# Authentication

**URL:** https://community.shopify.com/c/retired-boards/appdev/authentication/89.md

[Latest](https://community.shopify.com/latest.md) · [Categories](https://community.shopify.com/categories.md) · [Tags](https://community.shopify.com/tags.md)

---

## [New Shopify Store, Adding Existing Customers](https://community.shopify.com/t/new-shopify-store-adding-existing-customers/302316)

<div class="topic-metadata">

**Author:** [@TartByTaylor](https://community.shopify.com/u/TartByTaylor)\
**Replies:** 3\
**Last updated:** [September 17, 2026, 12:02pm UTC](https://community.shopify.com/t/new-shopify-store-adding-existing-customers/302316 "2026-09-17T12:02:57Z")

</div>

Hello! I may be opening a new, secondary, Shopify store - let’s call this Store B. Store B will be a password-protected site, and you can only access the website either with a password or by logging in with your email + …

---

## [Occasional OAuth Error: : &quot;The application cannot be loaded, it may be misconfigured.&quot;](https://community.shopify.com/t/occasional-oauth-error-quot-the-application-cannot-be-loaded-it-may-be-misconfigured-quot/341093)

<div class="topic-metadata">

**Author:** [@ravigoel](https://community.shopify.com/u/ravigoel)\
**Replies:** 2\
**Last updated:** [April 24, 2026, 5:46pm UTC](https://community.shopify.com/t/occasional-oauth-error-quot-the-application-cannot-be-loaded-it-may-be-misconfigured-quot/341093 "2026-04-24T17:46:26Z")

</div>

Hello Shopify Community, I am encountering an intermittent issue with the OAuth flow for my Shopify app. Occasionally, when redirecting to the authorization URL, I receive the following error: “The application cannot b…

---

## [How to find admin api key after the new update](https://community.shopify.com/t/how-to-find-admin-api-key-after-the-new-update/582482)

<div class="topic-metadata">

**Author:** [@maurya](https://community.shopify.com/u/maurya)\
**Replies:** 9\
**Last updated:** [January 26, 2026, 4:02am UTC](https://community.shopify.com/t/how-to-find-admin-api-key-after-the-new-update/582482 "2026-01-26T04:02:58Z")

</div>

I’m currently stuck in a process to obtain an API key and scope access. I’m working on Shopify Hydrogen and creating an API to write a draft order. This API requires an admin API key. However, I’ve reviewed all the docum…

---

## [Issue with Shopify Access Token Using Client Credentials](https://community.shopify.com/t/issue-with-shopify-access-token-using-client-credentials/363265)

<div class="topic-metadata">

**Author:** [@lili99](https://community.shopify.com/u/lili99)\
**Replies:** 2\
**Last updated:** [January 23, 2026, 5:46pm UTC](https://community.shopify.com/t/issue-with-shopify-access-token-using-client-credentials/363265 "2026-01-23T17:46:22Z")

</div>

I’m developing a Shopify app, alongside a third-party app, both of which communicate with the Shopify Admin REST API. Previously, I was using ‘client\_credentials’ to obtain the access token for the third-party app, and …

---

## [Session's accessToken becomes outdated after changes on Shopify Level](https://community.shopify.com/t/sessions-accesstoken-becomes-outdated-after-changes-on-shopify-level/327522)

<div class="topic-metadata">

**Author:** [@aaloch](https://community.shopify.com/u/aaloch)\
**Replies:** 1\
**Last updated:** [January 20, 2026, 4:08pm UTC](https://community.shopify.com/t/sessions-accesstoken-becomes-outdated-after-changes-on-shopify-level/327522 "2026-01-20T16:08:28Z")

</div>

Hello everyone, I am currently facing an issue with my application ( it’s based on remix starter app ) where the access token and scopes stored in my database ( sqlite for now ) become outdated when changes are made on …

---

## [Urgent Security Flaw: Domain Hijacking Threat on Shopify](https://community.shopify.com/t/urgent-security-flaw-domain-hijacking-threat-on-shopify/349015)

<div class="topic-metadata">

**Author:** [@DJ7](https://community.shopify.com/u/DJ7)\
**Replies:** 4\
**Last updated:** [November 1, 2025, 7:41pm UTC](https://community.shopify.com/t/urgent-security-flaw-domain-hijacking-threat-on-shopify/349015 "2025-11-01T19:41:44Z")

</div>

I recently woke up to find that my clients Google Merchant account had been verified and claimed by someone else. Upon further investigation, I discovered that the the domain, hiltontextiles.com, was being redirected to …

---

## [Is it possible to require an account before allowing Login on B2B stores?](https://community.shopify.com/t/is-it-possible-to-require-an-account-before-allowing-login-on-b2b-stores/290323)

<div class="topic-metadata">

**Author:** [@emalueg](https://community.shopify.com/u/emalueg)\
**Replies:** 9\
**Last updated:** [October 24, 2025, 4:49am UTC](https://community.shopify.com/t/is-it-possible-to-require-an-account-before-allowing-login-on-b2b-stores/290323 "2025-10-24T04:49:02Z")

</div>

We have a B2B store meant for our existing retailers. The store offers discount pricing our resellers, but each potential customer must be approved and under contract before they can make a purchase. The Shopify B2B / …

---

## [App URL and Whitelisted redirection URL(s) fields not found in partner dashboard](https://community.shopify.com/t/app-url-and-whitelisted-redirection-url-s-fields-not-found-in-partner-dashboard/341629)

<div class="topic-metadata">

**Author:** [@Creatr](https://community.shopify.com/u/Creatr)\
**Replies:** 7\
**Last updated:** [October 22, 2025, 7:49am UTC](https://community.shopify.com/t/app-url-and-whitelisted-redirection-url-s-fields-not-found-in-partner-dashboard/341629 "2025-10-22T07:49:42Z")

</div>

Hello, I’m new to @Shopify\_77 /shopify-api in nextjs using app router and src directory. I’ve managed to setup OAuth flows (start and callback using route handlers) and used a middleware to start the Oath. I’m using grok…

---

## [How does an app access read the store configured App Proxy Url?](https://community.shopify.com/t/how-does-an-app-access-read-the-store-configured-app-proxy-url/254316)

<div class="topic-metadata">

**Author:** [@minsko](https://community.shopify.com/u/minsko)\
**Replies:** 8\
**Last updated:** [October 6, 2025, 2:22pm UTC](https://community.shopify.com/t/how-does-an-app-access-read-the-store-configured-app-proxy-url/254316 "2025-10-06T14:22:37Z")

</div>

The documentation at: https://shopify.dev/docs/apps/online-store/app-proxies mentions that “Merchants can change the sub path or sub path prefix of app proxies.”. How can an app determine the current setting of the app p…

---

## [How can we get the online access token in our custom app ?](https://community.shopify.com/t/how-can-we-get-the-online-access-token-in-our-custom-app/225734)

<div class="topic-metadata">

**Author:** [@mrinmoy\_dev](https://community.shopify.com/u/mrinmoy_dev)\
**Replies:** 4\
**Last updated:** [September 9, 2025, 4:35pm UTC](https://community.shopify.com/t/how-can-we-get-the-online-access-token-in-our-custom-app/225734 "2025-09-09T16:35:55Z")

</div>

In our current custom app, we are performing some operations (e.g. creating/updating/deleting draft orders) through admin API service using offline access token which we got during app installed and it is working fine. N…

---

## [If issued a new offline token, how long does old one last? 24 hours?](https://community.shopify.com/t/if-issued-a-new-offline-token-how-long-does-old-one-last-24-hours/368315)

<div class="topic-metadata">

**Author:** [@guest4](https://community.shopify.com/u/guest4)\
**Replies:** 0\
**Last updated:** [October 22, 2024, 4:53pm UTC](https://community.shopify.com/t/if-issued-a-new-offline-token-how-long-does-old-one-last-24-hours/368315 "2024-10-22T16:53:53Z")

</div>

Asking for a friend… JK. Some of our offline tokens keep expiring and we’re working on tracking down the issue. We have a some work to do on our end, but would be nice to know if question in the title is accurate. If yo…

---

## [LOST ACCESS TO ONE OF MY STORES](https://community.shopify.com/t/lost-access-to-one-of-my-stores/368116)

<div class="topic-metadata">

**Author:** [@high4minded](https://community.shopify.com/u/high4minded)\
**Replies:** 0\
**Last updated:** [October 22, 2024, 2:34am UTC](https://community.shopify.com/t/lost-access-to-one-of-my-stores/368116 "2024-10-22T02:34:43Z")

</div>

Hello, I own a Shopify store and i had a certain email registered on it. Then I go to switch that email and it tells me that before I do it that I have two stores registered under that email. And then proceed to change …

---

## [I cannot get access to my account, I gave someone access and they removed me from my Shopify Platfor](https://community.shopify.com/t/i-cannot-get-access-to-my-account-i-gave-someone-access-and-they-removed-me-from-my-shopify-platfor/367956)

<div class="topic-metadata">

**Author:** [@system](https://community.shopify.com/u/system)\
**Replies:** 1\
**Last updated:** [October 22, 2024, 12:27am UTC](https://community.shopify.com/t/i-cannot-get-access-to-my-account-i-gave-someone-access-and-they-removed-me-from-my-shopify-platfor/367956 "2024-10-22T00:27:38Z")

</div>

Good Day I gave someone access to my shopify store. They have deleted my admin account and basically hijacked my website. I have been trying to contact support regarding this but the AI chatbot is not guiding me correct…

---

## [How to set up SMS authentication during customer registration for Shopify](https://community.shopify.com/t/how-to-set-up-sms-authentication-during-customer-registration-for-shopify/308210)

<div class="topic-metadata">

**Author:** [@zmoXfGwM](https://community.shopify.com/u/zmoXfGwM)\
**Replies:** 3\
**Last updated:** [October 21, 2024, 5:31pm UTC](https://community.shopify.com/t/how-to-set-up-sms-authentication-during-customer-registration-for-shopify/308210 "2024-10-21T17:31:00Z")

</div>

We are using Shopify Plus and the new customer account. In order to link Shopify accounts and devices uniquely, we would like to set up SMS authentication using phone numbers when customers register for Shopify accounts…

---

## [My store was hacked Today.](https://community.shopify.com/t/my-store-was-hacked-today/367870)

<div class="topic-metadata">

**Author:** [@LadyGme](https://community.shopify.com/u/LadyGme)\
**Replies:** 0\
**Last updated:** [October 21, 2024, 4:38am UTC](https://community.shopify.com/t/my-store-was-hacked-today/367870 "2024-10-21T04:38:32Z")

</div>

I spent 3-4 tedious months building a store and now it’s been hacked for 3 weeks. Weird because whoever hacked it changed the billing information, even though the store was not live, so they aren’t getting anything out o…

---

## [log in](https://community.shopify.com/t/log-in/367794)

<div class="topic-metadata">

**Author:** [@sora\_isky123](https://community.shopify.com/u/sora_isky123)\
**Replies:** 0\
**Last updated:** [October 20, 2024, 5:08pm UTC](https://community.shopify.com/t/log-in/367794 "2024-10-20T17:08:55Z")

</div>

hey, yeah so i’m pissed right now. so i can’t access my shopify account to close my store because i don’t have an authentification code. shopify has been taking $40 dollars out of my pocket that i can’t afford because i…

---

## [Shopify account inactive after receive new device login email](https://community.shopify.com/t/shopify-account-inactive-after-receive-new-device-login-email/367516)

<div class="topic-metadata">

**Author:** [@deshanillc](https://community.shopify.com/u/deshanillc)\
**Replies:** 1\
**Last updated:** [October 19, 2024, 3:01pm UTC](https://community.shopify.com/t/shopify-account-inactive-after-receive-new-device-login-email/367516 "2024-10-19T15:01:03Z")

</div>

Hello Everyone, My store got inactive suddenly, when I received email about new device login. after that email I am unable to access my store. Today is 18 date of month so I was expecting my first payout and this happe…

---

## [store closed](https://community.shopify.com/t/store-closed/367458)

<div class="topic-metadata">

**Author:** [@bb31](https://community.shopify.com/u/bb31)\
**Replies:** 0\
**Last updated:** [October 18, 2024, 4:12pm UTC](https://community.shopify.com/t/store-closed/367458 "2024-10-18T16:12:28Z")

</div>

Hi My store was closed i recieved no emails at all as to why i contacted support they said they escalated to the trust and safety team but i have not heard from any in over a month what do i do?

---

## [Cannot add scope read\_shopify\_payments](https://community.shopify.com/t/cannot-add-scope-read-shopify-payments/329708)

<div class="topic-metadata">

**Author:** [@supermamka](https://community.shopify.com/u/supermamka)\
**Replies:** 3\
**Last updated:** [October 18, 2024, 2:21pm UTC](https://community.shopify.com/t/cannot-add-scope-read-shopify-payments/329708 "2024-10-18T14:21:05Z")

</div>

Hi, I want to call graphql endpoint shopifyPaymentsAccount but its required access: Required access: read\_shopify\_payments access scope. Also: User must have the shopify\_payments\_transfers permission." And the problem i…

---

## [Shopify says "\[API\] Invalid API key or access token (unrecognized login or wrong password)"](https://community.shopify.com/t/shopify-says-api-invalid-api-key-or-access-token-unrecognized-login-or-wrong-password/366891)

<div class="topic-metadata">

**Author:** [@prashant2569](https://community.shopify.com/u/prashant2569)\
**Replies:** 2\
**Last updated:** [October 18, 2024, 9:59am UTC](https://community.shopify.com/t/shopify-says-api-invalid-api-key-or-access-token-unrecognized-login-or-wrong-password/366891 "2024-10-18T09:59:43Z")

</div>

Dear Team I am creating a flow in zoho flow for that I want to authorize the shopify with zoho flow but It says "Shopify says “\[API\] Invalid API key or access token (unrecognized login or wrong password)”. I also create…

---

## [SMS 2FA not working in NZ for multiple accounts](https://community.shopify.com/t/sms-2fa-not-working-in-nz-for-multiple-accounts/366980)

<div class="topic-metadata">

**Author:** [@Ben31](https://community.shopify.com/u/Ben31)\
**Replies:** 0\
**Last updated:** [October 16, 2024, 11:30pm UTC](https://community.shopify.com/t/sms-2fa-not-working-in-nz-for-multiple-accounts/366980 "2024-10-16T23:30:17Z")

</div>

Hey Guys, We experience intermittent issues with 2FA in NZ and see this across multiple accounts and phone numbers. Also, when this happens YOU CAN NEVER REACH AN AGENT FOR HELP! This is because the help bot has no cl…

---

## [hCaptcha fails, I cannot log in on Chrome](https://community.shopify.com/t/hcaptcha-fails-i-cannot-log-in-on-chrome/366773)

<div class="topic-metadata">

**Author:** [@krystianc](https://community.shopify.com/u/krystianc)\
**Replies:** 0\
**Last updated:** [October 16, 2024, 10:42am UTC](https://community.shopify.com/t/hcaptcha-fails-i-cannot-log-in-on-chrome/366773 "2024-10-16T10:42:48Z")

</div>

Surprisingly, hCaptcha started showing up when I try to log in as a user to my online store. When I try to solve the hCaptcha, an error is displayed. I turned it off in the online store - preferences, but it still shows …

---

## [Ruby private app access to Shopify Resources](https://community.shopify.com/t/ruby-private-app-access-to-shopify-resources/233802)

<div class="topic-metadata">

**Author:** [@fwallace](https://community.shopify.com/u/fwallace)\
**Replies:** 7\
**Last updated:** [October 14, 2024, 11:56pm UTC](https://community.shopify.com/t/ruby-private-app-access-to-shopify-resources/233802 "2024-10-14T23:56:44Z")

</div>

You want a private app, simple REST Shopify script in Ruby using the latest shopify\_api gem to download resources like orders, customers, products etc. \[Maybe to store in a Database, do something with them\]. After much …

---

## [Security Warning – Password Reset Link Leakage to Third Parties](https://community.shopify.com/t/security-warning-password-reset-link-leakage-to-third-parties/366169)

<div class="topic-metadata">

**Author:** [@mlpham](https://community.shopify.com/u/mlpham)\
**Replies:** 0\
**Last updated:** [October 14, 2024, 8:10am UTC](https://community.shopify.com/t/security-warning-password-reset-link-leakage-to-third-parties/366169 "2024-10-14T08:10:04Z")

</div>

We have a potential security issue we’ve encountered with the password reset functionality in one of our Shopify stores. It seems that the password reset link is inadvertently being sent to third-party services like Goog…

---

## [authenticate.admin(request) server error](https://community.shopify.com/t/authenticate-admin-request-server-error/366004)

<div class="topic-metadata">

**Author:** [@lili99](https://community.shopify.com/u/lili99)\
**Replies:** 0\
**Last updated:** [October 13, 2024, 12:36pm UTC](https://community.shopify.com/t/authenticate-admin-request-server-error/366004 "2024-10-13T12:36:15Z")

</div>

Issue Summary Environment: App Framework: Shopify App with Remix template Database: PostgreSQL (Previously SQLite, recently migrated) Deployment: The app functions correctly in the local environment but encounters issu…

---

## [A bunch of items showed up under “last updated” even though I didn’t update them](https://community.shopify.com/t/a-bunch-of-items-showed-up-under-last-updated-even-though-i-didn-t-update-them/355835)

<div class="topic-metadata">

**Author:** [@Bugoutgirl](https://community.shopify.com/u/Bugoutgirl)\
**Replies:** 4\
**Last updated:** [October 12, 2024, 9:42am UTC](https://community.shopify.com/t/a-bunch-of-items-showed-up-under-last-updated-even-though-i-didn-t-update-them/355835 "2024-10-12T09:42:54Z")

</div>

Just wondering if this has happened to anybody else or what I should do? This morning I went to add some new items to my store, and I noticed something very strange. A bunch of older items appeared under the “last updat…

---

## [Getting clarity on urgent app-bridge version Shopify wants us to use](https://community.shopify.com/t/getting-clarity-on-urgent-app-bridge-version-shopify-wants-us-to-use/365641)

<div class="topic-metadata">

**Author:** [@JoesIdeas](https://community.shopify.com/u/JoesIdeas)\
**Replies:** 2\
**Last updated:** [October 11, 2024, 5:53pm UTC](https://community.shopify.com/t/getting-clarity-on-urgent-app-bridge-version-shopify-wants-us-to-use/365641 "2024-10-11T17:53:33Z")

</div>

\[I couldn’t find an app-bridge board, if there’s a better place to post please let me know\]. We got an urgent email from Shopify saying we needed to update app bridge or would be demoted in 10 days, and then delisted ne…

---

## [Scam or not?](https://community.shopify.com/t/scam-or-not/365105)

<div class="topic-metadata">

**Author:** [@system](https://community.shopify.com/u/system)\
**Replies:** 0\
**Last updated:** [October 10, 2024, 12:11am UTC](https://community.shopify.com/t/scam-or-not/365105 "2024-10-10T00:11:59Z")

</div>

Hi, I recently received an email from the following address. Is this legit or a scam? Name: Shopify Team Email: shopifystorecompliance.helpdesk@gmail.com Dear Merchant, We have detected SEO issues in your Shopify st…

---

## [Where is access token to be used by node @shopify/admin-api-client](https://community.shopify.com/t/where-is-access-token-to-be-used-by-node-shopify-admin-api-client/297045)

<div class="topic-metadata">

**Author:** [@JackJack1](https://community.shopify.com/u/JackJack1)\
**Replies:** 4\
**Last updated:** [October 9, 2024, 6:25pm UTC](https://community.shopify.com/t/where-is-access-token-to-be-used-by-node-shopify-admin-api-client/297045 "2024-10-09T18:25:33Z")

</div>

I am trying to develop an app that queries the stores which installed my app. I will basically request the orders for the last week. @Shopify\_77 /admin-api-client seems to be the way to go on the nodejs. However, I cann…

---

## [Verify mail adress](https://community.shopify.com/t/verify-mail-adress/364883)

<div class="topic-metadata">

**Author:** [@ZENELEC](https://community.shopify.com/u/ZENELEC)\
**Replies:** 0\
**Last updated:** [October 9, 2024, 9:13am UTC](https://community.shopify.com/t/verify-mail-adress/364883 "2024-10-09T09:13:32Z")

</div>

Hello, I would like to send an order, but it says that my mail is not verifyed. Next to the mail, there is the green checkmark that says it is verifyed. So I clicked to change the mail adress, put the same one and cli…

[Next page](https://community.shopify.com/c/retired-boards/appdev/authentication/89.md?page=1)
