Customers say their order confirmation never arrived, or it was in spam. Many guides tell you to “set up custom SMTP in Shopify”. Shopify does not have that setting. This page explains what you can actually change.
How Shopify sends email
Shopify sends every store notification (order confirmation, shipping update, password reset, abandoned checkout) from its own mail servers. The address customers see is the Sender email under Settings → Notifications.
If your domain is not authenticated with Shopify, these emails are sent from a Shopify address such as [email protected] instead of your own. Some inboxes treat that as less trustworthy.
Shopify has no custom SMTP setting
You cannot paste SMTP settings into Shopify
The fix: authenticate your domain in Shopify
- Shopify admin → Settings → Notifications.
- In Sender email, enter an address on your own domain, for example
[email protected], and save. - Follow Shopify’s steps to authenticate the domain. Shopify gives you CNAME records that handle DKIM and SPF. If Shopify manages your domain’s DNS, it can add them for you; otherwise add them at your DNS host.
- Add a DMARC record yourself. Shopify does not add it. A safe start is a TXT record named
_dmarcwith the valuev=DMARC1; p=none;.
Shopify’s help page covers this in detail: Setting up your email.
Check that it works
- Place a test order using a Gmail or Outlook address you control. Check the inbox and the spam folder.
- In Gmail, open the email → More → Show original. SPF, DKIM and DMARC should all say PASS, and the From address should be on your domain.
- For a second opinion, send a notification to the address that mail-tester.com gives you and read the report.
Where SecureSMTP fits
SecureSMTP is useful for emails that Shopify does not send for you, for example a message to your team when a large order comes in, a custom follow-up, or the contact form on a headless storefront.
From Shopify Flow (Grow, Advanced and Plus plans)
- Sign up at securessmtp.com/signup (the Free plan includes 5,000 emails a month).
- Dashboard → Forms → Sites → + Add Site. Copy the API key from the last step. It is shown only once.
- In Shopify Flow, create a workflow with the trigger you need (for example Order created).
- Add the action Send HTTP request: method POST, URL
https://securessmtp.com/api/v1/mail/send, headersContent-Type: application/jsonandx-securessmtp-api-key: <your key>. - Body (Flow fills in the Liquid values):
{ "to": "[email protected]", "subject": "New order {{order.name}}", "text": "Order {{order.name}} from {{order.email}}", "from": { "name": "Your Store" } } - Run the workflow once and check the Email log in your SecureSMTP dashboard.
From your own app or backend
If you run a custom app or a headless storefront, send from your server with our REST API or our SMTP settings. Keep the API key on the server.
Frequently asked questions
Can I enter SMTP settings in Shopify for order confirmations?+
No. Shopify has no custom SMTP setting. Order confirmations, shipping updates, password resets and other store notifications are always sent by Shopify. What you can change is the sender email and whether your domain is authenticated, under Settings → Notifications → Sender email.
Does SecureSMTP change how Shopify sends its own notifications?+
No. SecureSMTP only sends emails that you send to it: from Shopify Flow, from your own app or backend, or from an automation tool. Shopify’s built-in notifications keep going out through Shopify.
Which Shopify plans can use Shopify Flow’s Send HTTP request action?+
Shopify lists the Send HTTP request action for stores on the Grow, Advanced and Plus plans. It is not available on Basic.
Do I need a DMARC record?+
Yes, add one. Shopify’s domain authentication adds CNAME records for DKIM and SPF but does not add DMARC. Add a TXT record named _dmarc with a value such as v=DMARC1; p=none; at your DNS host.
What From address do emails sent through SecureSMTP use?+
New accounts send from their own verified sending domain, so emails go out from the address you set for that domain. Any plan, including Free, can add one. Until it is verified you can send test emails to yourself. Older accounts can keep using [email protected] with your store name as the sender name for a limited time.
What about Shopify Email or Klaviyo campaigns?+
Those are marketing tools with their own sending setup. SecureSMTP is for one-to-one emails such as notifications and form replies, not for newsletters.
Next step