Google & Yahoo email deliverability changes - February 2024

Shopify Discussion

Topic summary

Impending Gmail/Yahoo requirements (Feb 2024) highlighted: DKIM, SPF, DMARC; branded sending domain; one‑click unsubscribe; spam complaints under 0.3%.

Shopify guidance and automation: If the domain is hosted on Shopify, Shopify will auto-set required DKIM/SPF and insert a DMARC p=none before Feb 1 for Shopify emails. Third‑party ESPs (e.g., Klaviyo, Omnisend, Google Workspace) require their own DNS records managed separately.

DKIM specifics: 1024‑bit keys are acceptable for Gmail’s Feb minimums; Shopify currently supports 1024 only, with 2048 planned later. TXT record 255‑character limits caused issues; regenerating keys and carefully copying values (avoid altered characters/spaces) solved cases.

Klaviyo setup: Use static CNAMEs (Shopify DNS does not accept NS), which delegate a subdomain Klaviyo configures with SPF/DKIM automatically. One SPF record per domain; subdomains can have their own SPF overriding the parent.

Email hosting/MX: Ensure MX points to the actual email host (not Gmail unless using Google Workspace). Misconfigured MX/forwarding disrupted inboxes; moving to a proper host (e.g., Zoho) resolved issues.

Sender identity: If using a gmail.com sender, Shopify rewrites the From to a shopifyemail.com address to meet requirements while preserving your reply‑to. Discussion largely resolved common setups; 2048‑bit DKIM support on Shopify remains pending.

Summarized with AI on January 6. AI used: gpt-5.
8

Hey Integral,

For the Klaviyo Branded Sending Domain, once you click through their tool (settings > email > domains) they will provide all of the CNAME records (static) or NS records (dynamic) for you to copy/paste. I was searching for what those were for a while too and then I just clicked thru their authentication tool and Klaviyo had it all ready to go.

For the Google Workspace Emails, it was the same scenario. The Google Workspace tool guide you the whole way and includes your MX records (https://support.google.com/a/answer/10888698). I will say this requires you to have admin rights inside of your Google Workspace. This cannot be done if you do not have admin privileges.

Bonus: Under the same area in Apps > Google Workspace > Gmail > Authenticate Gmail you can setup your DKIM. The tool will build the record for you to copy/paste.

I hope this helps!