Dear HealthEquity Partner,
You are listed as a contact who may exchange files with HealthEquity on our SFTP system.
We’re contacting you with important information about an upcoming change to our SFTP sites that may impact your send, receipt and transfer of files with HealthEquity. Please review the information below or forward to your IT department or provider (or your 3rd party vendor if applicable) to ensure that SFTP URLs and IP ranges are reviewed and updated, if necessary, to avoid service disruption and ensure file transfer continuity.
What and when is the HealthEquity SFTP change?
Cutover date | August 25, 2026, at 12:00 PM MST |
Retiring SFTP URL | ftp.wageworks.com — must be replaced |
Go Forward SFTP URL | |
New IP addresses* | 69.89.60.0/24 |
New ports | TCP: 22, 80, 443, 989, 990, 3000–3003 |
Traffic direction | Inbound and Outbound |
Action Required | Update firewall and allowlist to include the IP ranges and ports above |
*IMPORTANT: Do not remove existing IPs. Add the new IP addresses alongside the current ones. The existing IPs must remain active until August 25. After August 25, the existing IPs will no longer be required and can be removed once the cutover is confirmed.
If you exchange files with HealthEquity via the retiring SFTP URL, you must update your connection to the new URL and adjust your firewall/IP allowlist to the new IP ranges. These changes can be made and tested immediately, and are required before cutover on August 25, 2026, 12:00 PM MT to avoid service disruption.
Does your organization need to take action?
Perform a check of your current SFTP and IP addresses against the SFTP Connectivity Requirements below
If you use a third-party file vendor, please contact your vendor directly to make the required change or to assist with completing the change
If your settings meet requirements, no further action is necessary
If your settings do not meet requirements, please see Act Now below
SFTP Connectivity Requirements
ID | Category | Addresses | Purpose | Ports |
1 | Required | 69.89.60.0/24 | HealthEquity SFTP file transfer endpoint — secureftp.healthequity.com | TCP: 22, 80, 443, |
Act Now if not currently meeting SFTP Connectivity Requirements
Please act immediately to replace the URL ftp.wageworks.com with the URL secureftp.healthequity.com.
Any connections using ftp.wageworks.com or a hardcoded IP address must be updated to avoid service disruption.
IP ranges associated with secureftp.healthequity.com are also updated. Please review SFTP connectivity requirements and adjust IP ranges as necessary.
Do not remove existing IPs. Add the new IP addresses alongside the current ones. The existing IPs must remain active until after August 25th, with confirmation of cutover they will no longer be needed and can be removed.
Ensure that there are no firewall rules in place that will block the IP ranges.
We know that changes like this can take time and are providing early notice before ftp.wageworks.com URL is retired.
FAQs
Your Connections to HealthEquity’s SFTP Server
What if your provider/IT Dept will not whitelist the entire range given?
Allow these IP addresses: 69.89.60.1 and 69.89.63.1 if you connect to HealthEquity’s SFTP server (secureftp.healthequity.com). You have until noon MT August 25, 2026 to make the required changes.
What is the experience if your organization blocks IPs and an allowance is not created for your SFTP traffic with HealthEquity?
You will not be able to connect to secureftp.healthequity.com to upload or download files.
How can you test the change?
Prior to August 25, verify you can test connections to site1secureftptemp.healthequity.com and site2secureftptemp.healthequity.com from the server that normally transmits your files. These are temporary URLs for testing purposes only and both will be replaced by secureftp.healthequity.com on August 25, 2026, at noon MT. If you successfully connect to those sites (and are already communicating to us via secureftp.healthequity.com), no further changes should be needed on your end.
HealthEquity’s Connection to Your SFTP Server for Us to Upload or Download Files for You
What if your provider/IT Dept will not whitelist the entire IP range given?
Whitelist the following 4 IPs:
69.89.60.2 and 69.89.60.3
69.89.63.2 and 69.89.63.3
What will your organization experience if you use whitelisting, but it is not done for HealthEquity connections to your SFTP server?
HealthEquity will be unable to upload or download files from your SFTP server.
How can you test the change?
Because HealthEquity initiates outbound connections, we will be responsible for verifying connectivity, and we will reach out to specific clients/partners we cannot connect to. HealthEquity will check accessibility from the new IPs to your SFTP site starting on April 30th.
What will a successful connection look like?
An SFTP connection is successful when your client prompts you to accept a new SSH key. The message may vary by client but typically flags the server as “unknown.” This prompt alone confirms connectivity. Accepting the key and continuing with the connection attempt will cause an “Access Denied” error—this is expected and does not affect the test.
What should you do if you are using a Third-Party File Vendor?
Please contact your vendor directly to make the required change or to assist you with completing it. Clients should submit requests directly to their third-party providers to avoid unnecessary escalation.
If you need assistance
You may also contact HealthEquity by email for assistance at ftpsupport@healthequity.com. Please include:
Your name
SFTP username that sends, receives or transfers files
Subject Line: HealthEquity IP Migration Project
A clear description of the issue you are experiencing or your question(s) that are not answered here
Changes must be made before August 25, 2026, 12:00 PM MT. Given the criticality, please act on receipt so we have time to test and validate together. We know updates like this can take time to work through internal processes; these reminders are scheduled to give you an adequate runway.
Sincerely,
HealthEquity IT Operations