The End of My HealtheVet and DS Logon: Explaining the New VA Sign-In Process

For over a decade, millions of Veterans accessed their Department of Veterans Affairs (VA) benefits through a fragmented web of legacy login portals. Whether they were checking a disability rating, refilling a vital prescription, or downloading sensitive medical records, Veterans historically relied on My HealtheVet usernames and passwords or Department of Defense-issued DS Logon credentials. These systems were familiar, convenient, and deeply ingrained in the daily routines of the Veteran community.

However, convenience often comes at the cost of security. In an era where Veterans are increasingly targeted by sophisticated cybercriminals and identity thieves, familiar systems can become dangerous vulnerabilities. A Veteran’s online VA account is a treasure trove of highly sensitive data. It contains Social Security numbers, banking and direct deposit details, comprehensive medical histories, and disability claim information. To a cybercriminal, a compromised VA account is essentially a blank check for identity theft and financial fraud.

Recognizing this escalating threat, the VA is moving away from older account systems like the My HealtheVet username/password option and the DS Logon option.

In their place, the VA is requiring all Veterans, beneficiaries, and caregivers to transition to either Login.gov or ID.me. This transition is actually the result of a federal cybersecurity push designed to protect the nation's most vulnerable populations. Keep reading to learn more about the policy driving this change, why the legacy systems failed, and what this digital migration means for the future of Veteran benefits.

The Policy and the Threat: Why Legacy Systems Failed

To understand why the VA is requiring Veterans to change how they access their benefits, one must look at the broader landscape of federal cybersecurity. The retirement of My HealtheVet and DS Logon is not an isolated VA initiative; it is a direct consequence of a government-wide shift toward "Zero Trust Architecture."

In May 2021, the White House issued Executive Order 14028, "Improving the Nation’s Cybersecurity." This directive ordered federal agencies to modernize their cybersecurity defenses and implement strict Multi-Factor Authentication (MFA) and encryption protocols. The underlying philosophy of a Zero Trust framework is simple: never trust, always verify. Under this model, an agency cannot assume that a user attempting to access a system is who they claim to be just because they know a password.

The Best Sitrep for Today's Vets.

Benefits intel, military tech, field-tested gear, untold stories of those who served, and history like you've never heard before. Sign up for the VeteranLife newsletter.

​

Subscribe

Always free. 🇺🇸 | Unsubscribe anytime.

This executive mandate exposed the fatal flaws in the VA's legacy login systems. The traditional My HealtheVet login relied on a simple username and password combination. In the modern cybersecurity landscape, passwords are vulnerable to phishing attacks and "credential stuffing," a technique where hackers use massive databases of stolen passwords from other data breaches and automate login attempts on government portals.

DS Logon, originally created by the Department of Defense, offered a slightly higher level of security but still struggled to meet the stringent identity verification standards required by modern federal guidelines.

The VA realized that managing four distinct login portals (My HealtheVet, DS Logon, Login.gov, and ID.me) created an expanded attack surface for cybercriminals. By deprecating the two weakest links, the VA has drastically shrunk its digital attack surface and ensured that every Veteran accessing the system is protected by the highest standard of identity verification.

The VA's Strategy and the Transition

Migrating a user base of millions of Veterans was quite the logistical challenge. The VA knew that forcing a sudden transition would cause disruptions to healthcare access, leading the agency to implement a phased, multi-year rollout.

The cornerstone of the VA’s strategy is communication and identity verification. The agency partnered with two vetted credential service providers: Login.gov and ID.me. Both platforms require users to undergo a rigorous identity-proofing process before they can access their accounts.

Quinn Slaven, Press Secretary for the U.S. Department of Veterans Affairs, emphasized the necessity of this friction in the onboarding process.

“Identity verification is a one-time process that helps VA protect Veterans from becoming victims of identity theft and fraud,” Slaven explained.

This one-time verification process is the critical differentiator between the old systems and the new ones. It ensures that the person attempting to create the account is physically and legally the Veteran they claim to be, effectively stopping identity thieves from hijacking accounts or intercepting direct deposit disability payments.

The VA's aggressive communication campaign yielded significant results.

The Best Sitrep for Today's Vets.

Benefits intel, military tech, field-tested gear, untold stories of those who served, and history like you've never heard before. Sign up for the VeteranLife newsletter.

​

Subscribe

Always free. 🇺🇸 | Unsubscribe anytime.

According to Slaven, “Troubleshooting support is available through VA Health Resource Center, and so far, approximately 5 million Veterans have successfully transitioned to a modern credential.”

ID.me vs Login.gov: The Identity Verification Debate

When a Veteran sits down to make the switch, they are presented with a choice: Login.gov or ID.me. The VA accepts both equally, and Veterans only need to choose one. However, the mechanics of how these two providers verify identity have been a source of both debate and anxiety among the Veteran community.

Login.gov is the federal government’s in-house solution. Created by the General Services Administration (GSA), its goal is to provide a single, secure login for all federal services. To verify your identity through Login.gov, you typically need to upload a photo of a state-issued ID and provide your Social Security Number and phone number.

ID.me is a private company contracted by the federal government and various state agencies. ID.me’s verification process is often more stringent and relies heavily on biometric data. Veterans creating an ID.me account are usually required to upload a government ID and take a live "video selfie" using their smartphone or webcam. If the automated biometric system fails, ID.me offers a backup option: a video call with a human "Trusted Referee" who manually verifies the Veteran's documents.

While these processes meet federal security standards, they introduce a significant friction point. Many older Veterans feel deeply hesitant about uploading their driver’s licenses or taking biometric selfies online, fearing the very privacy violations the system is designed to prevent. Furthermore, the process assumes a baseline of technological literacy and access to modern hardware.

Navigating the Friction: Support for Veterans

The VA is acutely aware of the frustration this transition has caused. The agency has repeatedly stressed a fundamental point: a Veteran's actual VA benefits have not changed, and they will never lose their benefits simply because they failed to create a digital account.

If a Veteran's old DS Logon or My HealtheVet credentials no longer work and they haven't set up a new account, their compensation checks will still arrive, their prescriptions will still be filled, and their medical appointments remain on the calendar. The only thing that changes is their ability to manage those benefits online.

To bridge the technological gap, the VA has mobilized the VA Health Resource Center to provide extensive troubleshooting support. For Veterans who simply cannot complete the digital identity verification process on their own, the VA provides in-person assistance at VA Medical Centers and clinics across the country. Veterans can bring their physical identification documents to a facility, where staff will guide them through the creation of a Login.gov or ID.me account.

A Digital Passport for the Future

The transition away from My HealtheVet and DS Logon is undoubtedly a challenging moment for the Veteran community. It requires individuals to abandon familiar habits and navigate a complex, highly secure digital onboarding process. However, this friction is a necessary growing pain in the fight against a relentless wave of cybercrime and fraud targeting Veterans.

By mandating Login.gov and ID.me, the VA is not just protecting medical records and disability payments; it is integrating Veterans into a broader, modernized federal ecosystem. Once a Veteran successfully completes the identity verification process, they are not just unlocking VA.gov. They are acquiring a universal digital passport. That same Login.gov or ID.me account can be used to securely access the Social Security Administration, the IRS, and dozens of other federal and state services.

The era of juggling a dozen different, vulnerable government passwords is over. While the initial setup requires patience and a leap of faith into new technology, the ultimate takeaway is a permanent, fortified digital perimeter around a Veteran's identity.

Frequently Asked Questions

Whenever there's a change involving benefits or government services, confusion is always there and definitely understandable. Here are some frequently asked questions we've heard from the community:

Why do I have to verify my identity?

Identity verification is a one-time process that usually takes about 10 minutes. During setup, ID.me or Login.gov will ask for personal information and a government-issued ID to confirm your identity.

This helps protect your account and benefits from identity theft and fraud. Once verified, you typically won't need to do it again unless you lose access to your account or need to recreate it.

What is the difference between multifactor authentication and identity verification?

Identity verification is a one-time step completed when you create your Login.gov or ID.me account. You'll provide personal information and a government-issued ID to confirm your identity and prevent fraud.

Multifactor authentication (MFA) adds an extra layer of security by requiring a verification code each time you sign in, helping ensure only you can access your VA benefits and health information.

What happens when I didn’t create an account on time?

You won't lose your VA information or benefits if you haven’t created an account on time. You can still access services by phone, mail, or in person. However, to manage your benefits and health care online, you'll simply need to sign in with a Login.gov or ID.me account.

What happens when I don’t want to create an account?

Creating a Login.gov or ID.me account is optional and won't affect your eligibility for VA benefits or health care. However, you'll need one to access and manage your VA services online. Otherwise, you can still use VA services by phone, mail, or in person.