Shopify public apps · January 1, 2027

Plan the token exchange before touching production.

Build cohorts, prove eight readiness gates, and drill the failure paths around Shopify's irreversible per-shop move to expiring offline tokens.

Download the offline desk — $19

One-time single-team license. Immediate ZIP after verified payment. No account, upload, or subscription.

552shops

23cohorts

12run days

Failure drillRiskSafe outcome

Concurrent refreshhighOne token lineage wins

DB write failurehighNo partial pair persists

Refresh 5xxmediumBounded retry; cohort pause

A migration planner, not a token handler.

Cohort schedule

Split active and dormant installations into dated batches with a daily cap and explicit pause rule.

Readiness evidence

Track storage, encryption, locking, atomic updates, retries, shared refresh logic, observability, and staging drills.

Failure drills

Print a runbook covering worker crashes, database failures, concurrent refresh, invalid grants, 401s, and cohort thresholds.

Quick cohort estimate

Shops in scope Shops per cohort Cohorts per day

20 cohorts across at least 10 run days.

This calculator runs in your browser. Values are not uploaded.

Single-team internal license$19

Offline app, CSV cohort export, JSON plan backup, printable runbook, fictional sample, and plain security boundaries.

Get the migration desk

Why now

Shopify says older public apps must use expiring offline tokens by January 1, 2027. The documented exchange is one-time and irreversible for each shop; apps must persist expiry and refresh metadata, refresh background access safely, and handle failures without exposing secrets.

Plain limits

Independent planning tool only. It does not connect to Shopify, inspect source code, exchange or refresh tokens, validate production readiness, or provide security or legal advice. Never enter tokens, client secrets, merchant data, or private logs. Shopify is a trademark of Shopify Inc.; Goodaideas LLC is not affiliated with or endorsed by Shopify.