HubSpot Enforces TLS 1.2 on Legacy Domains Starting October 14
HubSpot announced on October 6, 2026, that it will automatically raise the minimum TLS version for HubSpot-hosted domains from TLS 1.0 or 1.1 to TLS 1.2 on October 14, 2026. The HubSpot administrator notice says the change affects accounts that previously configured a lower TLS minimum, while new accounts already use TLS 1.2. The same change is also recorded in an independent HubSpot changelog entry. (community.hubspot.com)
Legacy Domain Configurations Will Move to TLS 1.2
The automatic update applies to HubSpot-hosted domains with a saved minimum TLS version of 1.0 or 1.1. HubSpot says TLS 1.0 and 1.1 are deprecated protocols and that the update will bring older domain configurations in line with the TLS 1.2 default used for new accounts.
No DNS change, migration, or manual update is required. HubSpot expects no noticeable effect on site visitors or traffic, and the announcement does not introduce changes to CRM records, workflows, APIs, app authentication, or other HubSpot platform features. (community.hubspot.com)
Where Administrators Can Check the Setting
Administrators can review the TLS configuration for each connected subdomain under Content > Domains & URLs. HubSpot documents the setting in its SSL and domain security controls, where the TLS version appears under Actions > Update domain security settings. The relevant accounts are those still showing TLS 1.0 or 1.1 as the minimum version. (knowledge.hubspot.com)
