A HubSpot onboarding checklist covers six things in order: decide who owns the portal and how your stages work, secure the account and add your humans with the right seats, connect email and domains, install tracking and privacy settings, bring in clean data, then train each role. Skip the order and you'll redo work later.
If HubSpot feels heavy right now, you're not alone. You bought the platform, the login works, and now there's a blank portal staring back at you with about a hundred settings pages.
This checklist turns that blank portal into a plan. You'll walk away with a phase-by-phase list you can print and check off, the exact HubSpot settings paths for each step, the decisions you need to make before anyone clicks anything, and a clear line between onboarding and the bigger implementation work that comes after.
Key Takeaways
- Make decisions before you configure. Ownership, lifecycle stages and who gets which seat come first.
- 2FA is already required on Starter, Professional and Enterprise accounts. Plan for it on day one.
- Authenticate your email sending domain before you send a single marketing email.
- Exclude your own team's traffic early so your first reports aren't padded with internal visits.
- Clean data before you import it. HubSpot dedupes contacts by email and companies by domain, and that's it by default.
What's the Difference Between HubSpot Onboarding and Implementation?
Onboarding gets your portal and your humans ready to work: accounts, security, email, tracking, data and training. Implementation designs the system around your business: data model, pipelines, automation, integrations and reporting. Most teams need both. This checklist covers onboarding. Our HubSpot implementation checklist covers the build.
Phase 1: What Should You Decide Before You Touch Settings?
Most rework we see starts with a decision nobody made. Make these first and write them down.
- Name the portal owner and at least one backup Super Admin. One admin holding everything is a risk, not a plan.
- List every human who needs access and what they'll do in HubSpot. HubSpot separates seats (which tools someone can reach) from permissions (what they can view, create, edit or delete).
- Agree on lifecycle stage definitions. HubSpot's defaults run Subscriber, Lead, Marketing Qualified Lead, Sales Qualified Lead, Opportunity, Customer, Evangelist and Other. Decide what each one means for your business before records start moving.
- Set your fiscal year in Settings > Account Defaults if it isn't January to December. Goals, forecasts and reports all use it.
- Write down what "onboarded" means for you: which teams are working in HubSpot, and on which tasks.
Phase 2: How Do You Secure the Account and Add Your Humans?
- Plan for two-factor authentication. HubSpot requires 2FA for every Starter, Professional and Enterprise account that logs in with a username and password, and it can't be turned off. On HubSpot's free tools, a Super Admin can require it in Settings > Security on the Login tab.
- Decide which 2FA methods you'll allow. Super Admins can limit methods in Settings > Security, on the Login tab under Account 2FA preferences. HubSpot marks the authenticator app as recommended and text message as the least secure option.
- Add your humans in Settings > Users & Teams. Click Add users, then Create new, or import from a .csv file for bigger teams.
- Assign the right seat to each person. Seat changes can affect your bill, so check with whoever owns the budget.
- Set permissions with intention. Permissions are hygiene, not only security. A rep who only needs their own contacts doesn't need edit access to every property.
- Create teams if you're on a Professional or Enterprise subscription. Teams drive record visibility and team-based reports.
- Check Security Health in Settings > Security on the Permissions tab. It reviews your Super Admin count, inactive logins, critical permissions and partner access.
Phase 3: How Do You Connect Email and Domains?
- Have each person connect their individual work email in Settings > General on the Email tab. HubSpot supports Gmail, Microsoft Outlook, Microsoft Exchange and IMAP.
- Authenticate your email sending domain in Settings > Content > Domains & URLs. You'll add MX, DKIM, SPF and DMARC records with your DNS provider. DKIM takes two CNAME records, and SPF and DMARC each take a TXT record.
- If you already have an SPF record, add HubSpot's include to it. Don't create a second SPF record.
- If you'll host pages on HubSpot, connect your domain. You need DNS access, plus Super Admin or Domain Settings permission. Subdomains use CNAME records, and root domains use A records.
- Remember a subdomain or root domain can only host content in one place. Connecting one that already hosts other pages breaks those links.
Phase 4: How Do You Set Up Tracking and Privacy?
- Install the HubSpot tracking code on any page not hosted in HubSpot. HubSpot pages include it automatically. Find the code in Settings > Tracking & Analytics > Tracking code (or just Tracking Code, in accounts that only have Marketing Hub Starter or HubSpot's free tools).
- Install only one HubSpot tracking code per page. If there are two, only the first one to load fires.
- Exclude internal traffic. On the Advanced Tracking tab, add your office IP addresses and turn on Bot filtering. New IP exclusions can take up to ten minutes to apply.
- Set up your cookie consent banner in Settings > Privacy & Consent, and get your legal team's eyes on the wording.
Phase 5: How Do You Bring In Clean Data?
Garbage in, garbage out. This is the phase teams rush, and it's the one that costs the most later. Our data hygiene guide goes deeper, but here's the onboarding version.
- Clean your spreadsheets before you import. Remove duplicates, fix email formats, and standardize company names and domains.
- Know how HubSpot dedupes. By default it matches contacts by email address and companies by company domain name. Use the Record ID to update other records.
- Create the custom properties you need in Settings > Properties before the import, so your columns have somewhere to land.
- Test with a small file first. Check the import property requirements, then confirm records, owners and associations look right.
- Know the limits. HubSpot says existing emails, meetings, notes and tasks can't be updated through an import.
- Moving from another CRM? HubSpot's import docs point new accounts to self-service transfer to audit and sync existing data.
Phase 6: How Do You Train Your Humans So It Sticks?
Documentation plus an internal training workshop comes before more tools. That's how adoption actually happens.
- Train by role. Marketing learns the marketing tools, sales learns the sales tools, and everyone learns the CRM basics.
- Write a one-page portal guide: who owns what, what each lifecycle stage means, and where to ask questions.
- Record your training sessions so future hires can catch up.
- Schedule a 30-day check-in to see who's logging in, what's confusing and what needs to change.
What Comes After the Onboarding Checklist?
Onboarding gets you open for business. It doesn't keep you healthy. That takes a cadence, and it's easier to clean every six months than every six years.
Once you're live, run a structured review to catch what slipped through.
Get the free HubSpot Portal Audit Checklist, 70+ audit items organized by hub, so your 30-day check-in has a real scorecard.
If you want to know how long all this realistically takes, read The Real HubSpot Onboarding Timeline, then check the seven onboarding mistakes that cost companies the most. And if you'd rather have a Platinum Partner set up the portal and train your team together, that's exactly what our HubSpot onboarding packages do.
Sources
- HubSpot KB, Use lifecycle stages
- HubSpot KB, Set an account's fiscal year (updated September 30, 2026)
- HubSpot KB, Set up two-factor authentication for your HubSpot login
- HubSpot KB, Configure approved 2FA methods for users
- HubSpot KB, Manage account security using HubSpot security health (updated September 25, 2026)
- HubSpot KB, Add and update HubSpot users (updated October 30, 2026)
- HubSpot KB, Assign and manage seats (updated October 15, 2026)
- HubSpot KB, HubSpot user permissions guide (updated October 29, 2026)
- HubSpot KB, Create and manage teams (updated September 29, 2026)
- HubSpot KB, Connect an individual work email (updated September 28, 2026)
- HubSpot KB, Manage email authentication in HubSpot
- HubSpot KB, Connect a domain to HubSpot (updated June 26, 2026)
- HubSpot KB, Install the HubSpot tracking code (updated October 20, 2026)
- HubSpot KB, Exclude traffic from your site analytics (updated December 3, 2025)
- HubSpot KB, Deduplicate records in HubSpot
- HubSpot KB, Create and edit properties
- HubSpot KB, Import records for multiple objects (updated October 7, 2026)







