Apps, Themes & Platform Risk

Section updated .

Platform risk is the exposure you take on every time you install an app, edit a theme, or depend on a feature Shopify may change. Managed well, it is invisible; managed poorly, it shows up as a broken checkout after an update. These guides cover vetting apps, backing up themes, tracking deprecations, and migrating to checkout extensibility safely.

Your store sits on top of code you do not fully control: third-party apps, a theme you may have customized, and platform features with their own lifecycles. Each is useful and each is a dependency that can break. The discipline here is simple but easy to skip — vet before you install, back up before you edit, and watch for deprecations before they become outages.

Guides in this section

How to use this section

Treat every dependency as something that will eventually change. Vet apps before granting them permissions, back up your theme before any edit, and keep a short deprecation watch so platform changes like checkout extensibility are planned migrations, not emergencies.

Frequently asked questions

How do I know if a Shopify app is safe to install?

Check its review depth and recency, the permissions it requests, how actively it is updated, and the quality of its support. An app that asks for broad access but is rarely updated is a risk regardless of its features.

Why should I back up my theme before editing?

A single bad edit to theme code can break checkout, tracking, or layout, and Shopify does not keep unlimited automatic history. Duplicating the theme first means any mistake is a one-click revert instead of a live incident.

What is a Shopify app deprecation?

A deprecation is when an app or a platform feature it relies on is being retired or no longer maintained, which eventually causes it to break. Watching for deprecations lets you migrate on your schedule instead of during an outage.

Do I have to migrate to checkout extensibility?

Shopify has been retiring checkout.liquid in favor of checkout extensibility, so stores relying on legacy checkout customizations need to migrate to keep them working. Planning the migration early avoids losing functionality when the deadline hits.