Re:Don't use passkeys for encrypting user data
by buzer on Saturday February 28, 2026 @01:43AM
(#47191308)
That's weird, I can login to my HealthEquity account (which contains HSA) without any issues and I don't have passkey setup. I confirmed it just now just in case.
That article does say "HealthEquity Mobile and web experience" so maybe it's just for customers who use both, I only use web.
Re:Don't use passkeys for encrypting user data
by saagarjha on Saturday February 28, 2026 @03:26AM
(#47192248)
I’ve only used web and they forced me to enroll one.
Re:Don't use passkeys for encrypting user data
by cyanydeez on Saturday February 28, 2026 @05:24AM
(#47193296)
side note, HSAs are also a symptom of a failed Healthcare system
Re:Don't use passkeys for encrypting user data
by Someone1234 on Saturday February 28, 2026 @07:58AM
(#47194783)
You aren't wrong, but many of us are stuck in that failed healthcare system and making the best of it.
https://www.healthequity.com
> As of October 2025, passkey login has been fully rolled out and is now required for members with Health Savings Accounts (HSAs) and Reimbursement Accounts (RAs) who use the HealthEquity Mobile app and web experience.
https://help.healthequity.com/en/articles/11690915-passkey-f...
The FAQ is a little misleading by saying WHEN your account has a passkey this and that, but reality is that after October they made them completely mandatory, no bypass, no exceptions. 100% coverage.
Oh, and by the way, passkeys have been broken on PC/Linux when using Firefox for months:
> There Was A Problem: We encountered an error contacting the login service. Please try again in a few minutes.
Neat. You have to use Chrome or Edge.... For months, after making it mandatory...