Shopify Customer Accounts and the Form Password Field

Issue

A merchant may add a Password field to a form and enable the option to create a Shopify Customer from the submitted Email field. The merchant may expect the customer to use the submitted password to log in to their Shopify account.

Conclusion

With Shopify's latest version of Customer accounts, a password cannot be created or set through the Form Builder Password field. Customers sign in using a one-time six-digit verification code sent to their email address; a password is not required. Email-and-password sign-in belongs to Shopify's Legacy customer accounts.

Therefore:

  • A form submission can create or match a Customer record in Shopify Admin, but this does not set a usable Shopify account password.
  • The form Password field is a form data field, not a Shopify Customer login credential.
  • Form Builder does not send the form password to Shopify's Customer API; password values must also be handled as sensitive data and displayed in a redacted form.
  • For stores using the latest Customer accounts, customers should open the store's Customer accounts page, enter their email address, and use the one-time verification code sent by Shopify.
  • If email-and-password sign-in is required, the merchant must confirm that the store is using Shopify Legacy customer accounts and a compatible solution. The Form Builder Password field alone cannot provide this functionality.

Configuration Recommendations

1. If the goal is only to create a Shopify Customer, keep the Email field and enable Customer creation. Do not promise that the form password will become the customer's account password.

2. If collecting a password is not required, remove the `Password` field. If it must be collected, clearly explain its purpose in accordance with the merchant's privacy and security policies, and do not describe it as the Shopify login password.

3. When responding to merchants, clarify that creating a Customer

record and signing in to a Customer account are separate processes. The presence of a Customer record in Shopify Admin does not mean that a password has been configured.

Official Shopify References

If any problem, feel free to contact us for support directly.

Back

More resources