Sunset of the hs-membership-csrf cookie

What is it?

This cookie protects logins to HubSpot-gated content, including private pages, customer portals, and membership sites. On August 21, 2026, HubSpot sunset 'hs-membership-csrf' and replaced it with '__Host-hs-membership-csrf' to strengthen login security.

Why does it matter?

HubSpot no longer issues the old cookie. If your consent platform only allows the old name, it may block the new cookie when visitors decline non-essential cookies. Those visitors cannot log in and see "An unexpected error occurred."

How does it work?

Action required: Add '__Host-hs-membership-csrf' to your consent platform's essential-cookie allowlist.

See Cookies set in your visitor's browser by HubSpot for more information.

Who gets it?

Content Hub Enterprise, Service Hub Professional, Service Hub Enterprise, Content Hub Professional

New Guidelines UI for Customer Agent

What is it? The guidelines interface for customer agent has been redesigned with a card-based layout that supports multiple guidelines per category, audience segment targeting, and preset starting..

29 Sep 2026

[Opt-in] New Help Desk Composer Experience

What is it? Support reps in help desk now have access to a streamlined, modern reply editor with a refreshed layout, less clutter, and advanced formatting options. Why does it matter? Reps working in..