't remove it, even after verification succeeds
Google Workspace, domain verificationTXTThe TXT record section of Google's setup, including google-site-verification=Keep it until Google verifies ownership; Google says it can be safely removed once verified
Zoho Mail, domain verificationTXT, if you choose that methodThe Zoho Mail Admin ConsoleZoho recommends deleting the TXT record once verification is complete
Meta, domain verificationTXT, if you choose the DNS methodMeta Business SuiteOur Meta guide has the steps for adding its TXT record on a Shopify-managed domain
Google Workspace or Zoho Mail, delivering your emailMXThe mail service's own setup pageOther MX records can stop mail reaching the new host, and MX records affect Shopify forwarding
Shopify, a subdomain on a third-party domainCNAMEshops.myshopify.comNo A record is needed for the subdomain
Shopify, your sender email on a third-party domainCNAME records, plus a DMARC TXT recordThe modal in Shopify's email authentication steps; the number of records may varyAdd every record the modal shows; adding these CNAME records isn't possible on client transfer stores, dev stores or the Pause and Build plan

Source: Shopify Help Center, Google Workspace Help, Google Search Console Help, Zoho Mail documentation and Meta Business Help Center, read November 6, 2026.

Adding a TXT record to verify your domain

Key takeaway

A verification TXT record proves you own the domain, in Google's words a unique text (TXT) record in your domain settings. Copy the whole value, including a prefix such as google-site-verification=. What you do with the record afterward depends on the service, and the rules run in opposite directions, so check that service's row in the table above.

Search Console requires a DNS record only for a Domain property, not a URL-prefix property. For a manually added record, Google says the choice between TXT and CNAME depends on how your site is configured: if its Admin Toolbox finds no CNAME record for your domain, which it calls the most common case, you follow the TXT instructions.

At a DNS provider, Search Console says to leave the Host or Name field of a TXT record blank or set it to @, as your provider's documentation describes. On a Shopify-managed domain, Shopify's rule for a new TXT record is to leave the name field alone.

Changing MX records for email

Key takeaway

Shopify says email hosting isn't provided on Shopify, so a mailbox needs a third-party service. Our answer on getting a real inbox on your domain covers that choice.

The admin supports Zoho Mail and Google Workspace for sending from a forwarding address; any other host on a Shopify-managed domain connects through custom DNS records.

On a Shopify-managed domain, Shopify's steps for those two begin at the mail service, where you create your custom email address, verify the domain and copy the TXT code, meta tag or Zoho code it gives you. In the domain's Email forwarding section, click Switch to email hosting, select your provider, enter that code and click Save, then follow the mail service's instructions to complete the setup.

Before you add MX records, check whether you use Shopify's email forwarding on this domain. Shopify's email hosting page warns about it directly:

Please note: Email forwarding configured within the domain itself on Shopify will be impacted once MX records are added to domain DNS settings.
Shopify Help Center — Setting up email hosting for a Shopify-managed domain or a third-party domain ·

So decide where your forwarded addresses will go before you add the records. The values then depend on your mail host:

  • Google Workspace: Google's MX instructions give smtp.google.com at Priority 1, and any account can use that value; an account that started before 2023 might have values that start with aspmx: Google says that if your email is working, no changes are required, and those values are still supported. If you see other MX records listed when you add the new value, Google's instruction is to remove them. Google says new MX records can take up to 72 hours to be recognized.
  • Zoho Mail: per its delivery instructions, the MX domain ending varies with the data center that hosts your data, and if other MX entries have a lower priority number (Zoho's examples are 0 or 5), email won't be delivered to Zoho Mail. Zoho also says to ensure you have deleted all other MX records related to your previous email provider.
  • Both: a trailing dot on the MX value depends on your registrar or DNS provider, so follow that provider's format.

If you can't add MX records for email forwarding on certain domain types bought through Shopify, Shopify says to contact Support.

Adding a CNAME for a subdomain

On a third-party domain, Shopify's subdomain page says to point the CNAME record for your subdomain to shops.myshopify.com, and you don't need an A record for it, even if you use it as your primary domain. Our answer on pointing a subdomain at Shopify has the full steps.

Records for sending store email

Key takeaway
  • Bought through Shopify: Shopify configures DKIM, SPF and DMARC automatically.
  • Third-party domain: add every CNAME record the modal displays, because the number of records may vary. Your store must be on an active paid plan first: Shopify says adding these CNAME records isn't possible for client transfer stores, dev stores or stores on the Pause and Build plan. You don't need a separate SPF TXT record for your sender address.
  • On Cloudflare, GoDaddy or IONOS: Shopify can set up your CNAME records automatically for a third-party domain, though not a DMARC record.
  • DMARC: Shopify's steps use the TXT value v=DMARC1; p=none;. If you already have a DMARC record, don't add a second one, because Shopify says multiple DMARC TXT records cause DMARC validation to fail. You can update it instead, and Shopify says one that uses strict alignment (adkim=s or aspf=s) doesn't need changing.

Our answer on what DNS records Shopify Messaging needs covers this request in full.

Which Records Should You Leave Alone?

Key takeaway

When you buy a domain through Shopify or transfer one to Shopify, the A and CNAME records are added automatically and set to Shopify's defaults. Shopify says you won't need to modify them for your store to point to your domain, and its caution says why to leave them:

Removing or changing these records can break the connection between your domain and Shopify, which prevents your online store from being found by your domain name.
Shopify Help Center — Editing the DNS settings for your Shopify-managed domain ·
Records to leave as they are
RecordWhat can go wrongWhat to do instead
Default A recordChanging it can break the connection between your domain and Shopify; on a Shopify-managed domain it can't be removed from the adminOn a Shopify-managed domain, use Actions > Edit only when you mean to change where the domain points, or Actions > Reset to restore Shopify's default
Default AAAA recordRemoving or changing it can break the same connection; IPv6 is activated automatically on a domain bought through or transferred to ShopifyOn a Shopify-managed domain, use Actions > Reset to restore a changed record; if you removed it, add it again from your copy. To drop IPv6 on purpose, read how to turn off IPv6 first
Default CNAME recordRemoving or changing it can break the same connectionAdd a new CNAME with its own unique name, such as shop, and leave www as it is
DKIM, SPF and DMARC on a domain bought through ShopifyDeleting them causes your sender email to be rewritten to store+123@shopifyemail.comLeave them: Shopify configures all three automatically on these domains
CNAME records from email authentication on a third-party domainRemoving them can cause deliverability issues, including bouncesLeave them in place at your DNS provider
An existing DMARC TXT recordA second one causes DMARC validation to fail, and your sender email may be rewrittenDon't add a second one; you can update the record you have, and one that uses strict alignment (adkim=s or aspf=s) doesn't need changing

Source: Shopify Help Center pages on DNS settings, IPv6, domain terminology and email setup, read November 6, 2026.

An unfamiliar number in an A record isn't automatically a problem. For a third-party domain, Shopify's manual connection guide gives 23.227.38.65 for the A record and 2620:0127:f00f:5:: for the AAAA record. It adds that you might later see a different host ID, such as 23.227.38.32, depending on region, and that this is still valid.

On a Shopify-managed domain, your IP address is in the A RECORD section, in the Points to column.

Want the domain to stop pointing at your store? Shopify says you can't remove the A record of a Shopify-managed domain from the admin. To stop it pointing there immediately while keeping it in your account, park the domain.

How Long Do DNS Changes Take?

Key takeaway

Two live Shopify pages give different upper limits that both cover a DNS change on a Shopify-managed domain. We read both on November 6, 2026.

  • The DNS settings page says changes to your DNS settings can take up to 24 hours to take effect.
  • The domain troubleshooting page says any update to a domain's DNS can take up to 48 hours to propagate.

You don't need to settle that to act. The troubleshooting page says to avoid additional DNS changes during propagation, because they can reset the timer and cause further delays. Treat both numbers as upper limits, not as promises, and judge the change by what a lookup tool shows, as described below.

The service that asked may give its own number, which speaks only for its own check. The table lists some of the waits stated on pages we read, including the two above:

Stated waits, by who states them
Who says itStated waitAbout which change
Shopify, DNS settings pageUp to 24 hoursChanges to DNS settings on a Shopify-managed domain
Shopify, domain troubleshooting pageUp to 48 hoursAny update to the DNS of a domain
Shopify, connecting a third-party domainUsually within two hours, up to two daysUpdated DNS records taking effect when you connect a third-party domain
Shopify, manual connection guideUp to 48 hoursA third-party domain becoming fully live
Shopify, email hosting pageUp to 48 hoursPropagation after you connect email hosting
Google WorkspaceUp to 72 hoursNew MX or TXT records being recognized
Google Search ConsoleUp to two or three daysYour provider serving a manually installed record

Source: each party's own documentation, read November 6, 2026. These figures come from different pages, and not all of them describe the same change, so don't compare them with one another.

Connecting a third-party domain rather than editing one record? Our answer on how long each kind of domain change takes covers that wait.

Check the record from outside

Key takeaway

Shopify names two free tools for this: whatsmydns.net and DNS Checker. Enter your domain, pick the record type you changed and compare the value with the one you entered.

whatsmydns.net results for a TXT lookup of example.com
Compare each location's value with your record; a red cross here came back with no value.

On November 6, 2026, a TXT lookup of example.com on whatsmydns.net returned values with a green tick from some locations and a red cross with no value from others. So read the value, not only the tick. If a value is missing or differs from your settings, wait before you change anything, because Shopify's advice for a mismatch is to wait 48 hours.

How Do You Reverse a Change?

Key takeaway

This is what your saved copy is for. Match what changed to one of these moves:

  • A record you added or edited: use your copy to edit the value back or remove the record, the same way you changed it. At a third-party provider, do this in its DNS settings.
  • A default A, AAAA or CNAME record: on a Shopify-managed domain, click Actions > Reset for that record. Those three types are the only ones you can reset, and each goes back to pointing to Shopify.
  • Everything at once: Reset DNS settings deletes all your records except the A, AAAA and CNAME records, and it also deletes the CNAME records for any subdomains. It isn't displayed if your domain uses custom nameservers.

That last move takes your MX and TXT records with it, so use it knowingly. Our answer on whether to reset one record or all DNS settings walks through that choice. Putting a record back is also a DNS change, and Shopify says additional changes during propagation can reset the timer.

If Your Domain Shows as Not Connected After an Edit

Key takeaway

Your domain stopped opening your store after you changed a record, or Shopify no longer treats it as connected. Start with your own edit: compare the record with your copy, and if it differs, put it back. After any fix, allow for propagation before you make more DNS changes. Shopify's troubleshooting and third-party domain pages give these checks:

  • An active domain. Shopify's troubleshooting page starts with verifying that your domain is active and not expired or suspended.
  • One A record and one AAAA record. Shopify's checklist asks for only one of each, and its connection guide allows only one A record and one www CNAME record on a third-party domain.
  • No wildcard. There should be no wildcard record pointing at Shopify.
  • DNSSEC. Shopify-managed domains don't support it. On a third-party domain, a broken DNSSEC setup means the domain isn't considered fully connected, even when all your DNS records are correct.
  • Cloudflare. Cloudflare proxy setups aren't supported, so records that point to Shopify need to be set to DNS only. Other third-party proxies aren't supported either.
  • CAA records on a third-party domain, if you're required to use them. Each one needs the certificate authorities letsencrypt.org, pki.goog and ssl.com; Shopify's secure connections page writes the pki.goog entry as pki.goog; cansignhttpexchanges=yes.

To see where a domain stands, look at the Status column under Settings > Domains. As of November 6, 2026, our test domain read Needs setup there, next to a myshopify.com address marked Connected. Shopify's troubleshooting page says a Needs Attention badge means there are specific issues to address.

In Shopify adminOpen in your store
  1. Settings
  2. Domains
The Status column shows each domain's state: Connected for one, Needs setup for the domain not yet finished.

When you connect a subdomain and Shopify doesn't recognize its CNAME record, it prompts you with an I updated DNS records button, so you can run the check again after your fix. Our answer on what to check when a domain still does not connect also says what to send your domain provider.

DNSSEC needs a decision of its own on a third-party domain: see whether to turn it off or fix it.

The Bottom Line

Key takeaway
Take the value from the service that asked. Then judge the result with a lookup tool, not by how soon you hoped it would work.
Your Next Step by Stage
Mail landing in spamWhat to fix once the records are in place: list health, warm-up and the numbers that show it's working.Read the deliverability guide
Store says Not secureWhat to check when your store shows the Not secure warning, starting with your Domains page.Check the certificate
Want a second opinionEcom Store Pro's monthly support plan includes Shopify consulting, so you can ask about a DNS request before you change it.See the support plan

If the Fix Is in Your Theme Code

Records stay yours to change in your admin or at your provider. Theme edits are hourly work with no monthly commitment, and start only after you approve a time estimate.

See hourly development

Frequently Asked Questions

No. Shopify's DNS settings page says a store on a myshopify.com domain needs to add a custom domain before it can access DNS settings. The myshopify.com page in our development store had no DNS settings section on November 6, 2026. Add a custom domain through Settings > Domains first; where its records are edited then depends on how the domain reached your store.
If your domain uses custom nameservers, Shopify doesn't display your records on the DNS settings page and shows a Custom nameservers enabled banner instead. Shopify's connection guide says a Shopify-managed domain needs to use the default Shopify nameservers. To manage your records in your Shopify admin again, click Restore Shopify nameservers in the banner.
On a Shopify-managed domain, Shopify's DNS settings page lists six record types you can access and edit: A, CNAME, MX, TXT, AAAA and SRV. Add one with Add custom record under DNS settings, and change or delete one from its Actions menu. A third-party domain's records are edited at your domain provider instead.
No. Shopify says its Support team can't log in to your third-party domain account for you, even if you give your explicit permission. You manage a third-party domain's DNS settings, renewals and billing in your provider's account, so the change has to be made there, by you or by someone with access to that account.
Shopify's pages differ: its DNS settings page for Shopify-managed domains says up to 24 hours, and its domain troubleshooting page says up to 48 hours, both read November 6, 2026. Google gives its own up-to-72-hour figure for Workspace MX and TXT records. Whichever applies, make no additional DNS changes meanwhile, because Shopify says that can reset the timer.
It depends on the service. Google Search Console says to keep the record to stay verified, even after verification succeeds. Google Workspace says the record must stay until Google verifies ownership and can be safely removed once verified. Zoho recommends deleting its TXT records once verification is complete. Check the instructions of the service that asked before you remove anything.
Yes. Shopify's email hosting page warns that email forwarding configured within the domain on Shopify will be impacted once MX records are added to the domain's DNS settings. Before you add MX records for a mail host on a Shopify-managed domain, decide where your forwarded addresses will go, and save a copy of your existing records.
On a Shopify-managed domain, TXT values can be up to 255 characters, and a longer one returns a Value is too long error. This often affects 2048-bit keys from services such as Google Workspace. Shopify's options are generating a 1024-bit key, asking the service for a shorter value, or transferring the domain to another provider.
Shopify's manual connection guide says the A record for a third-party domain points to 23.227.38.65, and that after connecting you might see another host ID, such as 23.227.38.32, depending on region. Shopify says this is still a valid A record and doesn't indicate a connection issue, so that alone is nothing to fix.
No. Shopify says you can't remove the A record for a Shopify-managed domain from the admin. You can click Actions > Edit and update its value, or Actions > Reset to restore Shopify's default. To stop the domain from pointing to your store straight away while keeping it in your account, park the domain instead.
Not for the sender address on a third-party domain: Shopify says the CNAME records from email authentication handle DKIM and SPF, and you don't need a separate SPF TXT record. They don't configure DMARC, so add one DMARC TXT record yourself; if you already have one, you can update it instead. Email forwarding on a Shopify-managed domain has its own SPF record.
No. Shopify says Cloudflare proxy setups, including Orange-to-Orange, aren't supported, and third-party proxies can cause unexpected behavior or service disruptions for your store. If Cloudflare hosts your DNS, you can keep it there without moving back to your registrar's default nameservers, but set the records that point to Shopify to DNS only.
About This Article
Shopify Developer & Editorial Director
9+ years with Shopify since 2017

Front-end developer specializing in Shopify since 2017. Experienced in building custom Liquid themes, optimizing storefront performance, and integrating third-party apps. Directs the editorial process behind Ecom Store Pro: sets its topics and the rules every AI-written page must pass before publication.

This page was written by AI. Separate AI agents that did not write it check its figures and claims against official sources and test its links and interactive tools. A human editor sets the site's editorial direction, topics and rules and checks that pages are complete and display correctly, but does not check their facts or edit their text. Details may change — always confirm critical data at shopify.com.

Editorial Policy

Some links in this article are affiliate links. If you sign up for a Shopify store through these links, we may earn a commission at no extra cost to you. Read our full advertising policy.

Continue Learning

What to Read Next

Stay updated

Get notified about new articles

Subscribe to receive updates when we publish new Shopify guides and insights.