Skip to content
TrustList
News

HubSpot forces TLS 1.2 on legacy domain settings from 14 October

Editorial

By TrustList Editorial

Only accounts that once chose TLS 1.0 or 1.1 for HubSpot-hosted domains are touched. HubSpot dropped those protocols in its own app in March 2021 and expects no visible impact.

About HubSpot forces TLS 1.2 on legacy domain settings from 14 October

HubSpot forces TLS 1.2 on legacy domain settings from 14 October

6 October 2026: HubSpot will automatically raise the minimum TLS version on HubSpot-hosted domains from TLS 1.0 or 1.1 to TLS 1.2 on 14 October. It announced the change in its developer changelog on 6 October, and says customers need take no action.

Not yet independently verified. Single source: HubSpot's developer changelog. HubSpot says no customer action is needed; we have not tested the change. We will update this when it can be confirmed, and remove this note.

The update affects only accounts that previously set a minimum of TLS 1.0 or 1.1 in their domain security settings. New accounts already default to TLS 1.2 and are not affected. HubSpot gives the reason as the age of the protocols: it calls TLS 1.0 and 1.1 deprecated and insecure by modern standards, and notes that no major browser supports them any more.

The change follows an earlier tightening. According to the company, it removed support for the two old protocols in the HubSpot app itself in March 2021, and removed the option to configure them for new accounts earlier this year. The October update brings legacy domain configurations into line with how every new account already works.

HubSpot says it does not expect any noticeable impact on site visitors or traffic. That is consistent with the browser position, since current browsers negotiate TLS 1.2 or newer. The visitors who could notice are those on very old software or embedded devices that can only speak TLS 1.0 or 1.1, because they will no longer be able to connect to the affected domains. Administrators who know that such clients visit their HubSpot-hosted pages, for example a kiosk or a legacy integration that calls a landing page, can test them before the 14th.

The company points to its knowledge base for the TLS domain security settings. Questions go to the developer forums.

Company profile on TrustList: HubSpot

Sources

Categories & features

TrustList Weekly

The week in software and IT, in one email

The news that matters to buyers, new rankings and our own research. Every Thursday, free, and easy to leave.

We will email you to confirm. Unsubscribe with one click in any issue. Privacy policy