Hash and Encrypt

Protect sensitive values inside workflows. Hash, encrypt, encode or decode any value: SHA-256, SHA-512, SHA-1, MD5, HMAC-SHA256, AES-256 encryption and decryption, and Base64. Keyed operations use a secret you control.

Hash and Encrypt
What you get

Protect sensitive values inside workflows

  • SHA family and MD5 digests
  • HMAC-SHA256 with a secret key
  • AES-256 encrypt and decrypt
  • Base64 encode and decode
How it works

Operations inside this action

Pick an operation and the form shows only the fields that operation needs.

Hash

One-way digests for identifiers and integrity checks.

HMAC

Signed digests for webhook verification and API signatures.

Encrypt and decrypt

Two-way AES-256 for values that must be recoverable.

Use cases

What teams build with Hash and Encrypt

Build audience match keys

SHA-256 emails before sending them to ad platforms that require hashed identifiers.

marketing opsprivacy

Sign payloads for a partner API

HMAC the request body with a shared secret so the receiver can verify origin.

integrationssecurity

Store a recoverable token

AES-256 encrypt a value into a property and decrypt it later in another workflow.

security
Browse every use case
FAQ

Hash and Encrypt questions

Everything teams ask before putting this action into production.

SHA-256, SHA-512, SHA-1 and MD5 digests, HMAC-SHA256 with a secret key, AES-256 encryption and decryption, and Base64 encoding and decoding.
Ad platforms and partner APIs often require hashed identifiers, for example SHA-256 of an email address for audience matching. Hashing in the workflow means the raw value never leaves HubSpot.
You supply it as an encrypted secret in your AuPerate dashboard. AES-256 requires a 64 character hex key, which is 32 bytes.

Add Hash and Encrypt to your workflows today

Install AuPerate once and every action appears in your HubSpot workflow editor.

Get Started