Shopify handles SSL certificate provisioning and renewal automatically for every store, including custom domains connected through its system — which removes most of the traditional certificate-management work, but the DNS handoff during a custom domain connection is where migrations most commonly stall or go wrong.
Connecting an existing domain versus buying through Shopify
If you buy a domain directly through Shopify, DNS and SSL are configured automatically with no manual steps. If you're connecting a domain purchased elsewhere (GoDaddy, Namecheap, or any other registrar), you're responsible for updating that registrar's DNS records to point at Shopify — this manual DNS step is where the process most often takes longer than expected or appears stuck.
The DNS records Shopify expects
Typically, an A record for the root domain pointing to Shopify's IP address, and a CNAME record for the www subdomain pointing to your specific shops.myshopify.com address — Shopify's own domain settings page shows you the exact current values to use, since these can change and shouldn't be copied from older documentation or unrelated guides.
Why certificate issuance can lag behind DNS changes
Even after DNS records are technically correct, propagation across the wider internet's DNS resolvers can take anywhere from a few minutes to up to 48 hours depending on your previous DNS records' TTL (time-to-live) values. Shopify can't issue a certificate until it can independently verify your domain is actually pointing to its infrastructure, so a lower TTL set in advance of a planned migration can meaningfully speed this step up.
What to do if HTTPS isn't activating
- Double-check the exact DNS records against Shopify's current documented values — a typo or an extra/missing record is the most common cause.
- Confirm you haven't accidentally left old DNS records (from a previous host) still active alongside the new ones, which can cause inconsistent or conflicting results depending on which resolver a given check happens to query.
- Use a DNS propagation checker tool to see the current state across multiple resolvers worldwide, rather than relying only on your own local machine's DNS cache, which can show outdated results.
After the domain connects: theme and app considerations
Once HTTPS is active, check custom theme code and any installed apps for hardcoded http:// asset references, similar to any other platform migration — Shopify's own generated URLs (product pages, cart, checkout) will correctly use HTTPS automatically, but custom theme modifications or older third-party app embeds occasionally hardcode protocol-specific URLs that need a manual check.
Redirecting from the old domain, if you're changing domains entirely
If this migration also involves moving off a previous domain entirely (not just adding HTTPS to an existing one), Shopify's domain settings include an option to redirect the old domain to the new one automatically once both are connected to the store — worth using instead of trying to manage that redirect at the DNS or registrar level separately, since Shopify's built-in redirect correctly preserves paths and integrates with the platform's own URL handling.
What to expect from Shopify's own migration support resources
Shopify's help documentation and support team can directly assist with DNS troubleshooting during a domain connection, since DNS misconfiguration is by far the most common blocker — reaching out to Shopify support directly is a reasonable step if propagation and record checks don't resolve an issue within the expected timeframe.
How to handle a Shopify store previously using a different HTTPS setup
If you're moving a Shopify store from a previous domain or platform that already had HTTPS configured, Shopify's own certificate provisioning is entirely independent of whatever was previously in place — there's no migration or transfer of an old certificate needed or possible, since Shopify issues its own certificate fresh once the domain connects successfully.
What changes for the store's checkout flow specifically during a domain migration
Shopify's checkout has historically run on a shared, Shopify-managed domain in some configurations, meaning checkout-specific HTTPS behavior can differ from the main storefront domain — worth specifically testing a full checkout flow, not just storefront browsing, after any domain-related change to confirm nothing in that specific flow was affected.
What happens to app-injected content during a domain connection change
Third-party apps installed on your Shopify store that inject their own scripts or widgets should generally continue working correctly through a domain change without reconfiguration, though it's worth verifying any app with its own separate domain-specific settings (rather than automatically detecting your store's current domain) after completing the connection.
How Shopify Plus specifically differs for domain and certificate management at scale
Shopify Plus merchants managing multiple related storefronts or a more complex multi-domain setup have access to additional domain management tooling beyond standard Shopify plans, though the underlying automatic certificate provisioning covered in this guide remains fundamentally the same across all plan tiers.
Why keeping your domain's auto-renew setting active at your registrar still matters
Even though Shopify handles SSL certificate renewal automatically, your domain registration itself still needs to be kept current through your registrar — a lapsed domain registration would break the connection entirely regardless of how well Shopify's own certificate provisioning is functioning.
What happens to previously indexed http:// pages in search results during the transition
Search engines gradually replace indexed http:// URLs with their https:// equivalents as they recrawl your site following the redirect, typically over the weeks following migration — the old indexed entries don't disappear immediately but progressively update as search engines process the redirect for each individual page.
How Shopify's own CDN interacts with your custom domain's certificate
Shopify serves your store's static assets and pages through its own global CDN infrastructure, with your domain's certificate provisioned and distributed across that same CDN automatically — there's no separate CDN-level certificate configuration needed beyond the standard domain connection process covered in this guide.
Why testing from multiple geographic locations helps confirm global certificate propagation
Using an online tool that tests your domain's HTTPS status from several different geographic locations confirms your certificate is correctly propagated across Shopify's entire global CDN network, rather than relying solely on a test from your own location, which only reflects the nearest CDN edge to you.
What a domain's DNSSEC configuration means for Shopify's validation process
If your domain has DNSSEC enabled at the registrar level, ensure it's configured correctly and not blocking the DNS changes needed for Shopify's domain verification — a misconfigured DNSSEC setup can occasionally interfere with the DNS validation steps certificate issuance depends on.
A final word on why Shopify's approach represents the modern standard
Shopify's fully automated certificate provisioning, requiring nothing beyond correct DNS configuration, represents the direction most modern hosting and e-commerce platforms have moved toward — a meaningful contrast to the multi-step manual certificate management that was standard practice for e-commerce sites a decade ago.
What to check periodically even after a successful domain connection
Beyond the initial connection, periodically confirming your domain's SSL status remains active, particularly after any DNS-related change at your registrar, catches an unexpected disconnection early rather than discovering a broken storefront through customer reports.
A quick closing checklist to confirm before considering the migration finished
Before considering the domain connection complete, confirm: DNS records exactly match Shopify's current documented values, SSL status shows active rather than pending, and both storefront and checkout have been tested directly on the connected custom domain rather than only the default Shopify subdomain.