Shopify Dev
App security updates: IP allowlist is now required (opens in a new tab)
IP allowlist now mandatory for all public apps, enhancing security.
Shopify Dev· Nov 5, 2026· 9/10
Shopify Dev
IP allowlist now mandatory for all public apps, enhancing security.
Shopify Dev· Nov 5, 2026· 9/10
Shopify Dev
Shopify Dev· Nov 5, 2026· 9/10· 94% relevant
Public apps must configure IP allowlists by Nov 20, 2026.
RelatedShopify Dev
Shopify Dev· Oct 27, 2026· 8/10· 90% relevant
IP allowlist feature now restricts Admin API token usage to specified IP ranges, adding an extra layer of security for app developers.
RelatedShopify Dev
Shopify Dev· Nov 5, 2026· 8/10· 88% relevant
Serverless apps can now use ASNs for IP allowlists.
RelatedShopify Dev
Shopify Dev· Oct 20, 2026· 8/10· 85% relevant
Recommends immediate security actions for app developers, including scanning with new security checker and following best practices to mitigate rising attacks.
RelatedShopify Dev
Shopify Dev· May 11, 2026· 8/10· 84% relevant
Expiring offline access tokens required for all public apps by January 1, 2027
RelatedShopify Dev
Shopify Dev· Jun 2, 2026· 8/10· 84% relevant
App quality checks are now managed in Partner Dashboard
Related