Control audience access to pages

Last updated: November 13, 2018

Marketing Hub Enterprise

Applies to:

Marketing Hub

HubSpot users with Publish permissions can control audience access for HubSpot-hosted pages with the CMS membership feature. With this feature enabled, contacts from selected HubSpot lists will be required to enter a password before viewing your page content.

Please note:
  • The CMS membership feature doesn't encrypt your content and shouldn't be used in place of user accounts or to hide sensitive data.
  • Password-protected pages won't be crawled by search engines. If you've recently restricted access to content that was previously publicly accessible and indexed, it may take search engines some time to de-index the page, but it will still only be accessible to those who have been granted access.

You can enable CMS membership for an individual page or multiple pages in bulk from your pages dashboard. The feature can also be managed or enabled in the Settings tab in the content editor. Only pages with this feature enabled will require a password. If you have links to other HubSpot pages on your password-protected content, those pages still will be accessible unless they also have CMS membership enabled.

Pages with CMS membership enabled are labeled on your pages dashboard, and you can see complete information on the page details screen. To see whether a contact has access to private content, you can review the List membership and access to private content card on their contact record.

Enable CMS membership for pages

  • In your HubSpot account, navigate to landing pages or website pages.
    • To control audience access for a single page, hover over the page you want to restrict access to, then click the More dropdown menu and select Control audience access.

    • To control audience access for multiple pages in bulk, select the checkboxes next to the pages you want to limit access to, then click Control audience access.


  • In the dialog box, choose the privacy setting for your content:
    • Public: this is the default setting. Anyone will be able to view your content once it's published.
    • Private - Password required: access to your page will be restricted to visitors with a password. Select this option, then set a password that anyone can use to view your content.

    • Private - Registration required: access to your page will be restricted to registered contacts. Select this option, then click the dropdown menu and select the checkbox to select the list(s) of contacts you want to give access to this content. Contacts in these lists will receive an automated registration email prompting them to create a password they can use to see this content. The template for the registration email is automatically generated.

      Please note: if contacts aren't receiving your registration email, they should add (the domain your private page is hosted on) to their address book or whitelist your sending IP addresses. Then you can resend the registration email from the contact record.

  • Click Save or, if you've selected Private - Registration Required, click Save and send email to send the registration email to your contacts.

Contacts will be prompted to register and log in when they visit a restricted page URL. After logging in successfully, HubSpot adds a cookie to the visitor's web browser, and they won't be prompted to log in again.

Please note: if you want to give visitors the option to log out, you can append the following to your page URL: http://<domain>/_hcms/mem/logout

These settings can also be viewed and edited in the content editor for an individual page. Click the Settings tab, then click to expand the Advanced Settings section to view or modify these settings.

control-audience-access-editorAfter you've restricted access to a page, you can see how access is restricted on the page details.

  • On your pages dashboard, you'll see whether a page requires a password or registration next to the page name. Click the name of a page to see its complete details.
  • On the page details screen, you'll see a label at the top of the page indicating whether the page is private and requires a password or registration. If the page requires registration, you can click View details to see which lists have access.



See which private pages a contact has access to

  • In your HubSpot account, navigate to Contacts > Contacts.
  • Click the name of a contact.
  • On the contact record, there's a List membership and access to private content card that tells you whether the contact has access to private content.
  • Click Manage list memberships and access to see which lists the contact is a member of, and how many private pages they have access to.


  • You can see exactly what content a contact has access to on the list details.
  • Hover over a list and click Details to see if it's used by any other tools in HubSpot. In the right pane, you'll see Audience access and the number of private pages this list has permission to access.
  • Click Audience access to see the names of the private page(s).


If a contact tries to a view a page they don't have permission to see, they'll see a simple message stating they don't have access to this page.


The page will also include a link to email an administrator in your HubSpot account, and a link at the top to return to the previous page they were viewing on your website.

Please note: at this time the content on this page can't be edited.

Manage a contact's registration password

You can manage a contact's password for their registration directly from the contact record.

  • In your HubSpot account, navigate to Contacts > Contacts.
  • Click the name of a contact.
  • On the contact record, locate the List membership and access to private content card and click Manage list memberships and access.
  • Click the Manage registration dropdown menu.
    • If your contact didn't receive the original email due to an issue with email deliverability, select Resend registration email to resend the registration email.
    • If your contact has already registered, but forgot their login password, select Reset password to send a password reset email to the contact. Contacts can also click Forgot your password? on the login page to reset their password themselves.


Please note: the email templates for automated registration emails can't be customized.