2 Accepted solutions
Hi @DCantwell , Kyle’s answer is the key clarification here, and unfortunately it’s a hard rule on HubSpot’s side.
On Starter, Professional, and Enterprise, 2FA is mandatory and there’s no way to revert to a “regular” login without it. What is flexible is the method of 2FA.
SMS codes are still supported, but only if they’re enabled at the account level. If you’re not seeing SMS as an option during login, that usually means a Super Admin has restricted allowed methods to app-based auth or passkeys only.
The important nuance is that this isn’t controlled by your personal user settings. It’s controlled globally under Settings > Security > Two-factor authentication, and only a Super Admin can change which methods are permitted. If you are the Super Admin and still don’t see SMS as an option, it’s worth double-checking that section or contacting HubSpot Support to confirm nothing is enforced at the account level.
One thing that isn’t possible anymore is the old “optional 2FA” flow or email-only verification. That was phased out as HubSpot tightened security requirements, so there’s no supported path back to that experience.
If SMS 2FA fits your needs and you don’t want apps or passkeys, the next step is getting a Super Admin to explicitly allow SMS. If that’s already allowed and still not showing, Support can usually sort it quickly.
Did my answer help? Please mark it as a solution to help others find it too.
 | Ruben Burdin HubSpot Advisor Founder @ Stacksync Real-Time Data Sync between any CRM and Database |
 | |
Hi @DCantwell , Kyle’s answer is the key clarification here, and unfortunately it’s a hard rule on HubSpot’s side.
On Starter, Professional, and Enterprise, 2FA is mandatory and there’s no way to revert to a “regular” login without it. What is flexible is the method of 2FA.
SMS codes are still supported, but only if they’re enabled at the account level. If you’re not seeing SMS as an option during login, that usually means a Super Admin has restricted allowed methods to app-based auth or passkeys only.
The important nuance is that this isn’t controlled by your personal user settings. It’s controlled globally under Settings > Security > Two-factor authentication, and only a Super Admin can change which methods are permitted. If you are the Super Admin and still don’t see SMS as an option, it’s worth double-checking that section or contacting HubSpot Support to confirm nothing is enforced at the account level.
One thing that isn’t possible anymore is the old “optional 2FA” flow or email-only verification. That was phased out as HubSpot tightened security requirements, so there’s no supported path back to that experience.
If SMS 2FA fits your needs and you don’t want apps or passkeys, the next step is getting a Super Admin to explicitly allow SMS. If that’s already allowed and still not showing, Support can usually sort it quickly.
Did my answer help? Please mark it as a solution to help others find it too.
| | Ruben Burdin HubSpot Advisor Founder @ Stacksync Real-Time Data Sync between any CRM and Database |
| | |
