HubSpot forces TLS 1.2 on legacy domain settings from 14 October
EditorialBy TrustList Editorial
Only accounts that once chose TLS 1.0 or 1.1 for HubSpot-hosted domains are touched. HubSpot dropped those protocols in its own app in March 2021 and expects no visible impact.
- Cybersecurity
- CRM Software
- Marketing Automation
About HubSpot forces TLS 1.2 on legacy domain settings from 14 October
HubSpot forces TLS 1.2 on legacy domain settings from 14 October
6 October 2026: HubSpot will automatically raise the minimum TLS version on HubSpot-hosted domains from TLS 1.0 or 1.1 to TLS 1.2 on 14 October. It announced the change in its developer changelog on 6 October, and says customers need take no action.
Not yet independently verified. Single source: HubSpot's developer changelog. HubSpot says no customer action is needed; we have not tested the change. We will update this when it can be confirmed, and remove this note.
The update affects only accounts that previously set a minimum of TLS 1.0 or 1.1 in their domain security settings. New accounts already default to TLS 1.2 and are not affected. HubSpot gives the reason as the age of the protocols: it calls TLS 1.0 and 1.1 deprecated and insecure by modern standards, and notes that no major browser supports them any more.
The change follows an earlier tightening. According to the company, it removed support for the two old protocols in the HubSpot app itself in March 2021, and removed the option to configure them for new accounts earlier this year. The October update brings legacy domain configurations into line with how every new account already works.
HubSpot says it does not expect any noticeable impact on site visitors or traffic. That is consistent with the browser position, since current browsers negotiate TLS 1.2 or newer. The visitors who could notice are those on very old software or embedded devices that can only speak TLS 1.0 or 1.1, because they will no longer be able to connect to the affected domains. Administrators who know that such clients visit their HubSpot-hosted pages, for example a kiosk or a legacy integration that calls a landing page, can test them before the 14th.
The company points to its knowledge base for the TLS domain security settings. Questions go to the developer forums.
Company profile on TrustList: HubSpot
Sources
Categories & features
- Cybersecurity
- CRM Software
- Marketing Automation
TrustList Weekly
The week in software and IT, in one email
The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.
More on TrustList
Everything here links back to the same verified catalogue. Pick your next stop.
- More CybersecurityThe ranking for this subject
- CompaniesAgencies, consultancies and IT service providers, ranked by verified reviews.
- ProductsSoftware and SaaS with pricing, features, integrations and alternatives.
- AwardsAnnual recognition decided by verified reviews and an independent jury.
- LaunchesNew products and releases, voted up by the community every day.
- AI ModelsBenchmark scores and community ratings for every major model.
- RequestsBuyers describe what they need; vendors respond directly.
- PeopleReviewers, authors and makers with public profiles.
- ComparePut up to four listings side by side before you shortlist.