HubSpot Login: Sign In, Reset Password and Fix Errors
The HubSpot login page lives at app.hubspot.com/login. You type your work email there, press Continue, and HubSpot shows the sign-in methods your HubSpot account allows. That can be a password, a passkey, Google, Microso
The HubSpot login page lives at app.hubspot.com/login. You type your work email there, press Continue, and HubSpot shows the sign-in methods your HubSpot account allows. That can be a password, a passkey, Google, Microsoft, Apple, ChatGPT, a magic link or SSO. Most failed attempts come from picking a method your admin has switched off.
This guide walks through each option on the screen, then covers passwords, 2FA codes, lockouts and the errors people hit most. A HubSpot login can fail for reasons that have nothing to do with your password. Facts come from HubSpot's own login screens and help pages, read in November 2026. We are not affiliated with HubSpot. BillionVerify is an email verification service, and near the end we explain why a clean contact list matters once you are inside. If you are new to the product, start with our HubSpot overview.
Key facts (checked November 2026):
- The HubSpot login page is app.hubspot.com/login, and HubSpot picks the matching methods from the email you enter, per HubSpot's guide to logging in.
- HubSpot password reset links last a full day, and a newer reset email cancels the older link.
- Single sign-on in HubSpot is limited to the Professional and Enterprise tiers.
- HubSpot requires 2FA on every paid account, from Starter upward, and it can't be turned off.
- Support can't switch off 2FA for you; a reset after a lost device needs 48 to 72 hours at minimum.
- HubSpot lists a 5% monthly share of hard bounces among its limits for suspending marketing email, per HubSpot's list of sending limits.
Where to Find the HubSpot Login Page
The official address also appears in HubSpot's login help article on the subject. The hubspot.com homepage links to it from the top menu, and both lead to the same account system. The page is plain on purpose. You see the logo, the heading Sign in, a line that says "or create an account", an Email field and a Continue button.
Screenshot: the first step of the HubSpot sign-in.
The Continue button stays grey until you type something in the field. Under it sits a Get a demo button, which is a sales offer and not part of signing in. The footer holds a privacy policy link and cookie settings.
Typing the address yourself
Many people search for hubspot com login or app hubspot login, and these all end up on one page. Some reach it with a prefix such as www, which is not a separate site. If a result shows a different domain, close it. Save app.hubspot.com once as a bookmark and open it from there.
Accounts in the EU data center
HubSpot hosts accounts in one of five regions: the European Union (Germany), the United States East (Virginia) and West (Oregon), Canada (Montreal) and Australia (Sydney). Your region shows under Privacy & Consent, on the Data Hosting tab, inside the HubSpot account. HubSpot's hosting FAQ does not say that the login address differs by region. When we opened app-eu1.hubspot.com/login in November 2026, it showed the same page.
What the HubSpot Sign In Screen Offers
HubSpot runs the login in two steps. First you give your email. Then HubSpot looks at that address and the rules your admin set, and it shows the matching options. HubSpot's help center puts it this way: "HubSpot determines the correct login screen based on your email address." So the HubSpot sign-in can look different for two colleagues on the same page.
Screenshot: the second step, after an email address is entered.
The screenshot shows what an address with no restrictions gets: eight buttons and a Remember me checkbox that is ticked by default. Your HubSpot account may show fewer. Pick the button your team normally uses.
Password
Pick Sign in with password and a Password field appears, with an eye icon to show what you type and a link to reset it under the field. This is the classic route. Accounts with 2FA get a second prompt after it.
Google, Microsoft and Apple
These three buttons hand the check to another company. You approve the request in a pop-up window, and HubSpot lets you in when the email matches. HubSpot's articles name Google and Microsoft as the two options an admin can allow when a company uses Google Workspace or Microsoft accounts. If a button is missing, your admin has probably limited the account.
Passkey
Sign in with passkey uses a fingerprint, Face ID or a device PIN. The next section explains how to set one up. On the first screen, submit your email, press Next and choose the passkey button.
Magic link and ChatGPT
The screen also lists Sign in with a magic link and Sign in with ChatGPT. HubSpot's page on logging in lists ChatGPT among its methods. We found no step-by-step help page for that button on a HubSpot account, so read the prompts on screen, and check your spam folder if a link email is slow.
Single sign-on
The last button, Sign in with SSO, sends you to your company's identity provider. An SSO login only works for domains an admin has connected. Pressing it for an email without any SSO connection leads to an error, which we show further down.
HubSpot Login With SSO
SSO lets a single company identity open many tools. HubSpot offers it on the two higher tiers, including trials of them, and only a Super Admin can set it up or edit it. In practice an IT administrator does the work. HubSpot's SSO setup guide covers Okta, OneLogin, Microsoft Entra ID (formerly Azure AD) and Google, and a linked guide covers Active Directory Federation Services. An account can hold more than one SSO configuration.
Once it is verified, users open the /login/sso path on the same domain and type their email. HubSpot finds the configuration and redirects them to the identity provider. A Log in with SSO button also appears when someone opens a direct link to the HubSpot account. Two side effects matter. People who must use an SSO login can't use passkeys, and the login article adds that an SSO login session ends after 24 hours of inactivity.
Setting Up a Passkey
A passkey replaces the password with a key pair that your device, browser or password manager creates. HubSpot does not store it. That also means HubSpot can't give it back if you lose it.
Here is how to create one, following HubSpot's passkey article:
- Click the settings icon in the top navigation bar.
- Open General, then the Security tab.
- Click Set up passkeys.
- Confirm the prompt on the device or in the password manager.
Passkeys can only be created on a desktop computer, not in the mobile app, although you can use one to sign in on iOS and Android. A user may hold one passkey for each authenticator type. If you work on several devices, use Add another passkey on the same page. Passkeys saved in one ecosystem, such as iCloud Keychain, sync across that ecosystem's devices.
Lost passkey
Start with the recovery process of the service that stores the passkey, such as Apple account recovery. If you also use 2FA, press Try another method on the passkey prompt, sign in with the code, then remove the old key under General, Security. With neither, press Lost your passkey? and finish an identity check with Persona on the device you normally use. HubSpot warns that account recovery can take a few days.
Resetting a Forgotten HubSpot Password
A reset only matters for accounts that sign in with a password. If you use Google, Microsoft or SSO, change the secret at that provider instead. Steps are in HubSpot's password reset article.
Screenshot: the reset form that opens from the login screen.
From the sign-in page
- Type your email into the box and click Continue.
- Pick the password option, then Forgot password?
- Press Send reset link.
- Open the email and follow the link.
The link is valid for 24 hours. If you asked for several, use the latest, because a fresh request cancels the link in the earlier message. After a successful change, HubSpot sends a confirmation email and a text message.
While you are signed in
Click your profile picture at the top right and choose Profile & Preferences. On the Security tab, find the Password section and press Reset password. You will enter the current password and then the new one.
Reset sent by an admin
Admins, meaning Super Admins or people with the Add and edit users permission, can open Settings, then Users & Teams, and use the Actions menu on a user to send a reset message. They can't choose the password for you.
When the email does not arrive
Look in spam or junk first, then add hubspot.com to your allowlist. If the email has bounced in the past, a Super Admin can unbounce it. Two other rules are good to know. HubSpot compares passwords with public lists of leaked ones, and a match blocks the login and triggers a reset email. After 10 failed attempts in a row, it sends a reset email to the address on the user record.
Two-Factor Authentication at HubSpot
2FA adds a second proof after the first. HubSpot ranks three methods. A passkey is the most secure, an authenticator app is more secure, and a text message is the least secure. Free accounts can use passkeys and authenticator apps but not texts. Starter and higher plans get all three.
HubSpot's 2FA setup article gives the path: settings icon, General, Security, then the option to set up 2FA. Pick a method, type in the code it shows, and save the backup codes by pressing Print or Download PDF. You can then add a second method.
Who has to use it
Paid accounts have no choice. HubSpot offers no switch to disable it on any of them. Accounts on free tools decide for themselves. Enforcing it needs admin rights or the Edit account defaults permission, and a new rule starts only after a day.
Remembering a device
On each login you can choose Remember me to skip the prompt for 28 days, or Ask every time to be prompted on every visit. HubSpot adds that the mobile app method is temporarily unavailable for new setups.
Lost phone or lost codes
Backup codes work when the device is gone. A new batch cancels the old one. If you have no passkey, no second method and no codes, you must reset your 2FA methods. On the verification page press Reset authentication device, then Request admin recovery, and enter the code from the email. Your Super Admin completes the reset. If you are the only Super Admin or the account has none, a photo ID check applies instead, and HubSpot says the process takes several days. The support team cannot turn it off on a user's behalf, according to HubSpot's reset guide for 2FA.
The Email Verification Code on a New Device
Sometimes a correct password is not enough. HubSpot may ask for a code by email when you sign in from an unrecognised browser, device or location, or after you clear cookies. This is separate from 2FA codes. Support staff cannot recite it to you, so it has to come from the inbox on file. If prompts come too often, HubSpot suggests 2FA or a passkey, and you can skip confirmations for 30 days.
Fixing the "There Was a Problem Logging You In" Error
This red box is the HubSpot sign-in message people meet most. It does not say which rule blocked you, so work through the usual causes in turn.
Screenshot: the error HubSpot shows after a method that is not set up for the address.
We triggered the one above by pressing the SSO button with an email that has no SSO setup. The box says "Something went wrong. Clear your browser cache and cookies and try again." The same heading appears when an admin has limited the allowed methods, and the cause is usually one of the following.
An admin limited the methods
Admins with full rights can restrict which methods people may use: the native username and password, social logins such as Apple or Google, SSO and passkeys. The rule is under Settings, Security, then the Login tab. After an enforcement date, you can only use the allowed ones, and the setting can take up to 15 minutes to apply. Check with your admin about the button to use.
Your location or network is not allowed
Starter accounts and above can also allow logins only from set IP addresses, and admins can approve countries and, for the United States, states. Anyone outside the range is blocked, even with correct credentials, and sees the same error. A VPN is a common trigger. Try without it, or ask for an exemption.
The browser is in the way
The article on signing in also tells you to confirm the browser is supported and to wipe cached data. In Chrome, third-party cookies should be allowed under Settings, Privacy and security, Cookies and other site data. Try a different network, such as mobile data, to rule out your office firewall. Last, check status.hubspot.com for known problems.
You have no accounts
The message You have no accounts can mean the HubSpot account was deactivated. It can also mean the email is not an active user in that account, because only customers, free users or trial users can log in. A person who merely registered for a webinar or ebook has no account. HubSpot deactivates free accounts after 120 days without a login or use of its Sales extension. You then have 90 days to reactivate before the account is purged and can't be recovered.
The wrong email
If you own several addresses, pick the one that matches your HubSpot account. If the invitation went to a work email, a personal email will not match. Look for the original invite in your inbox.
Creating a HubSpot Account
Under the heading sits a sign-up link. HubSpot's get-started page states that free tools are not a trial and never expire. Teammates are usually invited by an admin instead, and the invite email starts their setup. If it is missing, check the junk folder and ask for another.
Before you register, choose the email with care. A company mailbox keeps the HubSpot account with the team when you change jobs. A personal inbox ties the CRM to one person, and recovery codes go to a mailbox you may lose.
Reviewing and Ending Sessions
Each HubSpot login from a new device, browser or app creates a session. Open Settings, then the Security tab under General, and look at the Session Management table. It lists the device, browser, IP address and last activity. Hover over a row and choose Log out to end one session, or use Log Out of All Sessions to end every one, including the current one. You can only see your own sessions.
Admin Settings That Change How People Sign In
When one colleague gets in and another does not, a HubSpot login rule is often the reason. Admins manage most of them from Settings, then Security.
| Setting | What it does | Plan note |
|---|---|---|
| Allowed login methods | Limits sign-in to chosen methods | Wizard under the Login tab |
| SSO | Sends people to the identity provider | Higher tiers |
| 2FA | Second proof at login | Required on paid accounts |
| Allowed login IPs | Blocks logins outside listed addresses | Starter and up |
| Allowed login locations | Approves countries and U.S. states | Admin rights |
| Limit users to this account | Stops people being added to other accounts | Verified domain needed |
| HubSpot employee access | Lets Support in for a day | Toggle on the Login tab |
Exempt users can be set for several of these. Review the table every quarter and when staff leave, so a former colleague can't keep a path in.
Spotting a Fake HubSpot Login Page
The HubSpot login attracts imitators, like any well-known sign-in. Fake emails say your HubSpot account is locked or about to be suspended, then send you to a lookalike page that records your password. HubSpot's documentation does not cover how to report phishing, so rely on a few habits.
Read the address bar before you type anything. A genuine HubSpot sign-in sits on a hubspot.com address, with a padlock. Open your bookmark instead of the link in a message. Keep every verification code private, because HubSpot Support can't read the code out to you either.
When an unknown sender claims to be HubSpot, our free reverse email lookup shows the domain, mail routing and any public profile for that sender. If a stranger calls or texts about your account, a phone number validator tells you whether the number is valid for its country and what line type it uses.
After You Log In: Keep the Contact List Clean
Signing in is the easy part. The next risk is what you import. HubSpot charges Marketing Hub by contact tier, and the contacts you market to count against it. Contacts set as non-marketing don't count and aren't charged. Bad emails fill a tier and then bounce.
Bounces have a firm limit. HubSpot can suspend email sending when a month's hard bounce rate passes 5%, when spam reports pass 0.1%, or when unsubscribes pass 3%, per its suspension article. Removing contacts after the damage is not enough to restore access. HubSpot's list cleanup guide covers manual steps such as segments, suppression and deletion. It does not describe a built-in tool that checks whether an address exists.
That gap is where verification helps. Run a spreadsheet through our bulk email verification before the import, or test single emails with the email verifier. Each email passes syntax, DNS, MX and SMTP checks, and catch-all addresses get their own label instead of being counted as valid.
How a BillionVerify check works before a list reaches your CRM.
Valid and invalid results cost one credit each, and unknown results are free. Every account gets 20 free credits on each day it is used, up to 600 a month, with no card needed. There is also a HubSpot integration, and our guide to BillionVerify with HubSpot shows the setup. Once your list is clean, our post on HubSpot email marketing covers sending.
Quick Checklist for a Failed HubSpot Login
Run through these in order before you open a ticket:
- Open the official address from a bookmark.
- Use the email behind the HubSpot account, and the method you used first.
- Read the error box and clear stored site data.
- Try a private window, another browser or mobile data.
- Check allowed methods, IP rules and SSO with an admin.
- Check spam for the reset link or the verification code.
- Check status.hubspot.com for a known incident.
- Gather your backup codes if 2FA is on.
FAQs
What is the correct HubSpot login URL?
The correct address is app.hubspot.com/login. The methods appear once you submit your address there.
Can I log in to HubSpot with Google?
Yes, when your account allows it. After you enter your email, press Sign in with Google and confirm the pop-up. If the button is absent, an admin has narrowed the allowed list.
Why does HubSpot say there was a problem logging me in?
The box usually means the method you picked is not allowed for that email. Other causes are an IP or location rule, a blocked cookie or a stale browser cache. Start by wiping saved browser data, then ask your admin.
How long does a HubSpot password link last?
The link stays valid for one day. Requesting another one cancels the earlier link, so open the most recent email.
Can HubSpot Support turn off 2FA for me?
No. HubSpot's support team has no way to switch it off for a user. You request a reset, and an admin or an identity check completes it, which takes a few days.
Is there a separate login for the EU?
The same FAQ lists a German data center for European accounts but does not name a separate login address. The same page loaded for us on the app-eu1 address.
Do I need a paid plan for an SSO login?
Yes. HubSpot offers SSO on its two higher subscription tiers, and an admin with full rights sets it up.
What happens to an unused free account?
A free account left unused for 120 days is deactivated, and the owner gets 90 days to bring it back before it is purged for good.
Watch: How to Validate a Phone Number: Free Phone Number Validator
Watch: Bulk Email Verification: How to Verify an Email List From a File
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.



