Skip to content

Require member registration to access private content

Last updated: March 18, 2024

Available with any of the following subscriptions, except where noted:

Service Hub Professional, Enterprise
CMS Hub Enterprise

Users with publish permissions can control which contacts can access specific HubSpot-hosted pages, blogs and knowledge base articles. You can invite contacts from specific HubSpot lists to register with a password to view specific content. This content can only be viewed by contacts who are registered and logged in.

CMS Hub Enterprise accounts support private content for blog posts, landing pages, and website pages. Service Hub Professional and Enterprise accounts support private content for knowledge base articles. Users in accounts with any of these subscriptions can also target chatflows to chat with logged in visitors.

Understand private content limitations

  • Private content features only work for connected subdomains that you own that are the primary subdomains for their content types. Membership access won’t be activated for content published on default subdomains in your HubSpot account (e.g.,hs-sites.com) or on secondary domains. 

  • Password-protected content won't be included in search engine indexes, but sensitive data won't be encrypted. HubSpot sends a response equivalent to noindex for password-protected pages, so search engines won't include the page in the search index, but they can still crawl the URL. To stop search engines from crawling the URL, you can disallow it in your robot.txt file.
  • Passwords for private content must meet these criteria:
    • Does not contain parts of the registration username.
    • Does not contain alphabetical sequences (abcde), numerical sequences (12345), repeated characters (aaa) or qwerty sequences (qwert) from your keyboard.
    • Contains one of these character combinations: 
      • At least eight characters and three of the following: an uppercase letter, lowercase letter, a number, or a symbol.
      • At least ten characters and two of the following: an uppercase letter, lowercase letter, a number, or a symbol.
      • At least twelve characters. 
  • Passwords aren’t accessible from the UI, so it isn't possible for a user to look up a contact’s membership login password. 
  • Passwords are securely stored in HubSpot's servers according to the latest industry recommendations and standards.

Set up membership registration for pages

CMS Hub Enterprise accounts can set up membership for landing pages and websites pages. When you make a page private with registration required, a registration email is sent to contacts who are members of the selected lists so they can set up a password.

As new contacts are added to these lists in the future, they'll also receive an email to complete their password registration. The language of this email is set by your domain's primary language.

A contact may be added to a list already associated with multiple content objects on different domains. In this case, the domain for the email will be determined by the first applicable content type on this list:

  • Knowledge base article
  • Website page
  • Blog post
  • Landing page

There is a two minute delay after updating or publishing private content before the email is processed. During this delay, the email can be cancelled by unpublishing the private content or changing the content's access back to public. An individual contact won't be sent the email if they are removed from the relevant list during this period. After this delay, the email will be sent after a standard processing time of three to four minutes. 

Please note: contacts who have already set up a password to view other private content on your domain won't receive additional emails. They'll use their existing password to log in and view the private content they can access based on their list memberships.

  • Navigate to your content:

    • Website Pages: In your HubSpot account, navigate to Marketing > Website > Website Pages.
    • Landing Pages: In your HubSpot account, navigate to Marketing > Landing Pages.
  • Hover over the page and click Edit.
  • In the content editor, click the Settings menu and select Audience Access.
  • In the dialog box, select Private - Registration required.
  • Click the dropdown menu and select the checkboxes next to the lists of contacts you want to register for access to this page. 
set-audience-access-for-pages-in-hubspot
  • Click the in the top right of the dialog box to resume editing. 
  • When you are finished editing, click Publish or Update in the top right.

Contacts will be prompted to register and log in when they visit a restricted page URL. After logging in successfully, HubSpot adds a cookie to the visitor's web browser so they won't be prompted to log in again. If desired, you can send contacts a direct link to log out of private content access on your domain.

To set up membership registration for one or more pages:

  • Hover over the page and click the More dropdown menu, then select Control audience access.
  • To control audience access in bulk, select the checkboxes next to the pages, then click the More dropdown menu at the top of the table and select Control audience access.

set-audience-access-for-pages


For landing and website pages, audience access status will appear in the Audience Access column:

  • Navigate to your content:

    • Website Pages: In your HubSpot account, navigate to Marketing > Website > Website Pages.
    • Landing Pages: In your HubSpot account, navigate to Marketing > Landing Pages.
  • In the Audience access column, the page will appear as Private - Password required, Private - Registration required, or Public
  • If the Audience access column is not present: 
    • In the top right, click the Actions dropdown menu and select Edit columns
    • In the dialog box, select the Audience access checkbox on the left, then click Save

view-audience-access-for-pages

  • To view the audience access status of a specific page, on the page details screen, a label at the top of the page indicates if the page is private and requires a password or registration. If the page requires registration, click View details to see which lists that have access to the page.

see-who-can-access-a-page

Set up membership registration for your blog

CMS Hub Enterprise accounts can set up membership for blogs. The settings for your blog posts are managed within your account settings. To set up membership registration for private blog content, you must set all of the posts on your blog to private.

Making your blog's content private sends a registration email to any contacts who haven't already registered for customized content access. The language of this email is set by your domain's primary language.

There is a two minute delay after setting your content to private before the email is processed. During this delay, the email can be cancelled by unpublishing the private content or changing the content's access back to public. An individual contact won't be sent the email if they are removed from the relevant list during this period. After this delay, the email will be sent after a standard processing time of three to four minutes.

Please note: contacts who have already set up a password to view other private content on your domain won't receive additional emails. They'll use their existing password to log in and view the private content they can access based on their list memberships.

  • In your HubSpot account, click the settings settings icon in the main navigation bar.
  • In the left sidebar menu, navigate to Website > Blog
  • In the Current View section, click the first dropdown menu and select a blog.
  • In the Control audience access section, select Private - Registration required.
  • Click the Select Lists dropdown menu and select the list(s) of contacts that will have access.
control-audience-access-for-a-blog
  • Click Save to apply your changes. 

Set up membership registration for your knowledge base

Service Hub Professional and Enterprise accounts can set up membership for knowledge base articles. When you make a knowledge base article private with registration required, a registration email is sent to contacts who are members of the selected lists so they can set up a password.

As contacts are added to these lists in the future, they'll also receive an email to complete their password registration. The language of this email is set by your domain's primary language.

There is a two minute delay after setting your content to private before the email is processed. During this delay, the email can be cancelled by unpublishing the private content or changing the content's access back to public. An individual contact won't be sent the email if they are removed from the relevant list during this period. After this delay, the email will be sent after a standard processing time of three to four minutes.

Please note: contacts who have already set up a password to view other private content on your domain won't receive additional emails. They'll use their existing password to log in and view the private content they have access to on your site, based on their list memberships.

  • In your HubSpot account, navigate to Service > Knowledge Base.
  • Navigate to the Articles tab
  • Hover over the article and click Edit.
  • In the editor, click the Settings tab.
  • In the Control audience access section, select Private - Registration required.
  • Click the dropdown menu and select the checkboxes next to the lists of contacts you want to register for access to this article.
control-audience-access
  • Click Update in the upper right.

Contacts will be prompted to register and log in when they visit a restricted article URL. After logging in successfully, HubSpot adds a cookie to the visitor's web browser so they won't be prompted to log in again. If desired, you can send contacts a direct link to log out of private content access on your domain.

Please note: private articles on public knowledge bases will not appear under categories or subcategories for users who can't access them. 

To control audience access from the articles dashboard:
  • Hover over the article and click the More dropdown menu, then select Control audience access.
  • To control audience access in bulk, select the checkboxes next to the articles to limit access to, then click Control audience access at the top of the table.

    knowledge-article-control-access-bulk

The audience access appears in the dashboard below the article name.

  • In your HubSpot account, navigate to Service > Knowledge Base.
  • Navigate to the Articles tab.
  • Click the name of an article to view further details on its access restrictions.

knowledge-article-restricted

  • On the page details screen, a label at the top of the page indicates if the page is private and requires a password or registration.

Customize settings and templates

You can create custom templates for private content registration emails and pages with the following subscriptions:

  • A CMS Hub Enterprise subscription

OR

  • A Service Hub Professional/Enterprise subscription and a CMS Hub Professional subscription.

These custom templates use information provided on the Basics tab of your private content settings. 

Edit general settings for private content

  • In your HubSpot account, click the settings settings icon in the main navigation bar.
  • In the left sidebar menu, navigate to Website > Private Content.
  • Click the Choose a domain to edit dropdown menu and select the domain your private content is hosted on.
  • In the Contact Information section, enter a company name. This will appear on registration page templates.
  • In the Website admin text field, enter the email address of the user that visitors will contact if they have trouble logging in, logging out, or registering. If this field is left blank, the email address of an active super admin in the account will be used. 
  • To allow contacts to register for private content themselves, select the Allow self-registration checkbox in the Single sign-on (SSO) section. You may be prompted to set the language and wording of a Consent to process data field. 
  • To show contacts an option to send themselves an email link instead of using a password, select the Turn on password-less authentication checkbox in the Password-less authentication section. The link in this email will expire after fifteen minutes. 

Set up idle session timeouts

For enhanced security, you can automatically log out users who access your private content or customer portal after 20 minutes, 40 minutes, 60 minutes, or 24 hours of inactivity. HubSpot users must have the Website settings permission to turn on idle session timeouts. 

  • In your HubSpot account, click the settings settings icon in the main navigation bar.
  • In the left sidebar menu, navigate to Website > Private Content.
  • Click the Choose a domain to edit dropdown menu and select a domain. The idle session timeout setting must be set individually for each connected domain. 
  • In the Idle session timeout section, select the Automatically sign out inactive users checkbox. 
  • Click the Sign out users after dropdown menu and select a time period
  • In the bottom left, click Save

Customize your registration email templates

By default, your private content will have simple registration emails with the company name and logo set on the Basics tab of your private content settings. You also have the option of creating custom emails:

  • In your HubSpot account, click the settings settings icon in the main navigation bar.
  • In the left sidebar menu, navigate to Website > Private Content.
  • Click the Choose a domain to edit dropdown menu and select a domain.
  • Click the Emails tab.
  • You can edit the templates for the following emails:
    • Registration invitation email: the email sent to visitors who have been invited to access private content.
    • Password confirmation email: the email sent to visitors to confirm their new password was saved during registration or a password was reset.
    • Password reset email: the email sent to visitors when they reset their passwords.
  • Under the email you want to customize, click the Actions dropdown menu, then select Create.
  • Create a new email with the email editor.
  • After you've published your email, navigate to your private content settings.
  • Click a dropdown menu and select your new email.

registration-email-templates

Customize membership registration page templates

All accounts include simple templates for membership registration pages. To customize these page templates, developers will need to create a new HTML/HubL template in the design manager.

Developers can also allow visitors to log in using their social media credentials. Developers will need to add the membership social login module to your template, then pass your Facebook App ID and/or Google Client ID to the module. Learn more in HubSpot’s developer documentation.

Please note: your designer must select the corresponding template type when creating the new HTML/HubL template in the design manager for the template to appear in your private content settings.

customize-private-content-page-templates

To select a new custom HTML template for your private content pages:

  • In your HubSpot account, click the settings settings icon in the main navigation bar.
  • In the left sidebar menu, navigate to Website > Private Content.
  • Click the Choose a domain to edit dropdown menu and select a domain.
  • Navigate to the Pages tab.
  • You can use the dropdown menus to select a custom HTML template for the following page types:
    • Registration page: the page where invited contacts can sign up to access private content.
    • Access denied page: the page that visitors will see instead if they haven't been given access to private content.
    • Sign in page: the page where visitors sign in to access private content.
    • Sign out page: the page visitors see after they sign out.
    • Request password reset page: the page a visitor will see when they request a password reset.
    • Create new password page: the page where visitors will create a new password.

sign-in-and-out-of-private-content

  • In the Destinations section, you can direct contacts to a specific page on your site after they complete specific actions: 
    • After someone registers: the page where visitors will be redirected after they register. 
    • After someone signs in: the page visitors will view if they log in, but haven't clicked a link for a specific private page. If the visitor is signing in to view a specific password-protected page, they'll be directed to that private page instead.
    • After someone signs out the page where visitors will be redirected after they sign out. If you don't select a page from your website, contacts will see a simple default page that tells them they're signed out. 

Troubleshoot membership registration for private content

Review the private content a contact has access to

To check what private content a contact can access, review the details on their contact record.

  • In your HubSpot account, navigate to Contacts > Contacts.
  • Click the name of a contact.
  • In the List membership and access to private content section on the right, click Manage list memberships
  • Hover over a list and click Details.
  • In the right panel, click Audience access to see the names of the private page(s) that contacts on the list can access. 

lists-audience-access

Resend the registration email to a specific contact

A contact will be locked out of their account after ten unsuccessful attempts to log in. You can email contacts a link to reset their own password from the contact record.

If a contact didn't receive your registration email, advise them to add noreply@domain.com ("domain" being the subdomain your private page is hosted on) to their address book, or to add your sending IP addresses to their allowlist. Learn more about setting up automated follow-up registration emails

Please note: password reset links are valid for one use within 24 hours. The link will expire once a contact uses it, or if 24 hours have passed since the email was sent.

To send a registration email from the contact record:

  • In your HubSpot account, navigate to Contacts > Contacts.
  • Click the name of the contact.
  • In the List membership and access to private content section on the right, click Manage List memberships.
  • In the upper right, click the Manage registration dropdown menu, then select Resend registration email

Please note: a contact's registration is connected to the contact's primary email regardless of whether or not it's the email they originally registered. Once a registered contact's primary email is changed within HubSpot, they can automatically log in with that email and their previously set password. After an email is updated, you do not need to resend a registration email, and Reset password/Forgot your password? emails will be sent to the new primary email moving forward.

resend-contact-registration-email-1

Change a contact's member email

If a contact wishes to change the email they use to receive membership emails, users with the permissions to edit that contact can change this information in the Member email property.

The email address in the Member email property will receive the following membership emails:

  • Registration invitation email
  • Password confirmation email
  • Password reset email

For security reasons, it's recommended to require emails from both the contact's current Member email, as well as the email address they want to receive membership emails at moving forward.

Contact properties about private content registration

There are a few contact properties that will update automatically for contacts that are invited to register to view private content. The Membership notes property can be updated manually or with a workflow.

  • Domain to which registration email was sent: the domain to which the registration invitation email for content membership was sent.
  • Membership notes: notes relating to the contact's content membership. 
  • Registered at: the date and time when the contact set up their content membership.
  • Time registration email was sent: the date and time when the registration email was sent to the contact.
  • Time enrolled in registration follow-up emails: the date and time when the member was enrolled in automated follow-up registration emails.

Send registered contacts a direct link to your registration page

To send your contacts a direct link to the log in page for private content, add /_hcms/mem/login to the end of your page domain.

For example, for content hosted on inbound-marketing.com, the log in page URL would be: http://inbound-marketing.com/_hcms/mem/login

Please note: this link will only work for customers who have already registered with a username and password.

sign-into-private-content-in-hubspot

To direct your contacts to a log out page, add /_hcms/mem/logout to the end of your page domain.

For example, for content hosted on inbound-marketing.com, the log out page URL would be: http://inbound-marketing.com/_hcms/mem/logout

Export all membership registration activity from your account

To review all the interactions your contacts have had with your registration page and private content, you can download an activity log:

  • In your HubSpot account, click the settings settings icon in the main navigation bar.
  • In the left sidebar menu, navigate to Website > Private Content.
  • Click the Choose a domain to edit dropdown menu to select the domain your private content is hosted on.
  • Scroll down in your setting and click Download activity log.

export-private-content-activity-log

  • Click the File format dropdown menu to select a file type.
  • Click Export.

You'll receive a spreadsheet with the email address and contact ID of each contact that engaged with your private content or registration page. The file contains a log of whether each contact successfully completed their registration or logged in to view private content.

Remove access to private content

To revoke access to content from a contact, you can remove the contact from the allowed list or delete the contact.

Understand registration email deliverability

Once you set up membership registration for your website pages, blog, or knowledge base by following the instructions in the sections below, HubSpot will regularly monitor the engagement and deliverability of your registration emails.

To safeguard your sending reputation, HubSpot may flag poorly performing emails (e.g., the unsubscribe rate, hard bounce rate, or spam report rate exceeds an allowable threshold), and you may be prompted with a notification to review any impacted contact lists.

Was this article helpful?
This form is used for documentation feedback only. Learn how to get help with HubSpot.