Expiring offline access tokens required for all public apps as of January 1, 2027

Breaking / action requiredEffective 2027-01-01

We're changing how public apps handle offline access tokens to enhance merchant data protection. Starting January 1, 2027, all public apps must use expiring offline access tokens when calling the Admin API. After that date, public apps still using non-expiring tokens will receive authentication errors.

Summary extracted from the official source text. Verify details on the source page.

PlatformShopify
Effective date2027-01-01 (in 76 days)
Precisionday
Published2026-05-20
CategoriesBreaking / action required
TagsAPI, Action Required, Admin GraphQL API, Admin REST API, Breaking API Change
Official sourceShopify developer changelog ↗
Fetched2026-10-17T03:44:00+00:00
First seen2026-10-17T01:05:46+00:00
StatusListed by the source
Stable IDshopify-c6bf4ebc4f · JSON