Government Portals — What's Real, What's Free
Never pay a “government helper” site. The real portals are all free.
Only .gov sites are official
Many sites like get-medicare-info.com, ssa-benefits.org, or federal-benefits-help.com charge a fee to help with forms that are free on the real government site. Some are private businesses. Some are outright scams that steal your personal information. Before entering your Social Security number, Medicare number, or bank info on any site, check the web address. Real federal portals end in .gov.
Not sure if a site is real? Check it with our scam detector.
12 portals worth knowing
Tap any portal below to see what it does, the exact web address, how to set up an account, and the most common gotchas. Everything here is free and operated by a federal or state government.
Login.gov and ID.me — the two keys to most federal sites
Most federal portals now ask you to sign in with one of these two services. Setting up an account once means you can re-use it across Social Security, VA, IRS, USAJobs, SBA, Medicare, and more.
Login.gov (preferred)
Run by the federal government itself. Free, no data sold, and works across almost every federal agency. If you are new to federal portals, start here.
- Go to login.gov and click “Create an account”.
- Enter your email and pick a strong password (at least 12 characters).
- Set up a second login step: a text message code, an authenticator app like Google Authenticator, or a physical security key.
- Save your backup codes in a safe place (a notebook by your computer is fine).
- For sites like SSA or IRS that need “verified” identity, Login.gov will then ask for a photo ID and a short selfie.
ID.me
A private company under federal contract. Required at the IRS and accepted by the VA and SSA. Slightly more invasive up front (video selfie) but handy if you already have an account.
- Go to id.me and click “Sign Up”.
- Choose your second-step method — text code, authenticator app, or physical key.
- Upload a photo of your driver license or passport and hold it flat in good lighting.
- Record a short selfie video when prompted — same face, same lighting, no hat or glasses.
- If automated verification fails, request a Trusted Referee video call — a real person will help in about 15-30 minutes.
Text code or authenticator app — which second step to pick
Both work. A text message code is simplest — a 6-digit number arrives by SMS whenever you log in. An authenticator app (Google Authenticator, Microsoft Authenticator, or Authy) runs on your phone without needing cell service and is harder for scammers to intercept. If you travel internationally or have spotty cell service, the app is more reliable.
How to recover if you lose your phone: use the backup codes you saved at setup. If you did not save them, each service has a recovery path — usually a new photo ID check by mail, which takes 5-10 days.
Medicare enrollment windows — the dates that matter
Medicare has strict dates. Missing a window can mean a late penalty you pay for the rest of your life. Here are the windows every senior should know, in plain English.
Initial Enrollment Period
Your first chance to sign up for Part A (hospital), Part B (doctor), and a Medicare Advantage or Part D drug plan. If you miss it without creditable coverage elsewhere, you may pay a lifetime late penalty.
Annual Open Enrollment
Review your current plan, switch between Original Medicare and Medicare Advantage, or change your Part D drug plan. Changes take effect January 1.
Medicare Advantage Open Enrollment
If you are on Medicare Advantage, you can switch to a different Advantage plan once, or drop Advantage and go back to Original Medicare plus a Part D plan.
General Enrollment Period
A second chance to enroll in Part B if you missed your Initial Enrollment. Coverage begins the month after you enroll. Late penalties may still apply.
Special Enrollment Periods
You get a short window (usually 8 weeks to 2 months) to enroll without penalty. Call 1-800-MEDICARE or use your mySocialSecurity account to claim one.
Social Security — when to take it
The single biggest financial decision most retirees make. Here is the plain-English version of the rules — run your own numbers in your mySocialSecurity account before you decide.
Age 62: earliest you can file
Filing at 62 locks in a permanently reduced benefit — roughly 30% less than waiting until your full retirement age. Useful if you have health concerns, are out of work, or your spouse already claims a larger benefit.
Full Retirement Age (66 or 67)
Your full benefit — no reduction, no bonus. Most people born in 1960 or later reach full retirement at 67. Earnings no longer reduce your check once you hit this age.
Age 70: the maximum check
Every month you delay past full retirement age adds about 2/3 of 1% to your lifelong benefit — capped at age 70. That is roughly a 24 to 32% bump over filing at full retirement.
Spouse and survivor benefits
A spouse can claim up to 50% of the higher earner’s benefit while both are alive. A surviving spouse can step up to 100% of the deceased spouse’s benefit — claiming early reduces this permanently.
WEP and GPO
If you worked in a job that did not pay into Social Security (some teachers, firefighters, railroad workers, foreign pensions), the Windfall Elimination Provision (WEP) or Government Pension Offset (GPO) may reduce your check. Congress repealed WEP and GPO in January 2025 — but if you filed before, contact SSA to recalculate.
Earnings test
If you claim before full retirement age and still work, SSA withholds $1 for every $2 you earn above the annual limit (about $22,320 in 2024). The year you reach full retirement, the rule loosens, then disappears.
Red flags of scam “help” sites and callers
Any one of these is reason to pause. Two or more means walk away and go to the real .gov site directly.
- The web address ends in .com, .net, or .org instead of .gov. Real federal portals always end in .gov.
- The site charges a fee to "help you apply" for benefits that are free directly.
- You are asked for your Social Security number or Medicare number by email, text, or phone out of the blue.
- The message says "Urgent — your benefits are about to expire" or "Act now or lose coverage".
- You are asked to pay with gift cards, wire transfer, cryptocurrency, or a prepaid debit card.
- The caller threatens arrest, deportation, or loss of benefits if you do not act immediately.
- A "Social Security officer" or "Medicare agent" calls unprompted — no federal agency cold-calls about benefits.
- The website looks almost identical to a real one but the URL is slightly off (medicare.com vs medicare.gov).
Free help that IS real
Paid “helper” services often sell you services that these free organizations already provide. Start here first.
SHIP — State Health Insurance Assistance Program
Free, unbiased Medicare counseling in all 50 states. Trained volunteers help you compare plans, untangle a denied claim, or figure out what Medicare covers. Not insurance agents — no commissions.
shiphelp.orgAARP Foundation Tax-Aide
Free tax prep by IRS-certified volunteers, February through April. Open to anyone, with a focus on people 50+ and low-to-moderate income. Find a site at aarp.org/money/taxes/aarp_taxaide.
aarp.org/money/taxes/aarp_taxaideVITA / TCE (IRS Free Tax Prep)
Volunteer Income Tax Assistance (income under about $64,000) and Tax Counseling for the Elderly (anyone 60+). Find a site at irs.gov/vita.
irs.treasury.gov/freetaxprepLegal Aid
Free civil legal help for low-income people — landlord disputes, denied benefits, consumer scams, estate planning. Find your local office at lsc.gov/about-lsc/what-legal-aid/find-legal-aid.
lsc.gov/find-legal-aidArea Agency on Aging (AAA)
Every county has one. They coordinate meals, rides, home care, and caregiver support for people 60+. Find yours at eldercare.acl.gov or call 1-800-677-1116.
eldercare.acl.gov211 — social services referral
Dial 211 or text your ZIP code to 211. Free, 24/7, in most U.S. communities. A live person helps you find food, housing, utility aid, and crisis support.
211.orgFour rules for portal account security
- Use a unique password for every portal. A password manager like Bitwarden (free) or 1Password does the remembering for you.
- Turn on two-step login everywhere it is offered. This is the single biggest security step you can take.
- Never click a “verify your account” link in an email. Type the address into your browser yourself, or use a bookmark you saved.
- Bookmark the real URL the first time you visit, then use the bookmark going forward. Scammers rely on misspelled copycat addresses.
Troubleshooting — what to do when you're stuck
A few of the most common roadblocks, with the fix for each.
Locked out of Login.gov
Go to login.gov and click "Forgot your password?" Enter the email on the account. If you lost your second-step method (phone or authenticator), click "I need help signing in" — you will be asked to re-verify with a photo ID, which takes about 10 minutes.
ID.me video verification failed
Make sure you are in a well-lit room, face the camera straight on, and hold your ID flat with no glare. If automated verification fails twice, request a video call with a Trusted Referee — a real person will verify you by video. Usually a 15-30 minute wait.
Cannot remember the answers to security questions
Most federal portals now avoid security questions in favor of a text code or authenticator app. If you are stuck on an old account, call the agency directly — SSA: 1-800-772-1213, Medicare: 1-800-MEDICARE, IRS: 1-800-829-1040.
My address does not match what SSA has on file
First, update your address with the U.S. Postal Service at moversguide.usps.com — most federal agencies cross-check there. Then update SSA directly through your mySocialSecurity account. Expect a few days for the databases to sync.
The site keeps making me re-verify every time
This is a security feature, not a bug — sensitive portals re-check identity on every major action. Saving your login in a password manager makes it painless. Two-step codes take about 15 seconds.
I do not have a smartphone for the two-step code
All of these portals will mail a one-time code to your address if you have no phone. Call the agency and ask for "backup authentication by mail". Works but takes 5-10 days.
Frequently asked questions
Why does every portal want me to re-verify my identity?
Identity theft of benefits (fake tax returns, fraudulent Social Security claims) has exploded. Re-verifying blocks someone who steals your password but does not have your ID or your phone. It feels like a hassle — it protects real money.
Is ID.me safe? Isn’t it a private company?
ID.me is a private company that contracts with the federal government to verify identities. They are subject to federal oversight and a Privacy Act agreement. If you would rather not use them, Login.gov (a government-run alternative) now covers almost every federal site.
I got a call from someone saying they were with Social Security — is that real?
Almost certainly not. Social Security does not cold-call. If you get a call like this, hang up, go to ssa.gov directly, and log in to see any real messages. Real communications also come by mail.
Do I need a fancy online account to get Medicare?
No. You can sign up for Medicare by calling 1-800-MEDICARE, visiting your local Social Security office, or mailing a paper form. The online account is a convenience, not a requirement.
What if I cannot do any of this online?
Every agency still offers phone and in-person help. Call 211 for a referral to a local agency that will sit with you, or ask a trusted family member. Paper applications are still accepted everywhere. No one should be turned away for not being online.
Which portal should I set up first?
If you are 62 or older: mySocialSecurity (ssa.gov/myaccount). If you are 65 or older: medicare.gov. If you are a veteran: VA.gov. If you have no idea what you qualify for: benefits.gov — it screens for everything at once.