How to Switch Shopify SEO Agencies Without Losing Rankings
A 28-check handover list for switching Shopify SEO agencies: who owns Search Console, GA4 and Merchant Center, what to snapshot, redirects, and what to freeze.
Quick answer: The switch itself is not what puts your rankings at risk. Lost access, changes that get undone, and redirects that break or get deleted are. Before you give notice, make sure your business, not the agency, holds the top role in Search Console, GA4, Tag Manager and Merchant Center. Then take a dated snapshot of your data, titles and redirects, ask the outgoing agency for a change log and a redirect map, and freeze structural changes (URLs, theme, collections, robots.txt) until the new agency has read that baseline. The 28 checks below are in six groups.
If you are thinking about changing SEO agencies, you have probably already had the conversation with yourself: the reports are not turning into revenue, you cannot get a straight answer about what was actually done, and you are worried that leaving will undo whatever progress exists. If that sounds familiar, our guide to what to do when your Shopify SEO agency is not delivering covers the decision to leave. This post covers the part after that decision, which is rarely planned: the handover.
Founders who come to us have often had an agency before, and the handover is where avoidable damage happens. Not because Google punishes you for changing supplier. The Google pages I read for this post describe what happens to a site when its URLs, redirects, crawl blocks or verification change. None of them treats a change of agency as an event for your site. So the job is to make sure none of those things change by accident while the work moves from one team to another.
The checks below are written for a founder, in Australia or elsewhere, who runs a Shopify store and needs to do this without a developer on call. Some of them take five minutes. A few (the redirect map and the change log) are worth pushing for. This post does not tell you which agency to pick; for that, see what to prepare before hiring a Shopify SEO agency.
A note on sources: the Google and Shopify help pages quoted here were read on 31 October 2026. Both companies rename menus and change limits, so use the menu names as a guide and check the page if a screen looks different. This is general information, not legal advice.
What actually goes wrong in an agency switch
Three things cause nearly all the damage, and none of them is “changing agency”:
| Failure | How it happens | Where it is caught |
|---|---|---|
| Lost access | The agency owns the account, or the founder removes the agency before adding themselves | Checks 1 to 9 |
| Undone changes | Nobody knows what was changed, so the new team reverses it, or an app or theme swap wipes it | Checks 10 to 20 |
| Broken redirects or URLs | A redirect is deleted, a page is renamed, or a theme or platform change alters addresses | Checks 21 to 26 |
If a change of URLs is involved, Google’s own guidance on site moves with URL changes tells you to expect temporary fluctuation in site ranking during the move, and says a small to medium-sized website can take a few weeks for most pages to move. That is the migration risk, and it is the only place this post treats a ranking dip as a normal cost. A plain change of agency, with the site left alone, should not need it.
Use the groups in order. Group one (ownership) is the one to do before you tell anyone you are leaving.
If you only have an hour, do these: 1, 2, 3, 4, 10, 15, 21 and 24.
Group 1: Ownership and access (checks 1 to 9)
1. Make an access map. List every account that touches your SEO, and write down who holds the top role in each. Most stores end up with something like this:
| Account | Who should hold the top role | What to check |
|---|---|---|
| Search Console | Your business, with a second owner | Who verified it, and by which method |
| GA4 | Your business, at account level | Both the account and property user lists |
| Tag Manager | Your business, plus a second admin | Who can publish |
| Merchant Center | Your business, as Admin | Who holds the website verification |
| Shopify admin | You, as the store owner | Staff and collaborator accounts |
| Domain and DNS | Your business, as registrant | Who has the registrar login |
If you cannot fill in a row without asking the agency, that row is your first job.
2. Search Console: confirm you are an owner, and add a second one. Google’s Search Console help says only an owner can add or remove users, and that a property must keep at least one verified owner, because otherwise no users will have access to it. There are two kinds of owner. A verified owner proves ownership with a token (a file, tag or DNS record). A delegated owner is granted ownership by a verified owner, with no token. You can remove a verified owner but not downgrade one.
Here is the trap. When an owner is removed, their token is not deleted automatically. While it remains, that person can re-verify and regain access (current owners are notified if this happens). The other direction is worse: if every verified owner is removed, the remaining users and delegated owners lose access after a grace period, and while data for the property continues to be collected, nobody can see it until someone verifies again.
A scenario to picture (illustrative): the agency verified the store years ago using a DNS record at a registrar only they can log in to, and you were added as a delegated owner. If that record is removed and nobody else has verified, everyone’s access expires after the grace period.
3. Verify yourself by a method you control. Google’s verification page says verification lasts only as long as Search Console can confirm the token is present and valid, and that if this fails, permissions expire after a grace period. The methods matter:
- A DNS record is the only way to verify a Domain property. Google says to keep the record in place even after verification succeeds.
- An HTML file, an HTML tag, a Google Analytics snippet or a Tag Manager container can verify a URL-prefix property only. Removing the file ends verification, and a snippet that depends on the agency’s own GA or Tag Manager account can disappear when that account does.
If your only verification is a tag inside an account the agency controls, add a method you control before anything else changes.
4. GA4: check the account-level and property-level lists. Google’s GA4 access page says only Administrators can add or delete users, and that Editors can view users but not manage them. It also says roles are inherited by default from account to property, and that a user’s effective permission is the most permissive role they hold. So an agency user with an account-level role can still have access when you look only at the property. Check both lists.
Also check the data retention setting while you are in there. Google’s retention page says event data can be set to 2 months or 14 months on a standard property (longer periods are for 360 properties only), that the setting affects explorations and funnel reports, and that standard aggregated reports are not affected. If an old property was left at 2 months, your explorations will be short of history. Set it deliberately, as the business.
5. Tag Manager and Shopify’s Customer events: list what is there, then do not delete anything. Google’s Tag Manager help says accounts with a single administrator risk lockout if that user becomes unavailable, recommends adding at least one more, and says to make sure the Google account is managed by someone within your organisation, not an outside agency or consultant. Container permissions run from Read through Edit, Approve and Publish, so check who holds Publish.
On the Shopify side, Shopify’s help says you manage custom pixels in Settings, then Customer events. Disconnecting a pixel does not delete it, while deleting one cannot be undone. During a handover, screenshot that list and leave it alone. If the old team set up Meta or Google tracking there, the new team needs to see it as it was. Our guide to migrating tracking pixels, GA4 and Meta CAPI explains what moves where.
6. Merchant Center: check Admin, the Partners list and the verification holder. Google’s Merchant Center help says Admins can add, remove or edit people and can add or remove apps and stores, while Standard users cannot manage others. It carries a specific warning: before removing a person, check your website URL verification is not tied to them, because removing them also removes your verification and claim status, and you would need to verify and claim the site again with someone else.
If the agency was linked as a partner, Google’s agency page says the client keeps control of the connection and can see all linked partners and remove access at any time from People and access. It also says Admin access is recommended for agencies, so a linked agency may hold wide powers. Look at the Partners list and decide what the outgoing agency still needs.
7. Shopify admin: separate staff accounts from collaborator accounts. Shopify’s help says staff accounts are for your own team, while collaborator accounts are for Shopify Partners. Go to Settings, then Users, and see who is there. A few rules from Shopify’s collaborator page: collaborators need two-step authentication, you cannot give them the Administrator store role, you cannot transfer ownership to one, and access expires automatically if a collaborator has not logged in for 90 days. Do not rely on the 90 days. Removing a collaborator is permanent (they must send a new request to return). For staff accounts, Shopify’s user page recommends deactivating unused logins, which you can reverse, whereas removal is permanent. So deactivate staff accounts on handover day, and remove collaborator access last.
8. Domain and DNS: know who holds the login. DNS verification for Search Console, any domain-level redirects and your store’s domain connection all depend on whoever controls the registrar and DNS. Confirm the registrant is your business and that you have the login. This is the one item on the list with no help page behind it; it is simply the account everything else rests on.
9. Remove the old agency last, in this order.
- The new agency confirms in writing that their own access works in every account above.
- You hold a second owner or admin in each.
- The snapshot (checks 10 to 14) is saved.
- The handover pack (checks 15 to 20) has arrived.
- Then remove or deactivate the old agency, account by account, and delete any leftover verification tokens only after checking that nothing else uses them. Google’s page warns that one token may also support other services such as Merchant Center or Google Workspace.
Group 2: Take a snapshot before anything changes (checks 10 to 14)
10. Export Search Console while you still can. The Performance report in Search Console shows the last 16 months, and Google’s traffic-drop guide says that to look back further you could use the Search Analytics API or bulk data exports and store the data yourself. Export performance by page and by query for the full 16 months, and save the page indexing counts and your submitted sitemaps.
11. Write a baseline from GA4 and Shopify. Take the same period from both: organic sessions, organic landing pages, orders and revenue. Expect GA4 and Shopify to differ; GA4 and Shopify Analytics count differently, so record both and note the gap instead of trying to reconcile them now. A new team judged against a baseline nobody wrote down is judged against memory.
12. Capture titles, descriptions and canonicals. In Shopify admin, go to Products, then Export. Shopify’s help says the SEO Title and SEO Description columns are only populated when you have manually customised them, so a blank cell means a default, not a missing export. That export covers products only and does not include images. For collections, pages and blog posts, run a crawl of the live site and save titles, H1s, canonical tags, status codes and indexability.
13. Save your redirects, robots.txt and theme.
- In Shopify admin, go to Content, then Menus, then URL redirects, and use Export to save the list as a CSV.
- If your theme has a robots.txt.liquid template, copy its contents. Shopify says this is an unsupported customisation, that Shopify Support cannot help with edits to the file, and that incorrect use can result in loss of all traffic. Shopify’s way back to the default file is to delete the custom template, so save a copy first. Our robots.txt guide explains what a sensible file contains.
- Duplicate the live theme. Shopify’s help describes duplicating as a way to make a backup copy before you customise, and says a store can hold 20 themes. Shopify’s Timeline feature in the code editor restores one file at a time, cannot recover deleted files, has finite history, and has no history for the assets folder, so a dated duplicate is the better safety net.
14. Write a “do not touch” list. Pull your top 20 pages by organic revenue (or, if you cannot, by organic landing sessions). These are the URLs that nobody changes in the first weeks without a written reason. This is my rule of thumb, not Google’s: the pages already earning money are the cheapest to protect and the most expensive to break.
Group 3: What to ask the outgoing agency for (checks 15 to 20)
You are entitled to ask. Whether you are contractually entitled to receive it depends on your agreement, so read the notice and work-product terms (not legal advice, and a solicitor can tell you more). The practical position is the same either way: ask early, ask politely, ask in writing, and set a date.
15. A change log. Every change made to the store for SEO: date, URL or template, what changed, and why. This is the most valuable item on the list, because “undone changes” is the second failure mode in the table above. Ask for it as a spreadsheet with four columns.
If there is no log, rebuild one from evidence: the theme Timeline for template edits, the redirect export, the list of installed apps and Customer events, a fresh crawl compared with an older crawl if one exists, and robots.txt.liquid.
16. A redirect map. The old address and the new address for every redirect set up, and the reason. Shopify’s redirect list holds the live ones, but only the agency knows why a line exists.
17. The content, and who owns it. Blog drafts, product and collection copy, images, briefs, and any structured data or schema snippets the agency wrote. Ask where they are stored (shared drive, the agency’s own tools) and for a copy of each. Check your contract for who owns work product after termination. If the contract is silent, get the point in writing before you pay a final invoice.
18. A list of links built. Ask for every directory, profile, guest post or paid link placed on your behalf, with the URL and the date. Google’s spam policies describe link spam as creating links to or from a site primarily to manipulate rankings, and list buying or selling links for ranking purposes, excessive link exchanges, and using automated programs or services to create links as examples. You are not accusing anyone by asking. The new team needs to know what exists before it decides what to build.
19. The backlog. What was recommended and not done, and why. A good outgoing agency can hand over a short list of “we proposed, you declined or we did not get to it”. It saves the new team re-discovering the same issues and charging you to prove them.
20. Tools, apps and scripts. Which Shopify apps the agency installed, which scripts they added to the theme, and which reporting or rank-tracking tool holds your history. Rank-tracker history is often the only record of where you ranked before the switch, so ask for an export. Shopify’s developer documentation says that if uninstalling an app leaves code in the theme, merchants need instructions to remove it, which is why a list of what was installed matters even for apps that are gone. For a plain-English view of what such apps do, see what Shopify SEO apps do.
Group 4: Redirects, the part that really can break (checks 21 to 23)
21. Do not delete redirects during the handover. Shopify’s help page on URL redirects sets out how they behave, and it is where handovers go wrong:
- You find them in Shopify admin under Content, then Menus, then URL redirects. A store can have up to 100,000 (Shopify Plus stores, up to 20,000,000).
- A redirect only works from a broken URL. If the old URL still loads a valid page, the redirect does not fire. To redirect an existing item, you first need it to return a 404, for example by setting a product to draft or a collection to hidden.
- If a hidden collection is made visible again, its redirect is deleted automatically and has to be recreated.
- Some paths cannot be redirected, including paths starting with /cart, /orders or /apps and tag-filtered collection URLs.
- Shopify notes that browsers and search engines cache 301 redirects, so removing one may not take effect for every visitor straight away.
An illustrative case: the old team hid a retired collection and redirected it to its closest replacement. Months later, someone makes the collection visible again for a promotion, and the redirect is deleted automatically. When the collection is hidden again, nobody remembers to recreate the redirect, and the old address returns a 404 where visitors and links used to be sent to the replacement. Nobody did anything careless, yet the address now returns a 404. That is why the exported CSV from check 13 matters.
22. Test your top URLs after every change. Google’s site move guide recommends permanent redirects such as 301 and 308, says to keep any chain of redirects short (ideally no more than 3 and fewer than 5), says not to send many old URLs to one irrelevant destination such as the home page, and says to test with the URL Inspection Tool for individual pages or scripts for large numbers. For a store, that means taking your “do not touch” list from check 14 and your older URLs from the redirect map, and checking each one lands on a live page with a 200 status. My own rule is stricter than Google’s: one hop, so the fix for a chain is to point the old address straight at the final page. Our guide to retiring discontinued products explains when a 301 is wrong and a 410 is better.
23. Keep redirects for as long as possible. Google’s guidance says to keep redirects for as long as possible, which it describes as generally at least one year. If a new agency tells you a redirect list is clutter, ask them which line they want removed and why. The cost of keeping a redirect is close to nothing; the cost of a deleted one is a lost address.
Group 5: What to freeze (checks 24 to 26)
The reason to freeze is diagnostic as much as protective. If you change six things in one week and organic revenue moves, nobody can say which one did it. Google’s site move guide makes the same point for moves: change only one thing at a time.
24. Freeze these until the baseline and the first read-only review are done.
- URL handles for products, collections, pages and blog posts
- Collection structure and navigation menus
- A theme replacement or a redesign
- Bulk rewrites of titles and descriptions
- robots.txt.liquid edits and any noindex changes
- Installing or removing SEO, schema or redirect apps
- Deleting redirects, products or collections
- Domain, DNS or Shopify Markets changes
There is no fixed length of time for a freeze. My rule of thumb: until the new agency has read-only access to everything, has read your snapshot and change log, and has written down what it wants to change first. After that, change one class of thing at a time and leave a gap between classes. Normal trading continues: new products, price changes, stock and sale banners are not on this list.
25. Do not switch agency in the middle of a sale or a build. If a theme rebuild or a major campaign is under way, finish it with the team that started it, or pause it. A handover and a sale peak at the same time give you two reasons to be unable to explain a dip.
26. If a migration is on the table, treat it as its own project. Sometimes a new agency’s first proposal is a replatform or a URL clean-up. That is a legitimate project, but it is a different risk from changing agency, and it carries Google’s documented fluctuation. Run it on its own timeline, with its own checklist, using our Shopify migration SEO checklist, and not as part of the handover.
Group 6: The first weeks with the new agency (checks 27 and 28)
27. Ask for a read-only review first. A sensible first step is an audit that compares the live site with your snapshot: tracking, indexing, redirects, robots.txt, and what the change log says. A new agency that wants to rewrite your titles in week one has skipped that step. Nobody can honestly promise a ranking or traffic outcome in advance; see how long Shopify SEO takes for what to expect.
28. Re-run the access map after the old agency is gone. Check that Search Console still shows you as a verified owner, that GA4 data is still arriving, that Tag Manager still publishes, that Merchant Center shows no new disapproval or lost verification, and that the redirect list is the same length as your export. Do it the day after removal, and again after a week.
Choosing the next agency? Tell us about your store.
Key takeaways
- The switch itself is not the risk. Lost access, undone changes and broken redirects are.
- Your business, not the agency, should hold the top role in Search Console, GA4, Tag Manager, Merchant Center, Shopify and the domain.
- Add your own access first. Remove the old agency last, and only after the new team has confirmed theirs works.
- Snapshot before you change anything: 16 months of Search Console data, a GA4 and Shopify baseline, titles and descriptions, redirects, robots.txt and a dated theme duplicate.
- Ask the outgoing agency for a change log, a redirect map, the content, a list of links built, the backlog and the tools list, in writing, with a date.
- Never delete redirects during a handover. Keep them for as long as possible, which Google says is generally at least a year.
- Freeze structural changes until the new team has read the baseline, then change one thing at a time.
- Treat a migration as a separate project with its own checklist, not as part of the handover.
FAQs
Will I lose rankings if I switch SEO agencies?
Not because of the switch. The documented risks are on the site: URLs that change, redirects that break, crawl blocks that appear and verification that lapses. Plan the handover so none of those happen by accident. If a URL change is part of the plan, Google says to expect temporary fluctuation in site ranking during the move, and that a small to medium-sized website can take a few weeks for most pages to move.
What access should I get before I tell my agency I am leaving?
Owner or Administrator in Search Console, GA4, Tag Manager and Merchant Center, plus the store owner login in Shopify and the registrar and DNS login for your domain. Add a second owner or admin in each, so you are not locked out if one login is lost. Checks 1 to 9 cover each platform.
Who should own Search Console and GA4?
The business. Google’s Tag Manager help says to make sure Google accounts are managed by someone within your organisation, not an outside agency or consultant, and the same sense applies to the other tools. The agency can be a user with the access it needs for the work, and you can remove it later.
How long should I keep redirects after changing agency?
Google’s site move guidance says to keep redirects for as long as possible, generally at least a year. Shopify’s help says a store can hold up to 100,000 redirects (20,000,000 on Plus), so the limit is rarely the issue.
What should I freeze during an agency handover?
URL handles, collection structure, theme replacement, bulk title rewrites, robots.txt and noindex changes, SEO and redirect apps, and deletions of redirects, products or collections. Keep trading as normal. Lift the freeze once the new team has read the snapshot and change log, and then change one class of thing at a time.
What if my old agency will not hand things over?
Start with what you control: your Shopify admin, your domain and DNS, and new access in Search Console, GA4 and Merchant Center as the business. Take your own snapshot from those. Then ask for the rest in writing, citing your contract. A solicitor can advise on what you are owed; this post cannot. If the agency was the only verified owner of a Search Console property, Google says nobody else can see that property’s data until someone verifies ownership, so verify it yourself by a method you control (check 3), and keep your own export either way.
Should I switch agencies in the middle of a sale?
Avoid it. A handover and a sale peak together leave you unable to explain any dip. Finish or pause large builds, then switch in a quieter stretch.
Is your next move a switch, or a second opinion?
If you are weighing a switch, a second opinion first costs nothing: tell us about your store or book a free 30-minute diagnostic. We look at your store before we recommend anything, and we tell you honestly if SEO isn’t the right move. No pitch. The diagnostic is free whether or not you hire us. If you then want to talk about SEO work, see our Shopify SEO service.
Free 30-min diagnostic
Seen enough?
Book a free diagnostic.
We'll look at your store's search pages, find what is costing you traffic and tell you what to fix first. No pitch. No email gate. 30 minutes.
More from Prism3
Afterpay vs Zip vs Shop Pay Instalments: Shopify AU
Afterpay, Zip and Shop Pay Instalments compared for Australian Shopify stores: merchant fees, payouts, approval, checkout placement and a worked margin example.
AI-Referred Orders on Shopify: What Is Real and What Is Hype
What Shopify has disclosed about AI-referred orders, why the 13x headline needs context, how to find AI traffic in GA4 and Shopify, and what to do now.
AI Visibility Tools for Shopify: What They Measure and Miss
What AI visibility tools for Shopify stores really count: mentions, share of voice and citations, where the data is sampled or unstable, and how to use them.