We're changing how public apps handle offline access tokens to enhance merchant data protection. Starting January 1, 2027, all public apps must use expiring offline access tokens when calling the Admin API. After that date, public apps still using non-expiring tokens will receive authentication errors.
Summary extracted from the official source text. Verify details on the source page.
| Platform | Shopify |
|---|---|
| Effective date | 2027-01-01 (in 76 days) |
| Precision | day |
| Published | 2026-05-20 |
| Categories | Breaking / action required |
| Tags | API, Action Required, Admin GraphQL API, Admin REST API, Breaking API Change |
| Official source | Shopify developer changelog ↗ |
| Fetched | 2026-10-17T03:44:00+00:00 |
| First seen | 2026-10-17T01:05:46+00:00 |
| Status | Listed by the source |
| Stable ID | shopify-c6bf4ebc4f · JSON |