As Covered by NerdWallet: Locked Out of a Fidelity 401(k)?
November 3, 2025
As Covered by NerdWallet: Locked Out of a Fidelity 401(k)?
A recent NerdWallet article, “Locked out of your Fidelity 401(k)? Here’s an explanation,” highlights the real-world impact of Fidelity’s tightening restrictions on credential sharing—and why both advisors and clients are being forced to rethink how workplace retirement accounts are managed.
As the nation’s largest 401(k) recordkeeper, Fidelity has taken decisive steps to limit third-party access to participant accounts when that access relies on client usernames and passwords. The changes, which began with restrictions on screen scraping in 2023 and expanded in 2024, are designed to address cybersecurity, data integrity, and audit-trail concerns.
Why Some Clients and Advisors Are Being “Locked Out”
According to NerdWallet, Fidelity has acknowledged that accounts may be temporarily blocked when credential sharing is detected. In those cases, clients are asked to reset their login information to restore access. Fidelity emphasizes that:
- The blocks affect digital access only
- Clients can still transact by phone
- Investors may work with outside advisors—as long as access occurs within plan sponsor guidelines and custodial rules
The article notes that platforms reliant on credential sharing operate outside of that oversight, which is why Fidelity and other custodians are increasingly restricting them.
Credential Sharing vs. “Front-Door” Access
The NerdWallet piece features commentary from Brenden Gebben, CEO of Absolute Capital, who explains that advisors still have legitimate ways to manage Fidelity 401(k) accounts—without using client credentials.
According to Gebben, compliant access requires both formal custodial agreements as well as adherence to plan guidelines. When those conditions are met, advisors can obtain what Gebben calls “front-door access”—where the advisor is formally recognized on the account, trades are clearly attributable, and a clean audit trail exists.
Why Custodians Are Increasing Scrutiny
The article reinforces a growing industry consensus: credential sharing creates risk for everyone involved. Without formal recognition at the custodian and plan level, it becomes difficult to determine whether trades were placed by the client or the advisor—raising compliance and liability concerns.
As Gebben notes in the article, Fidelity is unlikely to be the last custodian to act. Other major providers may follow suit as security and governance standards evolve.
What This Means for RIAs and Their Clients
For advisors managing held-away 401(k), 403(b), and 457 accounts, the NerdWallet article highlights an important shift:
- Relying on client credentials is increasingly unstable
- View-only advice limits advisor value
- Plan- and custodian-aligned access offers a more durable path
For clients, it underscores the importance of working with partners who can operate within plan guidelines, rather than relying on access methods that may suddenly disappear.
Why Wait for the Rollover®
The takeaway from NerdWallet is clear: investors want help with their workplace retirement accounts now—and custodians are signaling that this help must occur through secure, transparent, and plan-aligned structures.
Absolute Capital’s Workplace Investment Navigator was built for this environment, enabling advisors to manage held-away workplace assets without credential sharing, while integrating those accounts into holistic planning and reporting at scale.
Read the NerdWallet article here:
Read Article
As Covered by NerdWallet: Locked Out of a Fidelity 401(k)?
A recent NerdWallet article, “Locked out of your Fidelity 401(k)? Here’s an explanation,” highlights the real-world impact of Fidelity’s tightening restrictions on credential sharing—and why both advisors and clients are being forced to rethink how workplace retirement accounts are managed.
As the nation’s largest 401(k) recordkeeper, Fidelity has taken decisive steps to limit third-party access to participant accounts when that access relies on client usernames and passwords. The changes, which began with restrictions on screen scraping in 2023 and expanded in 2024, are designed to address cybersecurity, data integrity, and audit-trail concerns.
Why Some Clients and Advisors Are Being “Locked Out”
According to NerdWallet, Fidelity has acknowledged that accounts may be temporarily blocked when credential sharing is detected. In those cases, clients are asked to reset their login information to restore access. Fidelity emphasizes that:
- The blocks affect digital access only
- Clients can still transact by phone
- Investors may work with outside advisors—as long as access occurs within plan sponsor guidelines and custodial rules
The article notes that platforms reliant on credential sharing operate outside of that oversight, which is why Fidelity and other custodians are increasingly restricting them.
Credential Sharing vs. “Front-Door” Access
The NerdWallet piece features commentary from Brenden Gebben, CEO of Absolute Capital, who explains that advisors still have legitimate ways to manage Fidelity 401(k) accounts—without using client credentials.
According to Gebben, compliant access requires both formal custodial agreements as well as adherence to plan guidelines. When those conditions are met, advisors can obtain what Gebben calls “front-door access”—where the advisor is formally recognized on the account, trades are clearly attributable, and a clean audit trail exists.
Why Custodians Are Increasing Scrutiny
The article reinforces a growing industry consensus: credential sharing creates risk for everyone involved. Without formal recognition at the custodian and plan level, it becomes difficult to determine whether trades were placed by the client or the advisor—raising compliance and liability concerns.
As Gebben notes in the article, Fidelity is unlikely to be the last custodian to act. Other major providers may follow suit as security and governance standards evolve.
What This Means for RIAs and Their Clients
For advisors managing held-away 401(k), 403(b), and 457 accounts, the NerdWallet article highlights an important shift:
- Relying on client credentials is increasingly unstable
- View-only advice limits advisor value
- Plan- and custodian-aligned access offers a more durable path
For clients, it underscores the importance of working with partners who can operate within plan guidelines, rather than relying on access methods that may suddenly disappear.
Why Wait for the Rollover®
The takeaway from NerdWallet is clear: investors want help with their workplace retirement accounts now—and custodians are signaling that this help must occur through secure, transparent, and plan-aligned structures.
Absolute Capital’s Workplace Investment Navigator was built for this environment, enabling advisors to manage held-away workplace assets without credential sharing, while integrating those accounts into holistic planning and reporting at scale.
Read the NerdWallet article here:
Read Article
