Deprecated offline token use detected in last 30 days

Dev Platform
1

Hi everyone,

In my Shopify app’s Monitoring section, I see this warning:

“Deprecated offline token use detected in last 30 days”

But at the same time Shopify shows:

“No deprecated API calls detected”

image
image1623×784 22.8 KB

I am confused about what exactly is causing this warning.

  • How can I find which store(s) are still using the deprecated offline token?

  • Does Shopify provide a list of affected stores?

  • Do merchants need to reinstall the app, or is there another way to update the token?

  • Has anyone already resolved this warning?

Any help would be appreciated.

Thanks!

2

Hi @Ajay_Rabari

So the deprecating offline access token enforcement is starting Jan 1st 2027.

Shopify is trying to reuse their existing UI for API deprecations which is usually backward facing, not forward facing.

Since this is such a dramatic change, they’re trying to communicate this as loudly as possible in a normal surface we review nearly daily. So the feedback is slightly incorrect, but I believe the intent is just to raise awareness.

In the dashboard homepage you can see the warning is forward facing, to fix by Jan 1st.

CleanShot 2026-06-01 at 09.04.12@2x
CleanShot 2026-06-01 at 09.04.12@2x458×102 2.39 KB

3

Does deprecating offline access tokens mean that Shopify will only support online access tokens in the future?

If yes, does that mean apps will need to refresh or obtain a new access token periodically whenever the merchant logs in again or after the token expires?

4

Does deprecating offline access tokens mean that Shopify will only support online access tokens in the future?

No.

Offline tokens will continue to be supported. The major change they’re introducing is that offline tokens will expire.

If yes, does that mean apps will need to refresh or obtain a new access token periodically whenever the merchant logs in again or after the token expires?

Yes, your app will need to refresh offline access tokens. But no, it doesn’t require a merchant to login to refresh the tokens.

The documentation explains the process: About offline access tokens

5

I previously saw a reply from Shopify staff stating that Shopify has no plans to discontinue offline tokens.

6

This API health warning is due to a public app using non-expiring offline access tokens. Starting January 1, 2027 all public apps must use expiring online access tokens. This change was announced in the changelog here and you can learn more about updating your app to use expiring offline access tokens here.

This change does not require you to switch from offline access tokens to online access tokens. Both offline and online access tokens will continue to be supported. The change is specifically about offline access tokens for public apps.

7

When we click on “deprecated offline token use detected in last 30 days,” no stores are displayed. Does this mean there is nothing to worry about, and that we only need to take action if stores are listed there?

8

@TerenceShopify Does this apply to the Payments Apps API as well, or does it only apply to the Admin GraphQL API and Admin REST API?

We receive the offline token during the auth process, but later we do not make any calls to the Admin GraphQL API or Admin REST API. All of our calls are made to /payments_apps/api/2026-07/graphql.json.

9

@Shahbaz_Anjum It is not related to APIs. It’s more about public apps. If your app is a public app, then yes, you’ll need to use this new token method.

10

@Ajay_Rabari The Shopify changelog link below is tagged only with Admin GraphQL API and Admin REST API, which is a bit confusing to me.

I believe this change should be tagged under All APIs, since the Payment APIs have their own dedicated URLs/endpoints. However, they are still using the same offline access token mechanism.

11

Okay, but it says, “for all public apps”.