If you’re integrating HubSpot with other platforms or automating workflows, you’ve probably wondered how to find the HubSpot API key. This small yet powerful key connects your HubSpot data to other tools and applications securely. However, since 2022, HubSpot has changed how developers access this feature which can confuse both admins and developers.
In this guide, you’ll learn how to find or generate your HubSpot API key, explore new authentication options and understand the best practices for using it safely.
Before we dive in, if you’re a HubSpot admin, you can explore how Mpire Solutions helps optimize HubSpot configurations and integrations for better automation and data flow.
What is the HubSpot API Key and Why It Matters
The HubSpot API key acts as a bridge between your HubSpot CRM and other platforms — such as marketing tools, ERPs and automation systems.
It enables developers to:
-
Send or retrieve HubSpot data programmatically.
-
Connect HubSpot with third-party apps or custom-built systems.
-
Manage workflows, contacts, forms and deals via external APIs.
However, this convenience also brings responsibility. Misusing or exposing your HubSpot API key could give outsiders direct access to your CRM data a serious security risk.
Why HubSpot Moved Away from API Keys
Until late 2022, HubSpot allowed users to generate API keys from account settings. But as of July 2022, HubSpot began deprecating API keys in favor of Private Apps with Access Tokens.
This change was made to:
-
Enhance data security and control.
-
Allow granular permissions for integrations.
-
Improve monitoring and token management.
If you’re reading older tutorials, you may still find references to API key, but the correct method now involves Private App Tokens.
Step-by-Step: How to Find HubSpot API Key (or Access Token)
Step 1: Log into HubSpot as an Admin
Only users with Super Admin permissions can create or view API credentials.
-
Sign in to your HubSpot account.
-
Click your Profile picture in the top-right corner.
-
Select Settings.
Real scenario: Many marketers without admin rights get stuck here. If you can’t see “Integrations” in settings, contact your HubSpot executive for access.
Step 2: Access API Key Settings (for older accounts)
If your account was created before 2022, you may still see the API Key option.
-
Go to Settings → Integrations → API Key.
-
Click Show Key to view your existing API key or Generate New Key if you haven’t created one before.
Copy and store this securely. Never share it over email or chat.
Step 3: Create a Private App (for newer accounts)
For accounts where API Keys are no longer available:
-
Go to Settings → Integrations → Private Apps.
-
Click Create a Private App.
-
Under Basic Info, name your app (e.g., “Marketing Data Integration”).
-
Under Scopes, choose permissions (CRM, Contacts, Forms, etc.).
-
Click Create App and copy the Access Token.
This token functions similarly to the old API key but with added security controls.
Step 4: Use Your HubSpot Access Token
Once you have your token:
-
Add it to your application header:
Authorization: Bearer your_access_token_here
-
Never hardcode it into your codebase.
-
Use environment variables or a secure vault like AWS Secrets Manager.
Step 5: Regenerate or Revoke Tokens When Needed
If your access token gets exposed:
-
Go to Private Apps in HubSpot.
-
Click the app.
-
Select Regenerate Token to invalidate the old one.
This ensures that any unauthorized access is instantly blocked.
Common Issues People Face When Finding HubSpot API Keys
Even experienced users often encounter issues while trying to access their HubSpot API key.
Here are a few common ones:
-
API key option missing: HubSpot has removed the feature for new accounts. Use a Private App instead.
-
Access denied: You might not have admin privileges. Contact your HubSpot manager.
-
Invalid token error: The access token may be expired or misconfigured. Regenerate it from your Private App.
-
Integration not syncing: Ensure the correct scopes (permissions) are assigned when creating the Private App.
Best Practices for Managing Your HubSpot API Key or Access Token
-
Use Private Apps instead of legacy API keys.
-
Assign minimum scopes to reduce security risks.
-
Rotate tokens regularly — especially in production environments.
-
Restrict access to trusted team members only.
-
Audit API usage in HubSpot settings to track integration activity.
Real-World Scenario: Marketing Team vs. Developer Confusion
A mid-sized SaaS company recently faced data-sync issues between HubSpot and its ERP. The marketing manager kept asking the developer for the HubSpot API key, unaware that HubSpot had switched to Private Apps.
After consulting an experienced HubSpot administration, they created a private app with the correct scopes for CRM, Contacts and Deals. Within minutes, their automation started working again safely and efficiently.
This example shows how clear understanding between marketing and technical teams can save hours of troubleshooting.
When to Contact a HubSpot Expert
If your integrations involve complex systems like ERPs (NetSuite, Xero, QuickBooks) or advanced automations (n8n, Zapier, Make), managing tokens and scopes can be tricky.
That’s where HubSpot consultants like Mpire Solutions help ensuring your integrations stay secure, compliant and efficient.
Book a free HubSpot integration consultation with Mpire Solutions.
Relevant Guide
How to Add a Lead Source in HubSpot: Step-by-Step Guide
How to Implement HubSpot for Faster Revenue Growth
Is a HubSpot Module a Widget? Lets Discover Here
How to Build an Accordion HubSpot Module – Beginners Guide [Updated 2026]
How to Send HubSpot Metrics to Google Analytics – Beginners Guide
HubSpot LMS Integration
Artisan AI HubSpot Integration
n8n Email Marketing Automation
Conclusion
Finding or generating your HubSpot API key isn’t complicated; it’s about knowing where to look and understanding the platform’s latest security standards. Whether you’re connecting HubSpot to a CRM, ERP or analytics tool, following the right authentication process protects your business data while enabling powerful automation.
If you need help setting up or managing your HubSpot integrations, Mpire Solutions can assist you with strategy, implementation and ongoing support.
FAQs
HubSpot has deprecated API keys for security reasons. You now need to use Private Apps with Access Tokens.
In HubSpot, go to Settings → Integrations → API Key, then click Show key or Generate new key if none exists. Copy and store it securely, as HubSpot API keys provide full access to your account data.
You can access your API key under Settings > Integrations > API Key in your HubSpot account. Only users with Super Admin permissions can view or create the API key.
The fastest way is to use the search bar in HubSpot settings — type API key, select the result and your key will appear in the Integrations section for instant access.
HubSpot provides an API key under Settings → Integrations → API Key, but not a traditional secret key. For secure integrations, HubSpot now recommends using Private Apps with access tokens instead of legacy API keys.
HubSpot Consulting Needs
