FHA Connection Now Requires Identity Proofing for New Users

The Federal Housing Administration is now requiring new FHA Connection users to complete a one-time identity-proofing process before receiving access to the system.

The requirement took effect September 14, 2026, and applies initially to new users. FHA has also warned that existing users will be required to complete the verification process in the future, although the agency has not announced an implementation date for that phase.

FHA announced the change in FHA INFO 2026-20, describing it as part of a broader effort to strengthen identity management, reduce cyber risk and prevent fraud involving federal systems and resources.

Organizations that depend on FHA Connection should update their onboarding procedures immediately. A new employee may receive an FHA Connection user ID but still be unable to access the system until the identity check and required authentication setup are completed.

What New Users Must Provide

The identity-proofing process is administered through Socure, a third-party identity verification provider.

According to HUD’s implementation guide, a new user must provide:

• Personal identifying information;

• A residential address;

• A state driver’s license, state identification card or passport;

• Photographs of the selected identification document; and

• A live photograph, commonly called a selfie, for biometric comparison.

The document and biometric portions of the process must be completed using a smartphone.

Users can transfer the verification session from a computer to a smartphone through either a text message link or a QR code. The smartphone must have a working camera and be compatible with the verification platform.

HUD warns that the verification session is time-limited. If the user’s internet connection is too slow or the allotted time expires, the user may need to restart the process.

Verification Begins at the First Login

A new user begins the process after receiving an assigned FHA Connection user ID.

When the user attempts to sign in for the first time, FHA Connection determines whether that person’s identity has been verified. If verification has not been completed, the system directs the user to Socure.

The user must then enter the requested personal and address information, choose the smartphone transfer method and consent to the identity check.

The smartphone camera is used to capture the identification document. Users presenting a driver’s license or state identification card may be asked to photograph both sides. A passport requires a photograph of the applicable identification page.

Socure validates the document and then instructs the user to take a selfie. The photograph is used to compare the individual with the image contained in the government-issued credential.

FHA Connection displays a confirmation when the identity-verification process has been successfully completed.

Identity Proofing and Multifactor Authentication Are Separate Steps

Identity proofing does not replace FHA Connection’s multifactor authentication requirement.

After receiving a user ID, the user must establish an approved multifactor authenticator, such as Okta Verify or a FIDO2 authentication method. If the user has not already completed that setup, FHA Connection will prompt the user to do so after the Socure verification.

The two controls perform different functions.

Identity proofing confirms that the person requesting access is the individual represented by the submitted information and credential. Multifactor authentication helps protect the account during later sign-ins.

A new user therefore may need to complete both procedures before becoming fully operational in FHA Connection.

Existing Users Are Not Included Yet

HUD states that the initial rollout applies only to new FHA Connection users.

Current users are not required to complete the Socure process under this first phase solely because the September 14 effective date has passed. However, FHA says all existing users will be required to undergo identity verification in the near future.

Organizations should not wait until that expansion is announced to review their user records.

FHA-approved lenders and other participating organizations should identify active FHA Connection accounts, confirm that each account belongs to a current authorized user and remove access that is no longer required.

They should also prepare employees for the possibility that government-issued identification and smartphone access will be necessary when HUD expands the requirement.

Personal Information Requires Careful Handling

The process involves sensitive personal information, including identity documents and a biometric photograph.

Employers should allow users to complete the verification directly through HUD’s authorized workflow. Employees should not be instructed to email copies of identification documents or selfies to managers, coordinators, shared mailboxes or information technology personnel.

Organizations should also avoid creating unnecessary internal copies of the documents used during verification.

Any internal procedure should clearly distinguish between assisting an employee with access problems and collecting that employee’s personal information. Support personnel may help users locate HUD instructions, confirm equipment requirements and contact the FHA Resource Center, but they should not ask employees to transmit credentials through unapproved channels.

Users should confirm that they began the process through the official FHA Connection sign-in page before entering personal information or photographing an identification document.

Operational Delays Are Possible

The new requirement may lengthen the time required to activate an FHA Connection user.

Potential delays include:

• An expired or unavailable government-issued credential;

• Personal information that cannot be validated;

• Poor image quality;

• A smartphone that is incompatible with the verification platform;

• Camera permissions that have not been enabled;

• An expired verification session;

• An unreliable internet connection; or

• Incomplete multifactor authentication setup.

Organizations should account for these issues when onboarding employees who will perform time-sensitive FHA work.

A new employee should not be assigned a deadline-sensitive FHA Connection task on the assumption that access will be available immediately after the user ID is issued.

What FHA Participants Should Do Now

FHA-approved lenders and other FHA Connection participants should revise their user-access procedures to include the new identity-proofing step.

Managers should identify which positions require FHA Connection, request user IDs early and provide new users with the official HUD instructions before their first login.

Organizations should also confirm that employees have access to a compatible smartphone, an acceptable government-issued credential and an approved multifactor authentication method.

Internal help-desk personnel should understand where their role ends. They can assist with general access preparation, but users should complete the identity check themselves and direct unresolved verification questions to the FHA Resource Center.

Organizations should begin planning for the future expansion to existing users. That preparation should include an account inventory, removal of inactive access and advance communication about the expected document and smartphone requirements.

The Bottom Line

New FHA Connection users must now complete a one-time identity-verification process before receiving system access.

The process requires personal information, a residential address, an acceptable government-issued identification document and a selfie submitted through a smartphone. Users must also establish an approved multifactor authentication method.

The requirement currently applies to new users, but HUD says existing users will be included later.

FHA participants should update onboarding procedures, allow additional time for account activation and prepare their current users for the next phase of implementation.