Migrate to expiring offline access tokens before January 1, 2027
Shopify developer change
MerchantDiff detected this entry in Shopify's official developer changelog on October 27, 2026.
This Shopify update is categorized as Action Required, Platform, Update.
What changed
Public apps still using non-expiring offline access tokens must migrate to use expiring offline access tokens before January 1, 2027 to remain listed in the Shopify App Store and continue accepting new installs. New client credentials access helps your backend recover access without waiting for a merchant to reopen your app. Using a request signed with your app's private key, your backend can obtain a fresh, short-lived access token without a refresh token. The enforcement timeline has been updated with incremental penalties for non-compliant apps: January 1, 2027: Non-compliant apps are delisted from the Shopify App Store and blocked from new installs. Existing installations can continue making affected API requests until April 1.
Who is affected
Apps that create, store, refresh, or validate Shopify access credentials should review this change.
What action may be needed
Review the official Shopify entry and test the affected integration. Apply any required code or configuration changes before deploying.
Use the official Shopify entry below as the source of truth for technical implementation details, affected APIs, migration instructions and deadlines.
Want the actionable version?
MerchantDiff monitors Shopify API changes, deprecations, deadlines and ecosystem updates, then turns them into developer-focused release intelligence: what changed, who is affected and what action may be needed.
Get MerchantDiff →