- New public apps created on or after April 1, 2026 must request and use expiring offline access tokens for Admin API calls.
- Expiring tokens improve security by limiting token lifespan and align with modern OAuth practices.
- Existing public apps and custom apps are unaffected; Shopify’s app templates and libraries handle the change automatically.
Expiring offline access tokens required for new public apps as of April 1, 2026
Official Shopify changelog summary with source attribution, release tags, and community reactions.
Track this Shopify release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this Shopify release note into a weekly digest for the tools you actually use.
Create digestMore Shopify changelog updates
admin.app.intent.link intents now open as a full‑page navigation instead of an overlay modal
Adds cart session attribution and cart attributes for richer checkout data.
Added the `shop_campaign_insights` schema to ShopifyQL, letting apps query campaign performance data using the existing `shopifyqlQuery` field with the `read_reports` scope.