TreasuryDirect to Require ID.me Login by October 28
TreasuryDirect: Prepare for ID.me – Your New Way to Log In
TreasuryDirect is upgrading its login system with ID.me, a government-verified identity provider, to enhance security and streamline access. Starting September 13, 2026, users can begin using ID.me, and it becomes mandatory on October 28, 2026. To set up an account, you'll need your SSN and a government-issued photo ID. Existing ID.me users may need extra verification. The change aims to protect sensitive financial information and simplify access to multiple government services.
Logging in with the ID.me verification process adds a layer of assurance that only you can manage your TreasuryDirect account(s) and securities, so your sensitive personal and financial information is protected as you conduct digital transactions.
- Animats
The IRS backed off from using "ID.me" back in 2022.[1] But apparently it is back.
Is Treasury requiring face recognition, like last time?
And of course this will be used to track down illegal aliens.
[1] https://www.biometricupdate.com/202202/downwind-of-irs-decis...
- bramhaag
Why did the US gov decide to rely on a TLD controlled by Montenegro for this seemingly important and sensitive service?
- waldrews
TreasuryDirect's login and account recovery experience has been notorious for years, both for user experience and for people easily getting locked out for weeks. It's good they're being careful with this rollout, as it serves both individual and institutional accounts where dollar amounts involved are epic even by bank standards, and rarely checked by hand, so even single account breaches are serious.
- Dusseldorf
Does anyone know if there are any reasonable alternatives here if I don't want to create an ID.me account and hand my PII over to them? Do I just need to liquidate my positions and close my account out, or can I manage it offline via correspondence somehow? Seems absurd to have so quick a turnaround on this with no alternative options.
- chenxiaolong
In case anyone is interested in using TOTP two-factor authentication with their ID.md account, I made a script for setting that up: https://github.com/chenxiaolong/id-me-otpauth
They used to support TOTP directly, but removed it in favor of their proprietary mobile apps. It's still TOTP under the hood though, just requires a couple API calls to "activate" it.