The Fight Over Who Gets to Log Into Your 401(k)

Fidelity — the company that holds the 401(k) accounts of about one in four Americans with employer-sponsored retirement plans — recently told tens of thousands of its customers they'd be locked out if they used a third-party tool to let their advisor manage their account. No more online access. Reset your password, and say goodbye to the outside advisor who was trading inside your retirement account on your behalf.

That was weird. And it gets weirder: Fidelity eliminated its own screen scraping in late 2023, moving to API-based data sharing. But that didn't mean the door opens for everyone. Fidelity says it works with "authorized" partners — plan sponsors and advisors that go through the recordkeeper directly. The company is not objecting to the method. It's objecting to who gets to use it and whether the plan sponsor has approved the arrangement.

This isn't just a tech company versus an incumbent. It's a fight over who controls the plumbing of roughly $13 trillion in American defined-contribution retirement assets. And the classification boundary at the center of it — whether logging into someone's account through a third party is "authorized access" or "unauthorized credential sharing" — is the same boundary that has appeared in banking, brokerage, and data-sharing disputes for over a decade.

What Pontera actually does

Let me step back to the mechanism.

You have a 401(k) account at Fidelity, Vanguard, Schwab, or one of dozens of other "recordkeepers" — the companies that hold and administer employer-sponsored retirement plans. Your financial advisor manages your brokerage account, your IRA, your tax situation. But your 401(k)? That's out of reach. Not because your advisor doesn't want to manage it, but because your employer chose the recordkeeper, and your advisor has no way to get in and trade inside the plan.

You're a captive consumer. You can't move your 401(k) to a different recordkeeper without changing jobs. You can't easily roll it over to an IRA without potentially losing employer matching, tax-advantaged growth, or creditor protection. And most importantly for your advisor — who charges fees based on assets — they can't include your 401(k) in the "assets under advisement" they bill against.

Pontera was built to bridge this gap. Founded in 2012 and backed by investors like Lightspeed Venture Partners and ICONIQ Growth, Pontera gives financial advisors a platform to securely access and trade inside their clients' held-away 401(k) accounts. The client enters their own 401(k) login credentials into Pontera's system. Pontera's software logs in on the client's behalf. The advisor can then rebalance, trade, and monitor the account — all without ever seeing the password or having custody of the funds.

Pontera says the arrangement is secure because advisors cannot withdraw funds or change beneficiaries — they can only trade within the plan's existing investment lineup. Every action creates a record.

The basic point is: Pontera is infrastructure. It doesn't give financial advice. It doesn't hold money. It's a pipe that connects a category of assets — the roughly $13 trillion sitting inside employer retirement plans — to the advisors who already manage the rest of their clients' money.

The security objection doesn't survive its own test

Fidelity's stated reason for blocking these tools is security. Sharing login credentials with a third party, Fidelity argues, is risky. It could void the company's customer protection guarantee if fraud occurs. Schwab echoed the same concern when it joined Fidelity in asking clients to reset their credentials.

Here's the thing. Credential-based aggregation has been the dominant method of connecting financial accounts to third-party tools for years. Personal finance apps, budgeting platforms, and even recordkeepers themselves have relied on it to build consolidated financial pictures for their clients. The CFPB identified tens of millions of consumers using these connections when it drafted its data-sharing rule.

The official description is "security risk." In practice, this is closer to a gatekeeping problem: a way for the recordkeeper to decide which third parties get access to their platform and which don't. The security concern isn't fake — there are real cybersecurity risks in credential sharing. But the risk exists regardless of whether the third party is called Fidelity eMoney or Pontera.

And there's a subtler incentive layer that Pontera itself has revealed. Pontera doesn't just market to advisors — it markets to recordkeepers, too. On its own website, Pontera tells recordkeepers that its platform helps "reduce rollovers with secure, advisor-enabled management." Why does this matter? Because recordkeepers make money from assets under administration. When participants roll their 401(k)s into IRAs at other custodians upon leaving a job, the recordkeeper loses those assets and the fees they generate. Pontera argues that if advisors can manage the 401(k) in place, advisors are less likely to recommend rolling the money out.

So Pontera is simultaneously fighting Fidelity over access and selling itself to recordkeepers as a way to keep assets from leaving. The two positions aren't contradictory if you understand the plumbing: Pontera needs recordkeepers to allow access, and recordkeepers need tools like Pontera to reduce asset leakage. The conflict with Fidelity is a dispute about the terms of access, not a rejection of the underlying model.

The regulatory fault line

The fight has spilled into state regulation. The North American Securities Administrators Association (NASAA) — which sets model rules that individual states adopt — has a rule that prohibits advisors from accessing client accounts using the client's own login credentials. On its face, the rule targets advisors who hold their clients' passwords directly. But states like Washington and Missouri have interpreted it more broadly: if the credential sharing happens through a third-party tool like Pontera, it's still a violation, because the third party holds effectively the same access.

Pontera's response is to distinguish between "the advisor holding credentials" (which the rule bans) and "a vetted technology platform receiving credentials with the client's consent" (which Pontera argues the rule was not designed to cover). It's a plausible distinction, but it depends on whether regulators agree that a third-party intermediary changes the risk profile in a meaningful way.

The federal side of this question is the Consumer Financial Protection Bureau's Section 1033 rule, finalized in October 2024, which would have required financial institutions to provide consumers with secure API-based data access to authorized third parties — essentially replacing screen scraping with a regulated, standardized plumbing layer. The rule faced immediate legal challenges from the Bank Policy Institute and state bankers, and the CFPB itself has acknowledged the rule may exceed its statutory authority. A court stayed the rule in July 2025, allowing the CFPB to initiate a new rulemaking process rather than having the rule vacated entirely. The original compliance timeline has been pushed into uncertainty.

This means there is no regulatory resolution on the horizon. The classification boundary — whether third-party credential access is authorized or not — remains contested, and it's the single thing that determines whether Pontera's business model can scale.

What this means for the economics

Pontera raised $60 million in December 2023 in a round led by ICONIQ Growth, bringing total funding to somewhere between $160 million and $220 million, depending on the source. The company is private, so you can't buy it directly. But understanding its position helps you see the competitive dynamics inside the broader retirement services industry — and the companies you can invest in.

The defined-contribution plan market — the world of 401(k)s and similar workplace retirement plans — was approaching $13 trillion in assets with nearly 140 million participants in 2025, according to the 2025 PLANSPONSOR Recordkeeping Survey. Total U.S. retirement assets hit $49.1 trillion at the end of 2025, accounting for about 34 percent of all U.S. household financial assets, according to the Investment Company Institute. This is not a niche market.

The companies that sit on the "plumbing side" of this — recordkeepers like Fidelity, Vanguard, Charles Schwab, and Empower — derive significant, stable, asset-based revenue flows. Their business model is simple: hold the assets, collect fees, keep them from leaving. Every dollar that stays in a 401(k) rather than rolling over is a dollar of recurring revenue.

So when Pontera argues that "consumer choice" means advisors should be able to manage held-away 401(k)s, the recordkeepers' counterargument is equally simple: the 401(k) plan is a product the employer purchased, with governance rules, fiduciary responsibilities, and security guarantees that were negotiated at the plan level — not the individual participant level. Letting third-party trading tools access individual accounts without plan sponsor oversight creates fiduciary and liability uncertainty.

Neither side is wrong. They're just arguing about whose boundary applies. The participant's right to choose their advisor, or the plan's right to control access to its accounts.

Where the money is and where it goes

For an investor, the useful takeaway isn't about who's right in a consumer-rights debate. It's about understanding the direction of the incentives.

Recordkeepers have enormous incentives to keep the 401(k) ecosystem closed. Their revenue is a small percentage of assets under administration, multiplied by tens of millions of participants. The rollover market — where participants move 401(k) assets into IRAs upon leaving jobs — represents a constant threat to those assets. Recordkeepers respond by building tools that keep money inside the plan, including in-plan advisory services and managed accounts. They also resist third-party access that could make rollovers easier.

Advisors have enormous incentives to get inside the 401(k). Assets under advisement is how they measure their business and grow their fee revenue. A typical client might have most of their investable wealth locked in a 401(k) they can't touch. Pontera and similar tools represent a growing category of firms trying to unlock those assets.

The classification boundary — whether screen scraping is "authorized access" or "credential sharing" — is what decides which side wins, at least until the regulatory framework settles. And right now, it's unsettled.

The CFPB's Section 1033 rule, if it survives in some form, would mandate secure API access and could resolve this by giving third parties a clean, regulated way in. But the rule is stayed, the CFPB has admitted it may overreach, and the banks that challenged it have powerful allies in Congress. I don't know when or whether a replacement rule will look the same, cover retirement plans, or actually pass.

What I do know is this: the companies holding the assets — Fidelity, Vanguard, Schwab — have the incentive, the balance sheet, and the regulatory relationships to defend their position. The companies trying to get in — Pontera and its peers — have a real market need and venture capital backing, but they're building their business model on a classification that regulators haven't affirmed and incumbents are actively contesting.

That's not a prediction about who wins. It's a description of what each side is betting on. The recordkeepers are betting that the boundary between plan governance and individual access will be enforced. Pontera is betting that consumer choice and advisor access will override it. The classification boundary is the thing both sides are buying — and the thing that determines which side gets to collect.