Why is a password-protected Shopify store's sitemap inaccessible?

The Citead team, updated

In short. Shopify's private mode prevents sitemap access, so the store must be public for search engines to read its sitemap.

Definition: A sitemap is a file that tells a search engine about a site's pages. As of 17 October 2026, Shopify documents that storefront password protection, called private mode, prevents sitemap readers such as Google from accessing the store's sitemap.

Key facts

  • Shopify's sitemap documentation permits submission while private mode is active, but says sitemap readers cannot access the file in that state.
  • Shopify's store access documentation says private mode hides storefront pages from visitors and search engines behind a password landing page.
  • Google's Sitemaps report documentation requires Google to be able to retrieve the sitemap without login requirements.

What does the storefront password protect?

Shopify's store access documentation describes a landing page that appears while private mode is active. A merchant can share its password with visitors to let them enter the store. The access setting on the Online Store page displays Private or Public to show the current mode.

This is the storefront access control. Shopify manages its password and additional private mode settings under Online Store > Preferences. The same documentation says the storefront password should differ from the password used to log in to the Shopify admin.

How is the store made accessible for submission?

Shopify's public access instructions give this sequence: open Online Store in the admin, click Private, select Public, and click Update. For the first deactivation of private mode, the action is labelled Launch store.

Shopify's sitemap instructions also allow temporary deactivation for domain verification, followed by reactivation if the store is awaiting launch. Reactivating private mode restores the access restriction that prevents sitemap reading.

How can sitemap access be checked?

Shopify's sitemap documentation locates the automatically generated file at the domain root. Its example URL is:

https://example.com/sitemap.xml

For a verified domain, Shopify directs submission through Indexing > Sitemaps, entering sitemap.xml under Add a new sitemap.

Google's Sitemaps report instructions recommend a live URL inspection of the sitemap URL. The Page availability section should show Crawl allowed? as Yes and Page fetch as Successful. A Couldn't fetch status means Google failed to retrieve the sitemap file. Opening its report row shows failure details. After fixing an unavailable sitemap, resubmission starts a new request.

FAQ

Can I submit the sitemap before opening the store?

Yes. Shopify's sitemap documentation allows submission at any time. Private mode still prevents the reader from accessing it.

Does a successful sitemap submission mean my pages are indexed?

Google's Sitemaps report documentation defines Success as fetching and reading the sitemap without errors. Pages listed in it may still await crawling or indexing.

Sources

  1. Shopify Help Center, "Finding and submitting your sitemap", undated
  2. Shopify Help Center, "Restrict access to your online store", undated
  3. Google Search Console Help, "Sitemaps report", undated

Check how a page reads to answer engines. Open the GEO score analyzer

Test a page and see what to fix first

The analysis usually takes less than 10 seconds and needs no account.

400,000+ pages scored in the public benchmark