Black Friday 2026 is Friday, November 27, and Cyber Monday is November 30. If you run a Shopify Plus or BigCommerce store, you have about three weeks of safe working time left before you should stop changing site code. This checklist lays out what to fix in that window, in order, and what to leave alone.
The stakes are bigger than last year. Adobe forecasts U.S. online holiday sales of $275.1 billion from November 1 to December 31, up 6.7% year over year, with Cyber Monday alone at $15.1 billion and Black Friday at $12.9 billion. A checkout bug that costs you an hour on either day costs more than it did in 2025.
When should you start a code freeze before Black Friday?
Freeze site code by Monday, November 16, 2026: eleven days before Black Friday. After that date, no theme deploys, no new apps, no app updates you can postpone, and no changes to checkout, tracking or integrations until Tuesday, December 1. Merchandising, copy and scheduled promo content can keep moving through your platform's editor.
Eleven days is the point. It leaves a full week to catch anything the last deploy broke, plus a buffer for promo builds that always run late. Shipping a feature on November 20 means debugging it on November 27.
What the freeze covers:
- Theme and storefront code: Liquid, Stencil, headless front-end, custom scripts
- Apps: no installs, no uninstalls, no plan changes, and pinned versions where your vendor allows it
- Checkout: payment methods, checkout extensions, shipping and tax rules
- Tracking: GTM containers, pixels, consent settings
- Integrations: ERP, OMS, 3PL and inventory sync
What it doesn't cover: product launches, collection sorting, banners, discount codes and emails. Those are content. Build them before the freeze, schedule them, and test them on a preview.
The weeks-out timeline
Dates assume Black Friday on November 27, 2026.
Now through November 1 (five to four weeks out)
- Run a speed baseline on your home, collection, product and cart pages
- Audit every app and third-party script; remove what you don't use
- Place test orders through every payment method you offer
- Check email authentication (SPF, DKIM, DMARC) on every sending domain
- Start warming any new sending domain or IP now, not in November
November 2 to November 15 (four to two weeks out)
- Ship the speed and checkout fixes from the audit
- Load your promo logic: discount codes, automatic discounts, gift-with-purchase rules, free-shipping thresholds
- Review fraud rules and decide who approves flagged orders over the holiday
- Build and QA the Cyber Week email and SMS calendar
- Confirm inventory sync and shipping cutoff dates with your 3PL
November 16: code freeze
- Last deploy goes out the week before, not on the 16th itself
- Tag the theme version that is live so you can roll back to it in one step
November 16 to November 25 (the freeze week)
- Full QA on staging and production: every promo, every payment method, mobile and desktop
- Dry-run your promo schedule with preview links
- Write the on-call list: who owns the site, the checkout, email, ads and customer service, with phone numbers
November 26 to November 30 (Thanksgiving through Cyber Monday)
- Watch conversion rate, checkout errors and payment declines hourly, not daily
- Keep one developer reachable for rollback only
December 1: unfreeze and write it down
- Note what broke, what slowed down and what customers complained about. That list is next year's October backlog.
How fast does your store need to be for BFCM?
Your key templates should pass Google's Core Web Vitals on mobile: Largest Contentful Paint within 2.5 seconds, Interaction to Next Paint of 200 milliseconds or less, and Cumulative Layout Shift of 0.1 or less, measured at the 75th percentile of real visits. Start with product and collection pages, because that is where holiday paid traffic lands.
Mobile is where this matters most. Adobe expects mobile to carry 57.4% of all online holiday spend and a record 63% on Thanksgiving.
Timing matters too. PageSpeed Insights field data covers the previous 28 days of real visits, so a fix shipped in late October will barely register in field data before Black Friday, and a fix shipped after the freeze won't ship at all. Do the work now.
The usual culprits, in the order we check them:
- Third-party scripts: review widgets, chat, popups, heatmaps and duplicate pixels that block the main thread
- Images: oversized hero and product images served without sized variants
- App leftovers: code snippets from uninstalled apps that still load on every page
- Holiday additions: countdown timers, announcement bars and promo popups added for Cyber Week. Test those, too. They are new scripts.
Our Speed Pass is a fixed-scope site speed engagement with a 2–3 week timeline, which fits before the November 16 freeze if it starts this month.
What should you test in checkout before Black Friday?
Place real test orders through every payment method on mobile and desktop: cards, Shop Pay or your platform's wallet, Apple Pay, Google Pay, PayPal and any buy now, pay later option. Then test every discount you plan to run, alone and stacked, and confirm the order lands correctly in your OMS or ERP.
Don't skip BNPL. Adobe expects buy now, pay later to drive $21.3 billion in November and December spending, with $1.09 billion on Cyber Monday alone and 82% of BNPL spend coming from mobile. If your BNPL messaging on product pages is broken or your BNPL option fails at checkout on a phone, you will not see it in a desktop QA pass.
The checkout checklist:
- Discount stacking rules behave as written, including the combinations you didn't plan for
- Free-shipping thresholds update the cart correctly when a discount drops the subtotal
- Shipping rates and holiday delivery cutoff messaging are accurate
- Gift cards apply and redeem
- Tax calculates correctly for your top states
- Order confirmation emails send, and order data reaches fulfillment
- Any checkout extensions or post-purchase upsells still render on mobile
How do you prepare for fraud during BFCM?
Decide your fraud rules and your review owner before the freeze. Holiday volume raises both real orders and fraudulent ones, and the cost of a bad rule cuts both ways: too loose and you ship to stolen cards; too strict and you cancel good customers on the biggest days of the year.
Before November 16:
- Review your rules: look at last year's chargebacks and flagged orders, and check whether your current thresholds would have caught them
- Name an approver: someone has to review held orders over the holiday weekend, and it should not be whoever happens to check email
- Set a review SLA: a flagged order that sits until Tuesday is a customer who bought somewhere else
- Watch for card testing: bursts of small orders or failed payments from new accounts are a signal to tighten bot protection on checkout
- Know your platform's tools: Shopify has built-in fraud analysis on orders, and BigCommerce stores often add a fraud-screening app. Confirm yours is on and configured, not just installed
Promo abuse is the quieter problem. Single-use codes that leak to coupon sites, and "first order" discounts that the same customer claims with five emails, cost margin without showing up as chargebacks. Set usage limits on every code before it goes out.
How should you prepare email and SMS for Cyber Week?
Lock your email and SMS calendar and confirm deliverability before the freeze. Gmail requires bulk senders to authenticate with SPF, DKIM and DMARC, support one-click unsubscribe, and keep spam rates below 0.30%. A spam complaint spike during Cyber Week can push your best-performing sends into spam folders right when they matter.
The email and SMS checklist:
- Authentication: SPF, DKIM and DMARC pass on every sending domain in Klaviyo or whichever platform you use
- List hygiene: suppress long-unengaged subscribers before your big sends; mailing them raises complaint rates
- Send volume: ramp frequency through November instead of jumping from weekly to daily on Black Friday
- SMS consent: confirm every SMS recipient opted in, and respect quiet hours in Attentive, Klaviyo or your SMS tool
- Flows: check that welcome, browse abandonment, cart abandonment and post-purchase flows still fire with holiday promo codes
- Links: click every link in every scheduled send; a promo email pointing to an expired collection URL wastes the send
Adobe also expects AI-referred traffic to U.S. retail sites to rise 130% year over year this season. Those visitors land on product pages, not on your homepage hero, so check that your product page copy, prices and stock status are accurate and readable in raw HTML.
If your list needs work, our email and SMS team can audit flows and deliverability now, while there is still time to fix them.
What should you stop doing until December?
Stop installing apps, redesigning templates and launching new integrations. Each is a change you can't fully QA under holiday traffic. Put the ideas in a backlog with a December 1 start date and ship them when traffic returns to normal.
That includes "small" changes. A new review widget, a swapped popup tool or a pixel update can each slow a page or break a cart, and the person who made the change will be on vacation when it surfaces.
Who should be on call over Thanksgiving weekend?
Someone who can roll back your theme, someone who can pause a promo or campaign, and someone who can answer customers. Write their names and phone numbers down before November 16, and agree on what counts as an emergency: checkout down, payments failing, prices wrong or inventory overselling.
DYODE's Ongoing Maintenance retainers cover this kind of work: monthly development hours for pre-freeze fixes, plus monitoring of performance and uptime. If you don't have a developer who knows your codebase, find one before the freeze, not during it.
Where to start this week
Run a free store scan. It checks speed data, SEO tags, AI crawler access and accessibility on your home, collection and product pages, and shows the fix for each issue. That gives you a list to work through before November 16.
If the list is longer than your team can finish in three weeks, tell us what you're working on and we'll help you decide what to fix now and what can wait until December.
About DYODE. Founded in 2016 by former heads of E-Commerce at PacSun and Tilly’s. Shopify Premier Partner.
Add DYODE as a preferred source on Google
Google shows you more from the sources you pick.
