Account security and passwords (2024)

Last updated: February 28, 2024

HubSpot offers many ways to secure your account. From password security to best login practices, learn about your options for keeping your HubSpot account safe.

Passwords

Learn how to reset your password, HubSpot's automatic password resets, and how HubSpot prevents leaked passwords from being used in your account.

Please note:

Reset your HubSpot account password

If you need to reset your password, clickForgotmy password on the login page and follow the steps to reset your password. Learn more aboutresetting your password in HubSpot.If you still aren't able to log in after resetting your password, follow these troubleshooting stepsto resolve the issue.

Proactive password resets

For security reasons, HubSpot checks your password against publicly leaked passwords. When the password you're using matches a password that has been publicly leaked, HubSpot will prevent you from logging in, then send you a password reset email. This protects your account from bad actors who have access to publicly leaked passwords.

When you receive the email, click Visit your HubSpot account and update your password at the bottom of the email and continue to update your password. Once your password is updated, you should be able to log into your HubSpot account.

Password creation for new accounts

When creating a password for a new HubSpot account, HubSpot will check the password against publicly leaked passwords. If HubSpot detects a match to a leaked password, you'll see the following error message: Please choose a different password. This has been identified as a risky password.

To protect your account, HubSpot won't allow you to use this password, as it's a commonly known password on the internet. This doesn't mean that any of your other internet accounts have been compromised, but it's recommended that you change this password if you're using it elsewhere.

Failed password login attempts

After 10 consecutive failed login attempts, HubSpot will send a password reset email to your user email. Learn more aboutresetting your password in HubSpot.

Improving password security

For better HubSpot account security, consider the following:

Use a password manager, includingpassword generators/managers in your browser (e.g., Chrome, Safari). To learn more about why a password manager may be helpful, check out HubSpot's blog post about keeping your online data secure.
Use a unique password for your HubSpot account. Having a unique password for HubSpot increases account security in the event that one of your passwords is breached.

Two-factor authentication

Two-factor authentication (2FA) adds an extra layer of security to your HubSpot account. With 2FA enabled, you will be asked to confirm your login on your mobile device. Because a physical device is required to confirm your login, it greatly lowers the risk of an intruder gaining access to your account.

If you are a super admin or have permissions to edit account defaults,you can require two-factor authentication for all users in the account.

Learn how to set up two-factor authentication.

Single sign-on (Enterprise only)

Single sign-on (SSO) is a feature available for Enterprise accounts that allows you to integrate your existing SSO for logging in to HubSpot. With SSO enabled, you will be asked to confirm your login with a login confirmation email or through using two-factor authentication.

Learn how to set up single sign-on with HubSpot.

Login confirmation

HubSpot offers an array of automatic security measures for your account, including detecting login attempts from new browsers or devices. Super admins can limit HubSpot account access to trusted IP addresses. When HubSpot doesn't recognize the browser or device that you're logging in from, you'll be prompted to confirm your identity through an emailed verification code. You'll also see this confirmation when logging in after clearing your browser cookies.

This confirmation is separate from one you'd receive when logging in with two-factor authentication. Once you confirm your login, you can continue to use HubSpot as normal.

To confirm your login:

After entering your login credentials, you'll be redirected to a page that will prompt you for a verification code.
Access the email inbox associated with your HubSpot account to retrieve the verification code. HubSpot support cannot provide this code for you.
On the verification page, enter thecode, and clickLog in.

If you're asked to confirm your login often, consider enabling two-factor authentication. With 2FA enabled, you can verify your login with your mobile device instead of email. You'll then have the option to prevent login confirmations for 30 days by selecting Don't ask me again on this computerwhen logging in.

If you don't receive a login confirmation code in your inbox, try the following troubleshooting steps:

Check your spam or junk folders to see if your email provider filtered them out of your main inbox.
If the email isn't in your spam or junk folder, ensure that your inbox is set up to accept emails from HubSpot.

If you no longer have access to your email inbox, or the email address is no longer valid, you'll need to work with your team to add a new user for your current email address.

More resources

For more information on HubSpot account security, check out the resources below:

Learn more about HubSpot's security practices.
Learn more about keeping your online data secure, in HubSpot and beyond.

FAQs

Account security and passwords? ›

Remember the phrase “long and strong.” Good passwords have a minimum of 12 characters and a mix of upper and lowercase letters, numbers, and symbols. Avoid using consecutive characters such as “1234” or recurring characters such as “zzzz”.

Discover More Details ›

Where can I see all my saved passwords? ›

On your Android device, open Chrome .
At the top right, tap More .
Tap Settings. Password Manager.
Show, edit, delete, or export a password:. Show: Tap the password that you want to show Show password . Edit: Tap the password that you want to change and tap Edit. Edit your password, then tap Done.

Read The Full Story ›

Where do I find my accounts and passwords on my phone? ›

How to see saved passwords on an Android device

On your Samsung settings app, go to General management.
Select Passwords and autofill.
Choose which password manager you want to open: Google or Samsung Pass. ...
Tap on the icon or name of the account and view the saved password.

More items...

Mar 27, 2024

How do I check security on my phone? ›

Find your security & privacy settings

On your phone with Android 13 and up: Tap Settings. Security and privacy.
On your phone with Android 12 and lower: For security settings: Tap Settings. Security for security settings. For privacy settings: Tap Settings. Privacy for privacy settings.

Discover More ›

How do I find my Google Account name and password? ›

If you've forgotten your Google Account password, you can try to recover it through the Google website. On your phone or computer web browser, go to www.google.com/accounts/recovery. Follow the instructions on the screen to reset your password. Was this information helpful?

Discover More ›

Should you give out your password? ›

You must never share your security credentials

For this reason, it is important to know that when you share your password with another person, you are allowing them to identify themselves in the digital world as if they were you. You are handing over your digital identity.

Why you should never save passwords on your device? ›

While storing passwords in your browser has its advantages, it also comes with some serious security risks. The most significant risk is that if someone gains access to your computer or mobile device, they can easily access all your saved passwords.

Get More Info ›

What is the most common method hackers use to steal passwords? ›

Phishing

Over 70% of all cybercrimes begin with a phishing or spear-phishing attack. Hackers love to use phishing techniques to steal user credentials, either for their own use, or more commonly to sell to criminals on the dark net.

Learn More ›

How can you tell if your accounts or passwords have ever been hacked? ›

Use Avast Hack Check to see what accounts have been compromised. If you find any, change their passwords immediately — use our password generator for the best results. Get Avast BreachGuard to monitor your personal data around the clock for potential data breaches, plus more.

Tell Me More ›

Where are Google Chrome passwords stored? ›

“Your Google Chrome password file is located on your computer at C:\Users\$username\AppData\Local\Google\Chrome\User Data\Default\Login Data.”

How to find saved passwords in Safari? ›

View saved passwords and passkeys in Safari

Open Safari.
From the Safari menu, choose Settings (or Preferences), then click Passwords.
Sign in with Touch ID, or enter your user account password.
Select a website, then click the Show Details button . To delete a password, click Delete Password.

Nov 17, 2023

See Details ›

Where do I store all my passwords? ›

There is no better way to keep your passwords safe than to use a password manager, like Bitwarden. A good password manager should do more than store passwords, such as generate strong passwords and monitor data breaches for compromised passwords.

Find Out More ›