Why do my Shopify emails say "via shopifyemail.com"?

Shopify physically sends your notifications from its own infrastructure. Until your domain is authenticated, receivers see mail claiming your domain but signed by shopifyemail.com, and Gmail labels the mismatch. Completing sender email verification lets Shopify sign as your domain, which removes the label.

Do I still need this if I use Klaviyo for marketing email?

Yes — Klaviyo authenticates Klaviyo's sending, Shopify's flow authenticates the transactional notifications Shopify sends (order confirmations, shipping updates). They're separate sending paths as the same domain, and DMARC reports will show each one separately.

Shopify shows the records as verified but mail still fails DMARC.

Check alignment: the sender email domain must match the domain you verified (a sender at shop.yourstore.com won't align with records at yourstore.com). The inbox test shows the exact alignment result a receiver computes.

Shopify SPF and DKIM: authenticating your store's email domain

If order confirmations from your store show "via shopifyemail.com" — or land in spam — your sender domain isn't authenticated with Shopify. Unlike most platforms, Shopify doesn't hand you one fixed SPF include to paste: it generates the exact records for your store when you verify your sender email in admin. Here's the flow, plus where DMARC fits.

Updated July 25, 2026

Step 1 — verify your sender email in Shopify admin

In Shopify admin, go to Settings → Notifications.
Under Sender email, enter the address at your own domain (e.g. orders@yourstore.com).
Shopify detects the domain isn't authenticated yet and shows the exact DNS records to add — typically CNAME records unique to your store that cover DKIM and the return path (which is what makes SPF align).

Step 2 — add the records at your DNS host

Where you add them depends on where the domain's DNS lives. For a domain bought through Shopify: Settings → Domains → your domain → DNS settings → Add custom record. For a third-party domain, add them at the registrar — we have field-by-field guides for GoDaddy, Cloudflare (set CNAMEs to DNS only), and Namecheap.

Back in Shopify admin, the sender email section re-checks the records and flips to authenticated once DNS propagates.

Step 3 — add a DMARC record

Shopify's flow covers SPF and DKIM but doesn't publish DMARC for you — and Gmail and Yahoo require DMARC for bulk senders, which an active store easily becomes. Add a TXT record at _dmarc with a reporting address; build it with the DMARC generator.

v=DMARC1; p=none; rua=mailto:reports@yourstore.com

TXT record at _dmarc

Don't forget your other senders

Stores rarely send only through Shopify — Klaviyo, Mailchimp, or a helpdesk usually send as the same domain. Each needs its own DKIM setup (Klaviyo, Mailchimp), and every SPF-relevant include belongs in the single SPF record on your domain.

Verify it worked

Run the email health check on your domain, then place a test order and check the confirmation email's headers with the header analyzer — SPF and DKIM should both pass for your domain, and the "via shopifyemail.com" tag disappears once authentication is live.