---
title: Connect for HubSpot
slug: cms-11/dev-docs/connect-for-hubspot
docTags: 
createdAt: 2026-07-22T19:45:18.000Z
---

## Prerequisites

- An Optimizely Content Management System (CMS) installation with Optimizely Forms and the required Marketing Automation connector components. See [Optimizely Connect for Marketing Automation](docId\:V1RAjPIyOupABDcYTiJqi).

## Install

Install the **Connect for HubSpot MA connector** through the NuGet package [EPiServer.MarketingAutomationIntegration.HubSpot](http://nuget.episerver.com/en/OtherPages/Package/?packageId=EPiServer.MarketingAutomationIntegration.HubSpot). See [Add-ons platform compatibility](docId\:bXYbY3IauDz9fts3sKR_c) for supported Optimizely versions.

## Configure

To configure your Optimizely website to use HubSpot, you need a HubSpot license that provides you with a username, password, and company name. Configure the connection to send data from the form fields to HubSpot.

These configurations are described in [HubSpot connector](docId\:WfQIRJEP4ejsCCQKhT3mx) in the Optimizely User Guide.

See also the documentation video: [Personalization with HubSpot](https://optimizely.wistia.com/embed/iframe/4ahpgqfsce?videoFoam=true)

## Encrypt credentials

Credentials are encrypted and saved based on one of the following options:

- `MAICryptoKey` (AES encryption with a SHA256-computer hash based on the value of the key)
- `machineKey` of the server in `web.config`.

:::hint{type="info"}
**Note**
For DXP instances, use `MAICryptoKey`.
:::

If you choose to use  `machineKey` configuration, you should specify a  `machineKey` in the `web.config` of your site so that the same machine key is used on the new server when you deploy it to a different server.

:::hint{type="info"}
**Note**
If you neglect to specify a `machineKey` in the `web.config`, the credentials are removed when the site on the new server is accessed for the first time, in which case you need to save credentials again through the configuration screen.
:::

If the credentials are already encrypted using `machineKey` in an existing site, and you add the `MAICryptoKey` setting, then the credentials are deleted, and you must re-enter them.

Similarly, if the encryption uses `MAICryptoKey` first and then you decide to use  `machineKey` encryption (by deleting the `MAICryptoKey` setting), then the credentials are deleted and must be re-entered.

**Related blog post**: [Creating multiple instances of the same connector](https://world.optimizely.com/blogs/jason-masterson/dates/2018/7/episerver-marketing-connectors---multiple-instances/) by Jason Masterson.