HealthEquity is making it easier and more secure to access your benefits.
We've introduced a simplified login experience that brings account setup and passkey registration together in one streamlined process. Whether you're new to HealthEquity or setting up a passkey for an existing account, you'll follow the same guided experience designed to help you get started faster while keeping your account protected.1 With one login experience and one passkey, secure access starts here.
For more information, visit our Help Center.
What's new?
We've significantly simplified the process of creating an account and registering a passkey. Previously, members could encounter different account setup experiences depending on their benefits and platform. The new login experience provides one guided path for account setup and passkey registration. The process is designed to reduce common login barriers while improving security.
Set up in 5 steps, in less than 5 minutes
The new setup process guides you through account creation and passkey registration in just a few steps.
1. Go to the web portal
Go to HealthEquity at my.healthequity.com or for the EZ Receipts experience, go to participant.wageworks.com.
2. Verify your identity
To help protect your account, first we verify it's really you.
Most members can verify using a mobile or landline phone number associated with their account.2 Additional data matching and/or comparing a selfie with government-issued ID may be offered.3
3. Look up your account
Confirm your account sponsor so you can continue setup with confidence. The process is designed to make account lookup easier and more intuitive.
4. Username and passkey
The system generated username is the name of your passkey. Set up your passkey on your device. You'll sign in from now on using your device's built-in security, such as Face ID, fingerprint recognition, or device PIN.4
5. Review required agreements
Review and accept Terms of Use and General Privacy Agreements. That's it. You're in!
Why passkey is better: secure login that safeguards your funds, personal info, and healthcare data.
Once you've set up a passkey, your login experience includes:
- No passwords
- Built-in security using your fingerprint, Face ID, or device PIN
- Easy login across mobile and desktop
Passkeys are built on the FIDO2 and WebAuthn authentication standards — open, industry-backed technologies adopted by global financial institutions and implemented across platforms from Apple, Google, and Microsoft.5
You get stronger protection without added steps; just fast, secure access to your benefits.
Security works best when we work together. Fraud prevention is a team effort. Monitor your account regularly and report any unusual activity as soon as you see it.6
For more information, please visit our Fraud and Security page.
Frequently Asked Questions
What's changing with login?
HealthEquity has introduced a simplified login experience that combines account setup and passkey registration into one streamlined process. Members now follow the same guided path to verify identity, find their account, and register a passkey.
Do I have to set up a passkey?
Passkey login is required for your account, you'll need it to access your benefits — on mobile or desktop. If you use SSO from your organization, a passkey is not required for SSO login. But direct use of HealthEquity's mobile and web logins, including EZ Receipts, will require passkey.
Why is identity verification required?
Your security is important to us. We want to ensure it is you accessing your account to set up passkey.
What is verification with a selfie and government-issued ID?
If verifying with a phone number or additional data matching doesn't work, we'll guide you through the selfie ID verification process — so we know it's really you. The process will compare a selfie from your mobile phone camera with your government-issued ID.
Just a few minutes and you're on your way to setting up a safe and secure passkey — no passwords required from here on out. Your privacy is important to us. We will protect your personal information. See our Privacy Policy.
Check out our selfie and government ID mobile demo.
Check out our selfie and government ID desktop demo.
Will my devices and browsers support passkeys?
Most modern smartphones, tablets, and computers support passkeys.
- Mobile: iOS 16+ (Safari), Android 10+ (Chrome)
- Desktop: Windows 10+ (Edge/Chrome), macOS Ventura+ (Safari/Chrome), ChromeOS 109+
- Browsers: Safari 16+, Chrome 109+, Edge 109+, Firefox 122+
If your iPhone or Android phone is running a recent operating system version (iOS 16+ or Android 10+) and has screen lock/biometric authentication enabled, it should support passkeys.
How do I know what software version my phone is on?
Find the software version on your iPhone, iPad or iPod touch through Apple Support. Check and update your Android version with Android Help.
What if my device doesn't support passkeys?
Most smartphones support passkeys. If yours doesn't, you can still set up a passkey on a supported laptop, desktop or tablet computer. If you are unable to set up a passkey, read about passkey fallback.
HealthEquity offers multiple authentication options to ensure accessibility. See the HealthEquity Digital Accessibility Statement.
Need help setting up your passkey?
Check out our Login Help page and Help Center to get started.
Still need help? Call 1-844-373-6979 to get passkey and login support.
HealthEquity does not provide legal, tax, or financial advice.
1 Passkey set up is also available online using a desktop, laptop or tablet computer. A valid phone number is required to register a passkey. SSO login does not require passkey, but direct use of mobile or web login does require passkey. HealthEquity offers multiple authentication options to ensure accessibility and compliance with applicable laws. See our HealthEquity Digital Accessibility Statement.
2 Voice over internet protocol (VoIP) numbers will not verify.
3 Your privacy is important to us. We will protect your personal information according to our Privacy Policy.
4 See our Biometric Data Policy. HealthEquity cares about your personal data.
5 Digital Digest, Passkeys Adoption Takes Password-Free Security Mainstream, October 2025.
6 For HSAs, accountholders must report any unauthorized activity within 60 days of statement posting.
For employer-sponsored plans (e.g., FSAs, HRAs), HealthEquity serves as a directed TPA. Different responsibilities may apply. Please consult your plan documents.
Review your HSA transactions online regularly, and your HSA statement monthly. Tell us immediately if your card is lost or stolen, or you see unauthorized transactions, by calling 1-866-346-5800.
You must notify us no more than 60 days from the time the HSA statement is made available.
Why 60 days? Fraud prevention is a collective effort. Recovery of funds is not guaranteed. The sooner you notify us, the more likely that funds can be recovered on your behalf.
As noted in your HSA Custodial Agreement, failure to report unauthorized transactions within 60 days means you have accepted the transactions, they might not be eligible for reversal, and you could be responsible for the transactions.
For more information, please visit our Fraud and Security page.
