Shopify Guide

Shopify Collaborator
Request Code

Before any agency or developer can access your store, they need this 4-digit code. Here's exactly where it lives, how to share it safely, and what permissions to grant.

5 MIN READ
UPDATED MARCH 2026
WRITTEN BY
Irakli B.

Shopify Collaborator Request Code:
How to Find, Share & Manage It

Working with a CRO agency, developer, or app support team on your Shopify store? 
Before they can request access, they'll need your collaborator request code — a 4-digit security token that controls who can even ask for entry. Here's exactly where to find it and how to manage it safely.
In this guide
  1. What is a Shopify collaborator request code?
  2. Where to find your collaborator request code
  3. How to enable or disable the code requirement
  4. What permissions to grant a CRO agency
  5. Security best practices
  6. Frequently asked questions

What is a Shopify collaborator request code?

A Shopify collaborator request code is a randomly generated 4-digit number that acts as the first gatekeeper between your store and any external person who wants access to it.

When an agency, freelance developer, or app support team wants to work inside your Shopify admin, they need a Shopify Partner account. After creating one, they can send you an access request — but only if they either know your code, or your store is set to allow open requests.

Critically: sharing the code does not grant access automatically. It only allows the person to send you a request. You still review and approve it manually, and you set exactly which sections of your store they can see.
Important update (Dec 2023 → 2024):
Shopify briefly made the collaborator code mandatory for all stores. As of 2024, store owners can again toggle between open requests and code-required access — but Shopify defaults to the code requirement for security. We recommend keeping it enabled.

Where to find your Shopify collaborator request code

Follow these steps to locate your code:
  1. Navigate to your Shopify store Admin → Settings → Users and permissions
  2. Scroll down to the section Collaborators, and there's your code
  3. Copy the code using the icon and share it with the desired person

Can I change the code?

You cannot set a custom number — Shopify generates it randomly. However, you can click "Generate new code" at any time to create a fresh one. The moment you do, all previous codes are permanently invalidated. This is useful if you've finished working with one partner and are onboarding a new one.
Pro Tip:
Only the store owner or users with full admin permissions can see and copy the collaborator request code. If a team member can't find it, check that their account has the right access level under Settings → Users and permissions → Staff.

How to enable or disable the code requirement

Shopify gives you two settings under the Collaborators section:
  1. Go to Settings → Users and permissions → Collaborators
  2. Scroll down to the section Collaborators and choose between "Anyone can send a collaborator request" and 
"Only people with a collaborator request code can send a collaborator request"
For most stores, the code-required setting is the right choice. It prevents unsolicited access requests from agencies cold-pitching your store through Shopify's partner system.


The one exception: if you work with many different agencies or freelancers simultaneously and find the code-sharing step adds friction, open requests can streamline onboarding — just make sure you're reviewing and approving each request carefully before granting access.

What permissions to grant a CRO agency or developer

When you approve a collaborator request, Shopify asks you to choose which areas of your store they can access. Getting this right matters — you want to give your partner everything they need to do their work effectively, without exposing sensitive areas like payment details or full customer data.


Here's a reference table for a typical Shopify CRO engagement:
At Weblics, when we onboard a new client, we send a specific list of the permissions we need upfront — so there's no ambiguity and no back-and-forth. Ask your agency to do the same.

Security best practices for collaborator access

The collaborator access system is well-designed — but a few habits make it significantly more secure:

Rotate your code after ending an engagement

When you finish working with an agency or developer, generate a new code immediately. This ensures they can't use the old one to re-request access in the future. Existing approved collaborators are not affected — only the ability to initiate new requests changes.

Review active collaborators regularly

Under Settings → Users and permissions → Collaborators, you can see everyone who currently has access to your store, along with what permissions they hold. Run an audit every quarter and remove anyone whose engagement has ended.

Never share your code over public channels

Send your 4-digit code over a direct message, encrypted chat, or secure email — not in a public Slack channel, a shared Google Doc, or a support ticket thread that others can view. Treat it like a temporary password.

Match permissions to the actual scope of work

The most common mistake store owners make is granting full admin access "to keep things simple." Resist this. The collaborator permission system exists precisely so you can be specific. If an agency only needs to deploy A/B test code, Themes access is enough — they don't need to see your customer database.
Reminder:
You can revoke a collaborator's access at any time from the Collaborators section. If something feels off mid-engagement, don't hesitate to remove access first and ask questions second.
FAQ

Do you have any questions left?

Here are the answers for you

What is a good conversion rate for a Shopify store in 2026?

A good Shopify conversion rate ranges from 2.5% to 3.5% for most DTC ecommerce stores. However, this varies significantly by product category, price point, and traffic source. A store selling $20 impulse-buy products from social media traffic will naturally convert higher than a $500 luxury goods store getting organic search traffic. Focus on improving your own baseline by 0.3-0.5% at a time rather than chasing an arbitrary benchmark.

How long does it take to see results from Shopify conversion rate optimization?

Most Shopify stores see measurable improvements within 30-60 days of implementing data-backed changes. Quick wins - like fixing page speed, adding trust badges, or streamlining checkout - can show results in under two weeks. Deeper optimizations based on A/B testing typically need 2-4 weeks per test to reach statistical significance, with compounding gains over 3-6 months.

Does changing my Shopify theme actually improve conversion rate?

It can, but not always. A theme switch improves conversions when your current theme is slow, poorly structured for mobile, or lacks modern features like section-based product pages. Simply swapping to a "prettier" theme without addressing the underlying UX and copy issues won't move the needle. Theme migrations work best when paired with intentional CRO improvements to layout, content structure, and page speed.

Do I need a CRO agency, or can I optimize my Shopify store myself?

You can absolutely start optimizing on your own - and should. The strategies in this guide are DIY-friendly. However, an experienced Shopify CRO agency adds value when you need rigorous A/B testing infrastructure, statistical analysis expertise, and a systematic testing roadmap. Agencies like Weblics run 10-20 concurrent experiments with proper controls, which is hard to replicate in-house without dedicated resources. The ROI question is simple: if the agency generates more incremental revenue than their fee, it pays for itself.

What if I have good traffic but a very low conversion rate - under 1%?

A sub-1% conversion rate usually signals one of three problems: your traffic quality is poor (visitors aren't your target audience), your product-market fit messaging is off (visitors don't immediately understand why they should buy), or there's a major technical friction point (slow speed, broken mobile experience, checkout errors). Start by checking your analytics for device-specific conversion rates. If mobile converts dramatically lower than desktop, you likely have a mobile UX issue. If both are low, revisit your traffic sources and product page messaging.

Should I focus on increasing traffic or improving conversion rate first?

Almost always improve conversion rate first. Here's why: if your store converts at 1% and you double your traffic, you get 2x the sales. But if you improve your conversion rate to 2% at your current traffic level, you also get 2x the sales - without spending more on ads. The math is the same, but the CRO path is cheaper, faster, and makes every future dollar of ad spend more efficient. Fix the leaky bucket before you pour more water into it.

What's included in each plan?

Every plan includes complete care-driven CRO - what varies is testing capacity and analysis depth.

All Plans Include:

Onboarding (First 5 days):

  • Founder interviews & business deep-dive
  • Comprehensive technical website audit
  • Customer psychology analysis (ICP, 5 WHYs, SWOT)
  • AI-trained buyer personas creation
  • Ad creatives audit
  • Marketing ecosystem review

Ongoing (Continuous):

  • Psychology-first hypothesis generation
  • Conversion-focused UX/UI design
  • Strategic copywriting
  • Shopify development & implementation
  • A/B testing & QA
  • Transparent reporting & documentation
  • Strategy meetings (weekly or bi-weekly)

What Changes by Tier:

  • Tests per month: 2, 4, 6, or 8 A/B tests
  • Meeting frequency: Bi-weekly (Starter) or Weekly (Growth+)
  • Analysis depth: Post-purchase surveys, support analysis, inventory strategy, KPI planning, quarterly planning (varies by tier)

Bonus (Growth+): Comprehensive email marketing audit from specialist partners

What's the difference between Flexible and Scale plans?

Flexible plans give you complete control over costs. You pay for the essential CRO work - strategy, hypothesis generation, analysis, A/B test and project management - whilst design, development, and QA are billed separately at $70/hourly only when you need them.

This is perfect if you have an in-house design or development team, or if you want to manage exactly what gets built and when. You're not locked into paying for services you don't need.

Scale plans include everything - strategy, analysis, design, development, QA, and implementation - in one predictable monthly retainer. No surprises, no separate invoices, just complete care-driven CRO delivered autonomously.

Choose Flexible if: You have internal resources or want precise cost control
Choose Scale if: You want fully autonomous, hands-off CRO with everything included

How do your pricing tiers work?

Transparent pricing based on your monthly traffic.

We charge based on traffic volume because testing capacity and statistical significance directly correlate with session count. The more traffic you have, the faster we can run tests and deliver results.

Pricing:

  • Starter (50K-75K sessions): $1,650/mo - 2 tests
  • Growth (75K-150K sessions): $3,500/mo - 4 tests
  • Scale (150K-350K sessions): $6,600/mo - 6 tests
  • Enterprise (350K+ sessions): $10,700/mo - 8 tests

No long-term contracts. Cancel anytime.
Every plan includes our 30-day profitability guarantee.

Not sure which plan fits?
Book a discovery call - I'll help you find the perfect match for your business.

‍

What's your CRO process?

Our battle-tested frameworks and systems validate every hypothesis before we build.

Phase 1: Onboarding (First 5 days)

  • Deep-dive into your business, customers, and psychology
  • Comprehensive technical audit
  • 25+ care-driven optimisation hypotheses
  • Custom roadmap delivered

Phase 2: Operational (Continuous)

  • Validate hypotheses through AI-trained buyer personas
  • Ask: "Does this genuinely serve customer needs - not manipulate?"
  • Design, develop, and implement winning tests
  • Rigorous QA across all devices
  • Launch and monitor

Phase 3: Ongoing Analysis (Monthly)

  • Behavioural segmentation & data analysis
  • Post-purchase survey analysis (Growth+ plans)
  • Support ticket insights analysis (Growth+ plans)
  • Inventory strategy (Growth+ plans)
  • Monthly KPI planning (Growth+ plans)
  • Quarterly strategic planning (Scale+ plans)

‍

Do you use AI?

Yes - but as an addition to our battle-tested frameworks, not the foundation.

We've built a proprietary AI system that validates every hypothesis against your actual buyer personas before we build anything. This ensures we only create optimisations your customers will genuinely respond to.

How it works:

  1. Our frameworks identify conversion opportunities
  2. We generate psychology-first hypotheses
  3. AI-trained buyer personas validate each hypothesis
  4. We ask: "Does this genuinely serve customer needs—not manipulate?"
  5. Only validated hypotheses get built and tested

This approach achieves 84% test success rate vs 45% industry average - because we validate with your actual customers before building, not after.

AI enhances our care-driven methodology. It doesn't replace genuine customer understanding.

‍

What if I need more than my plan includes?

Simply upgrade to the next tier for more included tests and enhanced ongoing analysis.

We're completely flexible - scale up or down based on your business needs. No penalties, no long-term lock-ins.

Want to discuss expanding your plan? Your dedicated CRO manager can adjust your package anytime.

Can I cancel anytime?

Yes. No long-term contracts. Cancel anytime.

We earn your business every single month through results - not by trapping you in contracts.

If we don't make you profitable within 30 days, you pay nothing more until we deliver. That's our guarantee.

Most clients stay because care-driven CRO compounds month after month - each winning test keeps generating revenue whilst new tests add even more. But you're never locked in.

We're confident our results will speak for themselves.

‍

How involved do I need to be?

Zero micromanagement required. We operate completely autonomously.

We're an extension of your business - making decisions with your profit margins AND mission in mind, not billable hours.

Your involvement:

  • Initial onboarding: 2-3 hours (interviews, strategy alignment)
  • Weekly/bi-weekly meetings: 30-60 minutes (strategy updates, results review)
  • Ad-hoc questions: Slack chat for quick questions

We handle everything else:

  • Hypothesis generation
  • Design and copywriting
  • Development and implementation
  • QA across all devices
  • A/B test management
  • Data analysis and reporting

You focus on running your business. We focus on adding $50K+ monthly to your revenue.

That's the partnership.

What tools/platforms do you use?

We integrate with your existing tools—no forced changes.

Analytics: Shopify Analytics, Microsoft Clarity, GA4
Testing: Intelligems
Management: ClickUp, Figma, Slack

Your data stays in your systems. We integrate seamlessly.

How do you ensure my data is secure?

We sign NDAs before any work begins. Your data is protected - always.

Security measures:

  • Non-Disclosure Agreement (NDA) signed upfront
  • Limited access permissions (only what's necessary)
  • Data stored in your systems (we don't migrate your data)
  • Team access restricted to assigned personnel only
  • Regular security audits

We treat your business like our own - that includes protecting your data like it's our own.

You maintain full control over all access permissions and can revoke them anytime.

‍

What results can I expect?

Guaranteed profitability in 30 days. $50K+ monthly revenue boost within 60 days.

Tangible outcomes:

But more than numbers - you'll understand your customers deeply, remove friction authentically, and build genuine relationships that compound revenue month after month.

  • Increased conversion rates (50-100%+ improvements common)
  • Higher average order values
  • Improved ROAS (return on ad spend)
  • Enhanced customer lifetime value
  • Sustainable, compounding revenue growth

Our 84% hypothesis success rate means tests consistently work.

Real client results:

  • ForKeeps Merch: $2.3M added revenue (+70% conversion rate)
  • Organic Muscle: 128% conversion rate increase
  • CKitchen: $1.1M added revenue over 22 months
  • Mayven Studios: 50% conversion increase in 2 months
How long should I work with you?

For as long as care-driven CRO continues delivering massive ROI - which typically compounds over 6+ months.

Why long-term partnerships work:

  • Each winning test keeps generating revenue permanently
  • New tests stack on top of previous wins
  • Deeper customer understanding leads to better hypotheses
  • Compounding effects multiply over time

Typical timeline:

  • Months 1-3: Foundation + initial wins ($50K+ monthly added)
  • Months 4-6: Compounding effects visible (wins multiply)
  • Months 7-12: Sustainable growth system established
  • 12+ months: Category-leading conversion rates achieved

Most clients stay 12-24+ months because results compound. But there's no lock-in - cancel anytime.

We earn your business every month through genuine results, not contracts.

‍

How do I get started?

Three simple steps:

Step 1: Book a Discovery Call 30-minute conversation to discuss your traffic, goals, and biggest challenges. We'll explore if we're a good fit and map out your path to $50K+ monthly revenue growth.

Step 2: Get Your Free Audit We'll conduct a comprehensive CRO audit of your website, deliver 25+ psychology-first hypotheses, and show you exactly where your biggest revenue opportunities are.

Step 3: Choose Your Plan & Launch Select the plan that fits your traffic and business needs. We'll onboard you within 5 days and have your first A/B test live within 10 days.

Ready to grow with care-driven CRO?

Or have more questions? Email us: garyk@weblics.agency

Wait… Claim your free bonuses

Find out exactly where your store is leaking revenue — and 
where your ad spend is going to waste. No pitch, just data.

Thank you! Your submission has been received!
Oops! Something went wrong while submitting the form.
No spam. No agency pitch. 

Just honest findings delivered within 2 business days.