Required Password Reset, Passwordless Authentication Option Coming to the CareFirst BlueCross BlueShield Provider Portal

In today's digital landscape, the security of sensitive information is paramount, especially for organizations like CareFirst that manage several portals, a multitude of users and our members’ personal health information. As part of our ongoing improvements to our portals, CareFirst will require all CareFirst BlueCross BlueShield Provider Portal (CareFirst Direct) users to update their passwords starting on Sunday, August 17, 2025.

When users reset their password, they will also be encouraged to enroll in passwordless authentication—secure and user-friendly alternatives to traditional passwords such as passkeys and biometric verification. Going passwordless simplifies login, makes the login process quicker and results in higher login success rates because users do not have to remember a password. It also provides enhanced security and reduces the risk of a data breach.

Before the rollout of this new requirement, we recommend that providers review this helpful FAQ, which also includes the steps to reset your password and go passwordless.