Sunset of the hs-membership-csrf cookie

What it is

<p>This cookie protects logins to HubSpot-gated content, including private pages, customer portals and membership sites. On August 21, 2026, HubSpot sunset hs-membership-csrf and replaced it with __Host-hs-membership-csrf to strengthen login security.</p>

Why it matters

<p>HubSpot no longer issues the old cookie. If your consent platform only allows the old name, it may block the new cookie when visitors decline non-essential cookies, and those visitors cannot log in.</p>