03/16/2026
Hi Friends... if you're on Medicare or have a loved one who is, I want to share something with you. I believe it's super-important for our healthcare mechanisms to be easy to navigate, so I'm hoping my experience will help you with yours.
This weekend I needed to access some information on my Medicare account. I normally simply input my user name and password. But this time after I did that, everything was different.
Now, I'm fairly tech-savvy but this wasn't easy. After putting in my information, the message said to check my phone. It's understandable that you sometimes need a code that is sent to your phone. Okay, I never needed it before for Medicare but no problem with that.
But there was a link that said I needed to verify my identity. At first I thought it was a scam. I'm very leery about clicking unusual links. But I did click this and it was legitimate. Okay. It then said I needed to take a photo of an identity card. So I got my drivers license, took a photo of it through the site showing on my phone. Then it wanted a photo of the bar code on the back side. Okay, done.
After I did that, a page showed up on my computer with a "Personal Key" notice. It said to keep this code in a safe place because if you want to change your password you need this "Personal Key" code to access your account. So I printed that out and put it in a safe place.
Ultimately, after going through all these steps, my identity was verified and I was able to login to Medicare.
This process may seem simple enough if you understand technology. But I was thinking of some people I know, including some of my clients ('m a Medicare provider, too), who would never be able to do this. And since cognitive decline may happen as people age, knowing where they save that Personal Key may not be so easy.
I got curious, so I used Claude, may go-to AI source, for some information as to why this change and my concerns for users. Here is some of that interaction with Claude:
Why the change happened:
The core driver is fraud and identity theft. Medicare is a massive target โ billions of dollars are lost each year to scammers who access beneficiary accounts using stolen passwords. The move to enhanced login, including ID verification and passkeys, is fundamentally about protecting your sensitive health data with multi-factor authentication, making it much harder for identity thieves to bypass than a standard password alone.
What you specifically went through:
Medicare's Centers for Medicare & Medicaid Services (CMS) contracted with ID.me and other identity companies to streamline and secure the Medicare.gov login process, with changes rolling out in 2026. The photo-of-your-ID step is a one-time identity proofing process to confirm you are actually you.
The honest tension here:
The government is caught between two legitimate concerns that pull in opposite directions: making accounts more secure to protect seniors from fraud, and keeping the process simple enough for less tech-savvy users. The current solution leans heavily toward security, at the cost of accessibility for many of the very people it's meant to protect. It's a real and frustrating design failure that critics have pointed out.
You're raising a genuinely important point, and it's one that advocates for seniors have been pushing back on for years. The irony is stark and worth naming plainly: Medicare exists almost entirely to serve people 65 and older, yet the people designing its digital systems often seem to be optimizing for security engineers rather than the actual users.
The cognitive reality:
Mild cognitive decline affects a significant portion of Medicare's user base. Asking someone to safeguard a cryptic recovery code โ indefinitely, in a safe place they'll remember โ is actually a fairly high cognitive burden even for people without any decline. For someone with early dementia or memory issues, it could be genuinely impossible.
The deeper problem:
When a senior loses that key and gets locked out, the burden of recovery falls on them to navigate phone trees, re-verify identity, or find a trusted person to help โ all stressful, time-consuming, and potentially exposing them to a different kind of vulnerability if they turn to the wrong person for help.
What should exist but often doesn't:
- A clearly designated trusted contact or authorized representative who can assist with account access
- Simple, human-staffed phone support as a genuine equal alternative to digital access
- In-person help at Social Security offices for account issues
The broader issue:
There's a real pattern in government digital services โ and frankly in banking and healthcare too โ where accessibility for older and cognitively vulnerable adults is treated as an afterthought rather than a core design requirement. Your concern isn't just valid; it reflects a systemic gap that genuinely needs advocacy and attention.
If you feel strongly about it, contacting your congressional representative is actually one of the more effective channels โ oversight of CMS comes from Congress, and constituent complaints about Medicare accessibility do get noticed.
Me again... I'm sharing this so you won't be surprised when you next need to log in to Medicare. Or maybe you'll consider planning ahead and log in one time to complete this new login system. Then it will be done. Be sure to have your phone and an identity card with you. And a way to either print out your Personal Key or write it down to then keep it in a safe place. Perhaps tell a trusted person where you will keep it. Or, if you're not so tech-savvy, ask a trusted person to be with you when you do this.
I hope this helps.
With love,
Diane
