DNS Authentication Issue

What is the name of the domain?

What is the issue you’re encountering

I am reaching out regarding an ongoing issue with DNS authentication for my Shopify website. I have configured the DNS records correctly and verified them multiple times. Despite this, all authentication attempts have been rejected.

What steps have you taken to resolve the issue?

I contacted Shopify Support. After reviewing my DNS settings, they confirmed that everything is correctly set up from my side. According to their assessment, the issue lies with the domain provider—Cloudflare.

What feature, service or problem is this related to?

DNS records

What are the steps to reproduce the issue?

None. Here is the response I got from Shopify support:
With the current DNS settings, even after you followed the correct setup, it appears that the domain is not being updated on your store due to unsupported proxies. In this case, you must reach out to domain provider to correct the issues and just remain the standard DNS settings for Shopify, though set it up already, but you can still share it with them to properly analyze the issue.

Correct, as I have said, the DNS settings you setup has been followed correctly, and kudos to you for that! However, the issue thereafter is on the settings that can be check and corrected only by the domain provider, which is Cloudflare. It has nothing to do anymore for the things you did, though you may share it the Shopify DNS settings just for their reference.

I would really appreciate any assistance!

Could you explain what exactly the problem is? The website seems to be working.

1 Like

The problem is that my domain is not getting authenticated and when a user makes a purchase the confirmation email is sent from this random shopify email instead of my business email. This is a very bad reputation for my company. My goal is to have this domain authenticated.

Ok, so the problem is with email, not the website.

Can you share what records Shopify told you to add and a screenshot of what you did add in your Cloudflare dashboard?

As I have told you earlier, I have set it up using correct credentials. The problem is on the Cloudflare part.
Here are 2 screenshots from the Shopify support center conversation.

I just can’t directly message them, that is why I need support somehow getting the message to them.

And another screenshot

That’s nice and good, but would you mind sharing what records they asked you to add? They are not private or anything.

2 Likes

Usually such authentication is done with DKIM records. Without knowing the selector, we can’t check to see if they are correct. If you can share what records you were asked to create, we can help you figure out why they aren’t validating.

Your SPF record needs to be fixed. You have one more than is permitted. You can see that in this report.

https://cf.sjr.dev/tools/check?61c0e0eeed0047d5a2e28e6a47a07eb1#dns-mail

I have fixed the SPF records, now I only have one.
It seems to be ok:
https://cf.sjr.dev/tools/check?d157467d469c4e4883a6bb416aa25a3a

Here are the records that Shopify requires:

  1. In your domain provider’s site, create 4 new CNAM E records with the host names and values below. (You do not need to edit the TTL settings).

Each new CNAME record should have one of each:

  • Host name: May also be called a “label” or “prefix”
  • Value: The URL destination your record points to

Record #1

Type
CNAM E
Host name

hkh._domainkey

Value

“dkim1.bc5c5036ed69.p72 .email.myshopify.com”

Record #2

Type
CNAM E
Host name

hkh2._domainkey

Value

“dkim2.bc5c5036ed69.p72 .email.myshopify.com”

Record #3

Type
CNAM E
Host name

hkh3._domainkey

Value

“dkim3.bc5c5036ed69.p72 .email.myshopify.com”

Record #4

Type
CNAM E
Host name

mailerhkh

Value

“bc5c5036ed69.p72 .email.myshopify.com”
(I inserted a space in the links, because I can only post with 1 link/comment, but you get it, there is no space character)

I have recheck again and they are the same.
Now I have requested a domain authentication from Shopify.

And here is my setup in Cloudflare

All of those records need to be DNS only :grey: , not proxied :orange:

2 Likes

Following all the steps, the issue got resolved! Thanks!

2 Likes

This topic was automatically closed 2 days after the last reply. New replies are no longer allowed.