The HubSpot for WordPress plugin loses its connection every time the WordPress security salts change. Rotating salts is a normal security practice, and plenty of security plugins and managed hosts do it automatically. Every time it happens, the plugin de-authorises and shows the reconnect banner.
The bigger issue is that it fails silently. Forms and tracking stop sending data to HubSpot, but nobody knows until an admin logs into WordPress and spots the banner. That gap can run for weeks, and the leads and analytics lost in the meantime cannot be recovered.
We raised this with Support. They confirmed the cause and advised turning off automatic salt rotation. That fixes the symptom by asking us to switch off a legitimate security control, which is not something we want to do.
Other plugins on our site handle API credentials in a way that survives salt rotation, so HubSpot is the only integration that breaks. We would like to see the plugin handle this without customers having to choose between a stable HubSpot connection and routine WordPress security.