Skip to content
← Marketing Pulse

Apps

Shopify sets staged deadlines for public-app token migration

App Store restrictions begin January 1, 2027. Affected API requests stop on April 1; custom apps and merchant-created apps are excluded from this schedule.

By Stan Consulting Source announcement: October 27, 2026

Shopify developer changelog announcement about shopify sets staged deadlines for public-app token migration
Source page capture: Shopify developer changelog. Captured November 2, 2026.

The dates have different consequences

Shopify’s October 27 notice sets out staged enforcement for public apps still using non-expiring offline access tokens. From January 1, 2027, non-compliant apps lose their App Store listing and cannot accept new installations.

Merchant warnings begin January 15. Existing installations can continue affected requests until April 1, when Admin API requests using those tokens return HTTP 403. January 1 is therefore not the announced API cutoff for existing installations.

Ask the app provider for a migration status

For merchants, the useful next step is an inventory of public apps that perform important work: order routing, inventory synchronization, customer follow-up or reporting. Ask each provider whether its migration is complete and who will handle an interruption.

Do not assume every installed app is affected. The notice excludes custom apps and merchant-created apps. Classify an integration before placing it on a deadline list.

Verify that unattended work continues

For developers, Shopify points to migration guidance covering token acquisition, existing installations, storage and refresh handling. It also describes client credentials access for backend recovery.

Our recommendation is to test the work that runs without a merchant opening the app: scheduled imports, background order updates and retry paths. Record failures in a place an operator will actually see, and rehearse recovery before the enforcement date.

For your next work session

What to check next

  1. Identify public apps supporting essential store operations.
  2. Ask providers for migration status and an escalation contact.
  3. Track January 1, January 15 and April 1 as separate milestones.
  4. Test unattended jobs and recovery with the integration owner.

Sources and scope

This schedule covers existing public apps previously subject to the January 1 migration deadline. Custom apps and merchant-created apps are excluded. The separate requirement for public apps created on or after April 1, 2026 remains in effect.

The announcement is confirmed by the source below. Practical checks in this article are Stan Consulting's recommendations.

Need help applying this to your business? Ecommerce services.