Verified facts
What happened
Verified from the Shopify Developer Changelog: a previously used refresh token remains usable until the app begins using its replacement.
The recovery period is limited to 30 days from the original refresh token’s first use and does not extend the token beyond its normal 90-day lifetime.
The preceding refresh token is retired when the app uses the replacement refresh token.
No migration, API-version change, configuration change, or opt-in is required, and apps that do not use expiring offline access tokens are not affected.
Business relevance
Why it matters
For merchants relying on connected apps, a lost network response, worker failure, or database write failure may no longer immediately leave the app without a usable refresh path.
The change may reduce situations where a merchant has to reopen an app to restore access, but that benefit depends on the app continuing to save returned token pairs correctly.
This is a resilience improvement rather than a substitute for sound credential storage: the recovery window is bounded, and the replacement token still needs to become the app’s active credential.
Editorial perspective