Build audience match keys

Ad platforms require hashed identifiers. Hashing them outside HubSpot means exporting raw email addresses, which is precisely the data you should not be moving around.

Hash and Encrypt produces the SHA-256 digest inside the workflow, so the raw address never leaves your CRM and only the hash is shared.

1. 1Enrol the contacts you intend to share with the ad platform.
2. 2Add Hash and Encrypt, choose SHA-256, and pass the email as the value to hash.
3. 3Copy the hash onto a dedicated property so the raw email never leaves HubSpot.
4. 4Export or send that property instead of the address itself.

• SHA family and MD5 digests
• HMAC-SHA256 with a secret key
• AES-256 encrypt and decrypt
• Base64 encode and decode