The connection between WordPress and Shopify is secured with API keys. This guide explains how to configure and manage your connection settings.
API Key Management
Generating a New API Key
- In Shopify admin, open the Wash app
- Go to Settings → Connection
- Click Generate New API Key
- Copy the key immediately — it won't be shown again
Regenerating API Keys
If you need to regenerate your API key (e.g., security concerns):
- Click Regenerate API Key
- Confirm the action
- Update the key in your WordPress settings immediately
Note: The old key is invalidated instantly. Make sure to update WordPress right away to avoid sync interruptions.
WordPress Configuration
Settings Location
In WordPress admin, go to Wash → Settings to configure:
- Shopify Store URL — Your store's myshopify.com URL
- API Key — The key from your Shopify app
- Sync Mode — Automatic or manual
Testing the Connection
After entering your credentials:
- Click Test Connection
- A green checkmark indicates success
- A red X shows the error message
Security Best Practices
API Key Security
- Never share your API key publicly
- Don't commit API keys to version control
- Regenerate keys if you suspect they're compromised
- Use environment variables in development
HTTPS Requirement
Both WordPress and Shopify must use HTTPS for secure communication. Wash will not connect over HTTP.
IP Whitelisting
If your WordPress site uses IP whitelisting, ensure Wash's servers can connect. Contact support for IP ranges.
Connection Status
Status Indicators
- Connected (green) — Everything working
- Disconnected (red) — Connection failed
- Pending (yellow) — Awaiting configuration
Common Issues
Connection Timeout
- Check your WordPress site is accessible
- Verify no firewall is blocking requests
- Ensure your hosting allows external API calls
Invalid API Key
- Double-check for extra spaces when pasting
- Verify you're using the correct store's key
- Try regenerating the API key
SSL Certificate Error
- Ensure your SSL certificate is valid and not expired
- Check certificate chain is complete
- Use a tool like SSL Labs to verify