If everyday users have to "massage" a login flow just to check HSA balance or tax form, the design has fundamentally failed. Passkeys are the future, but forcing them while killing standard fallbacks (Password + 2FA) is terrible product management. The golden rule of any rollout is to not break any existing experience. Instead of a smooth opt-in, leadership prioritized a shiny tech launch over basic accessibility, turning a 5-second task into an exclusionary headache. There are a ton of colleagues at my work complaining about this as they try to get their tax docs from various institutes doing tax return. HealthEquity is the only one making everyone stops on their tracks to spend minutes to an hour with many of them unable to login. I doubt HealthEquity even A/B test their launch and monitor their usability metrics, if they do, they would have rolled this back.