Shopify Domain Verification Stuck? How to Fix the 'Verifying Ownership' Loop with Cloudflare

Hey everyone! As a Shopify migration expert and someone who spends a lot of time in the community forums, I often see store owners wrestling with domain connection issues. It's one of those things that just has to work, right? But sometimes, it throws you a curveball. Recently, a thread caught my eye where a merchant, shadex2, was stuck in the dreaded "Verifying ownership" loop when trying to connect their domain, shadex.pk, which is managed via Cloudflare.

This isn't just a minor glitch; it's a full-blown headache. The domain connection screen showed a spinning loader indefinitely, and reloading the page would flip the status to "Failed" or even "Expired" before repeating the cycle. Sound familiar? If you've ever been there, you know the frustration. The good news is, the community chimed in with some really solid advice, and it sheds a lot of light on why this happens and, more importantly, how to fix it.

Unpacking the "Verifying Ownership" Nightmare

Shadex2 had done all the right things: checked that DNS was managed through Cloudflare (with "DNS only" grey clouds), confirmed the A record propagated globally via whatsmydns.net, disabled DNSSEC, and ensured TXT and CNAME records matched Shopify's requirements. Yet, it was still stuck. The key insight from the discussion, particularly from Ecom_swift_LLC, is that this loop is "almost always caused by something left over from the domain’s previous life, not your current DNS." This is crucial, especially for domains that have been connected to Shopify before, then moved elsewhere (like WordPress in shadex2's case), and are now returning.

Common Culprits & Your Action Plan

Let's break down the most common reasons your domain might be stuck and, more importantly, what steps you can take to get it verified and connected to your Shopify store.

1. The Ghost of Shopify Past: Domain Still Attached Elsewhere

   This is a big one. If your domain was previously connected to another Shopify store (even one you no longer use or have forgotten about), Shopify's system might still think it's linked there. Until it's released from that old store, it won't verify on your new one.

   How to Fix It:

   • Access the Old Store: If you have access, log into the previous Shopify store where the domain was connected.
   • Remove the Domain: Go to Settings > Domains in that old store. Find the domain (e.g., shadex.pk) and remove it. This explicitly tells Shopify to release the domain.
   • Retry: Once removed, go back to your current store and try connecting the domain again.
   • Can't Access the Old Store? If you no longer have access to the old store, this is where you'll need Shopify Support. Explain the situation and specifically ask them to "release the domain from the previous connection" on their backend.
2. Cloudflare CAA Records Causing a Stir

   Cloudflare is fantastic, but sometimes its automatic settings can cause conflicts. Specifically, Certificate Authority Authorization (CAA) records. These records specify which Certificate Authorities (CAs) are allowed to issue SSL certificates for your domain. If they don't authorize Shopify's CAs, verification will spin and fail.

   How to Fix It:

   • Log into Cloudflare: Go to your Cloudflare account and navigate to the DNS settings for your domain.
   • Identify CAA Records: Look for any records with the type "CAA".
   • Option A: Delete Them (Temporarily): The simplest fix is often to temporarily delete any existing CAA records. Once your domain is verified and the SSL certificate is issued by Shopify, you can consider re-adding them if you have specific security requirements, making sure to include Shopify's CAs.
   • Option B: Add Authorizations: Alternatively, you can add entries for Shopify's primary certificate authorities: letsencrypt.org and digicert.com. This tells Cloudflare that these CAs are allowed to issue certificates for your domain.
   • Retry: Save your changes in Cloudflare and then retry the domain connection in Shopify.
3. Stale DNS Records: The Lingering Leftovers

   Even if you've updated your A and CNAME records, other old records can cause conflicts. This includes any leftover TXT verification records from a previous setup or A/AAAA records still pointing to an old host (like a WordPress server).

   How to Fix It:

   • Clean Up TXT Records: In your Cloudflare DNS settings, look for any old TXT records that might have been used for previous domain verifications (e.g., from WordPress, Google, etc.) and delete them.
   • Verify A and AAAA Records: Ensure your root domain (yourdomain.com) has ONLY Shopify's A record pointing to 23.227.38.65. Remove any other A or AAAA records.
   • Verify CNAME Record: Confirm your www CNAME record points to shops.myshopify.com.
   • Check DNSSEC: As shadex2 correctly noted, DNSSEC should be disabled in Cloudflare when connecting to Shopify. Double-check this setting.

Looking Ahead: Cloudflare as Your Domain Registrar

While the above steps tackle the immediate problem, Ploqo brought up an interesting long-term solution: transferring your domain completely to Cloudflare, including registrar changes. Ploqo points out that many issues stem from having the domain registrar separate from where your nameservers (NS) are managed (i.e., Cloudflare). Consolidating everything under Cloudflare can streamline management and potentially prevent future headaches.

Cloudflare offers a suite of services beyond just DNS – email routing, bot protection via tiny workers, CDN, and caching. While Shopify does provide some of these services for your store, having your domain fully managed by Cloudflare can offer an extra layer of control and performance benefits. It's definitely something to consider once you've sorted out your immediate verification woes.

So, if you're stuck in that frustrating "Verifying ownership" loop, take a deep breath. Start by systematically checking for those lingering connections from a previous Shopify store, then move on to your Cloudflare CAA records, and finally, do a thorough cleanup of any stale DNS entries. Most of the time, one of these culprits is the reason behind the endless spinning. If you've gone through all these steps diligently and it's still not working, then it's definitely time to reach out to Shopify Support with a clear explanation of what you've tried. They can investigate on their end and manually release any stuck domain records. Patience and methodical troubleshooting are your best friends here!