Store a recoverable token

AES-256 encrypt a value into a property and decrypt it later in another workflow.

The challenge

Some values must be stored and read back later, which rules out hashing, but keeping them in plain CRM properties exposes them to anyone with record access.

How AuPerate solves it

Hash and Encrypt uses AES-256 so the value is unreadable at rest, and a later workflow decrypts it with the same key when it is genuinely needed.

How to build it
  1. 1Create a 64 character hex key and store it as a secret.
  2. 2Add Hash and Encrypt with AES-256 Encrypt and your key, then copy the result onto a property.
  3. 3In a later workflow, use AES-256 Decrypt with the same key to recover the value.
  4. 4Never put the key itself into a workflow field.
What the action gives you
  • SHA family and MD5 digests
  • HMAC-SHA256 with a secret key
  • AES-256 encrypt and decrypt
  • Base64 encode and decode

Build this in your own workflows

Install AuPerate once and every action appears in your HubSpot workflow editor.

Get Started