To manage access to your HubSpot account, you can limit logins to specific IP addresses or locations, restrict users to a single account, and manage HubSpot employee access. These settings help you improve your account's security and keep control over who can log in and view your HubSpot data.
Limit logins to trusted IP addresses
Subscription required
A Starter, Professional, or Enterprise subscription is required to limit logins to trusted IP addresses.
Permissions required
Super Admin permissions are required to limit logins to trusted IP addresses.
Limit HubSpot account access to trusted IP addresses. You can block logins from VPNs or from IPs outside your network, and restrict unauthorized access from personal or public computers and unsecured WiFi networks. Any bad actors logging in from outside your allowed IP range will be blocked even if they have proper login credentials. Learn more about the ways HubSpot helps you secure your account.
If this is your first time configuring your login settings, learn how to use the login settings wizard to restrict which login methods users can use to access the account.
Please note: limiting logins to trusted IP addresses applies to logins on both computers and mobile devices. If users log in using their mobile device outside of an allowed IP address, they will be blocked from accessing the account.
To limit logins to trusted IP addresses:
- In your HubSpot account, click the settings settings icon in the top navigation bar.
- In the left sidebar menu, under Account management, click Security.
- On the Login tab, under Account restrictions, toggle the Allowed login IPs switch on.
- In the Allowed IP Addresses section, enter the IP addresses in the text box. Use commas to separate different IP addresses or dashes to represent an IP address range.
- To exempt certain users from limited logins to allowed IPs, click the Exempt Users dropdown menu and select the checkboxes next to the users you wish to exempt.
- On the bottom left, click Save.
Limit logins to allowed locations
Subscription required
A Starter, Professional, or Enterprise subscription is required to limit logins to approved locations.
Permissions required
Super Admin permissions are required to limit logins to approved locations.
Manage HubSpot account access by approving locations that users can log in from. This helps you secure your account by ensuring only users in allowed regions can access your data. For example, you can approve specific countries or regions for your team while blocking login attempts from unauthorized areas.
To configure allowed locations:
-
In your HubSpot account, click the settings settings icon in the top navigation bar.
- In the left sidebar menu, under Account Management, click Security.
- On the Login tab, in the Allowed login locations section, click Configure.
- In the Manage approved locations panel, view the suggested locations based on your account's login history.
- To view which users are logging in from a specific location, click [number] users. This displays a list of users logging in from that location with the last date each user logged in.
- To add a new location, click Add locations.
- Click the Country dropdown menu and select the checkboxes next to each country you want to approve.
- If you’re adding a location in the United States, click the State dropdown menu and select the checkboxes next to each state you want to approve.
- At the bottom, click Add locations.
- To remove a location, hover over the location and click Remove.
- In the dialog box, click Remove location.
- To exempt certain users from these requirements, click the Exempt users dropdown menu and select the checkboxes next to the users you want to exempt.
- At the bottom, click Save changes.
If a user logs in from a location that has not been approved, they'll receive the following error message: There was a problem logging you in.
Limit user access to a single account
Permissions required
Super Admin permissions are required to limit user access to a single account.
Prevent your users from being added to other HubSpot accounts in the future. This setting will only apply to new account addition attempts. When a Super Admin turns this setting on, users won't be removed from any of their current HubSpot accounts. Instead, they will be unable to be added to any other HubSpot accounts going forward.
To prevent users from being added to other HubSpot accounts:
- Make sure you have verified your domain in HubSpot.
- In your HubSpot account, click the settings settings icon in the top navigation bar.
- In the left sidebar menu, under Account management, click Security.
- On the Login tab, under Account restrictions, toggle the Limit users to only this account switch on.
Prevent HubSpot employee access to your account
Permissions required
Super Admin permissions are required to manage HubSpot employee access to your account.
By default, HubSpot employees, such as your onboarding specialist, support specialists, and account managers, have limited access to parts of your HubSpot account to help you with HubSpot.
You can prevent HubSpot employees from accessing your account, but this will also affect their ability to help if needed. For example, if you prevent HubSpot employees from accessing your account and another user in the same account reaches out to HubSpot Support, the support specialists won't have access to the account and won’t be able to investigate the issue.
When managing HubSpot employee access to your account, please note the following:
- To manage HubSpot employee access, you must set up your portal login settings first. If not, the setting to manage HubSpot employee access to your account won't appear.
- If you require help from HubSpot, turn this setting on before requesting help.
- When this toggle is turned on, HubSpot employees will have access to your account for 24 hours.
- Turning the toggle off will prevent new employees from accessing your account. Existing employees will retain access for the next 24 hours.
To prevent HubSpot employees from accessing your account:
- In your HubSpot account, click the settings settings icon in the top navigation bar.
- In the left sidebar menu, under Account management, click Security.
- On the Login tab, under Account restrictions, toggle the Allow access to HubSpot employees switch off to prevent HubSpot employees from accessing your account for support and assistance.
- In the dialog box, click Yes.
Account Security
