PECOS Login Guide: How to Access Your Medicare Enrollment Account
PECOS is accessed at pecos.cms.hhs.gov using your CMS Identity & Access Management (I&A) System credentials. PECOS does not have its own separate username and password. The same I&A account controls access to NPPES, PECOS, and other CMS systems. If you cannot log in, the issue is almost always with the I&A System: an expired password, a forgotten user ID, or a locked account. Resolve those at nppes.cms.hhs.gov/IAWeb before returning to PECOS.[1]
The I&A System and PECOS Relationship
Before attempting to log in, it helps to understand what is happening behind the scenes. CMS uses a central authentication gateway called the Identity and Access Management (I&A) System, located at nppes.cms.hhs.gov/IAWeb. One I&A account gives you access to multiple CMS systems:
- NPPES — to apply for and manage your NPI number
- PECOS — to enroll in Medicare or update and revalidate your enrollment
- Medicare Promoting Interoperability Program — to register for EHR incentive payments
When you click "Log in" at pecos.cms.hhs.gov, you are authenticating through the I&A System. If the I&A System has a problem — an expired password, a locked account, or a forgotten user ID — you cannot reach PECOS until that I&A issue is resolved first.[1]
Passwords in the I&A System expire every 60 days. If your PECOS access redirects you to a password reset page, this is the reason. The I&A System will warn you of the upcoming expiration when you log in, so it is worth checking your account periodically even when you have no active enrollment work.[1]
How to Log In to PECOS: Step by Step
The steps below cover the standard login path for an individual provider or a credentialing staff member who already has an established I&A account and an active connection to a PECOS enrollment record.
-
Confirm you have an I&A System account.
If you have never registered, go to the I&A System registration page and create your user ID and password. Organizations must also designate an Authorized Official (AO) through this same process before anyone can work in PECOS on the organization's behalf.
-
Navigate to the PECOS login page.
Go to pecos.cms.hhs.gov. The site will present a CMS login screen powered by the I&A System.
-
Enter your I&A System user ID and password.
These are the same credentials you use for NPPES. If your password has expired, the I&A System will automatically redirect you to reset it before continuing.
-
Navigate to your enrollment record.
Once logged in, find your enrollment by selecting "View Enrollments" or locating your organization in the PECOS dashboard. From here you can submit applications, update existing information, or check your revalidation status.
Your NPI is a prerequisite for Medicare enrollment. If you do not yet have one, you must obtain it through NPPES before beginning the PECOS enrollment process. You can look up your existing NPI here or read our guide on how to apply for an NPI.
Common PECOS Access Problems and How to Fix Them
The scenarios below cover the most frequent reasons providers cannot reach their PECOS account. Click any item to expand the fix.
This is almost always a password expiration redirect, not a malfunction. PECOS sends you to the I&A System at nppes.cms.hhs.gov/IAWeb when your password has expired or needs to re-verify your identity. Reset your password there and then return to PECOS.
If you are being redirected to a site that does not end in .cms.hhs.gov or .cms.gov, do not enter your credentials and contact the EUS Help Desk immediately.
Go to the I&A System at nppes.cms.hhs.gov/IAWeb and use the self-service options on the login page: "Forgot User ID" sends your user ID to the email address on your account, and "Forgot Password" lets you reset it using your security questions.
If you no longer have access to the email address on file, or cannot answer your security questions, call the EUS Help Desk at 1-866-484-8049 (Monday through Friday, 7 AM to 7 PM ET) for manual identity verification. The I&A FAQs document also covers these scenarios step by step.[1]
I&A System passwords expire every 60 days. When PECOS detects an expired password during your login attempt, it redirects you to the I&A System to reset it automatically — this is expected behavior, not an error.[1]
The I&A System also displays the number of days remaining until your password expires each time you log in. Resetting proactively before it expires prevents the redirect interruption. After resetting, return to pecos.cms.hhs.gov and log in normally.
If PECOS shows an error caused by the system itself — slow loading, a broken screen, a page that will not process data, or an error that appears even when your credentials are valid — this is a technical issue for the CMS External User Services (EUS) Help Desk.[1]
EUS Help Desk: 1-866-484-8049 (TTY: 1-866-523-4759) — [email protected] — Monday through Friday, 7 AM to 7 PM ET — Portal: eus.cms.gov
EUS handles technical system access issues only. For questions about what to enter on an enrollment form, contact your MAC instead.
This usually means one of three things: you are a Surrogate or SEU whose access connection has not yet been approved by the AO; you are logged in with a personal I&A account while the enrollment is tied to a different account; or the AO needs to re-approve the connection between your I&A user ID and the practice's PECOS record.
Contact your organization's AO or Access Manager to verify your connection status. If the AO themselves cannot see the enrollment, contact your MAC using the MAC locator at cms.gov.
Who Can Access PECOS: User Roles Explained
Because PECOS contains sensitive Medicare enrollment information, CMS controls access through a defined hierarchy of user roles. Understanding these roles is especially important for group practices, hospitals, and credentialing teams where multiple people need to work in the same account.[1]
| Role | Represent Organization | Manage Staff | Approve Connections | Act on Behalf of Provider |
|---|---|---|---|---|
| Individual Provider | Yes | Yes | Yes | Yes |
| Authorized Official (AO) | Yes | Yes | Yes | Yes |
| Access Manager | Yes | Yes | Yes | Yes |
| Staff End User (SEU) | No | No | No | Yes |
| Surrogate | No | No | No | Yes |
An Authorized Official (AO) must be someone who can legally bind the organization to CMS requirements — typically a CEO, CFO, general partner, chair of the board, or direct owner. Only an AO can sign an initial enrollment application for an organization. AOs are registered through the I&A System and are responsible for approving all subsequent staff access requests.
Access Managers can be delegated by AOs. They can initiate or accept connections, manage staff, and sign changes, updates, and revalidations — though not an initial enrollment application. CMS recommends using the same person as both the I&A System AO and the PECOS Access Manager.
Staff End Users (SEUs) and Surrogates both allow billing staff or credentialing teams to work inside PECOS — viewing, accessing, and modifying information — without the ability to sign applications, manage other staff, or initiate connections. Both must be explicitly invited and approved by an AO or Access Manager before their access is active.
Who to Contact When Something Goes Wrong
One of the most common sources of frustration with PECOS access is contacting the wrong help desk. CMS splits support across three distinct contacts and each one only handles a specific category of problem.[1]
| Problem Type | Contact and How to Reach Them |
|---|---|
| System errors, PECOS website malfunction, broken screens, printing failures, technical glitches inside PECOS | EUS Help Desk 1-866-484-8049 (TTY: 1-866-523-4759) [email protected] M–F, 7 AM–7 PM ET — eus.cms.gov |
| I&A System credential issues: forgot user ID or password, locked account, I&A registration problems | I&A System Help (via EUS) Same EUS number above; specify it is an I&A System issue Self-service at nppes.cms.hhs.gov/IAWeb |
| Enrollment content questions: what to enter on a form, application status, revalidation timelines, MAC-specific guidance | Your MAC Find your MAC at cms.gov/MAC-info |
| Not sure who to call for a particular issue | CMS Provider Enrollment Assistance Guide Published at cms.gov/Medicare/Provider-Enrollment-and-Certification |
Why NPPES and PECOS Must Both Be Updated
A common administrative mistake is assuming that updating provider information in one system automatically carries over to the other. It does not. NPPES (where NPI records live) and PECOS (where Medicare enrollment lives) are entirely separate databases. The legal business name in PECOS must match the name on file in NPPES, but a change in one does not propagate to the other.[2]
If a provider changes their practice address, legal name, or organizational structure, that change must be reported to both systems independently. Incorrect or mismatched data across NPPES and PECOS can trigger credential inquiries, payment delays, or claims rejections.
When a provider changes their legal business name in NPPES but not in PECOS, Medicare claims may fail validation because the name on the claim does not match the enrollment record. Always update both systems after any name or address change.[2]
You can check the public NPPES record for any provider using our NPI lookup tool and cross-reference it against what you have on file in PECOS. If the public NPI record shows outdated information, the provider must update their NPPES record directly at nppes.cms.hhs.gov.
Frequently Asked Questions
The official PECOS login page is at pecos.cms.hhs.gov. You will be prompted to enter your I&A System user ID and password. PECOS does not have its own separate credentials; the same I&A account is used to access both NPPES and PECOS.
PECOS uses the CMS Identity and Access Management (I&A) System at nppes.cms.hhs.gov/IAWeb for authentication. If your I&A password has expired (passwords expire every 60 days), PECOS automatically redirects you to the I&A System to reset it. This is expected behavior, not a website error. If you are redirected to a site not ending in .cms.hhs.gov or .cms.gov, do not enter your credentials.
Yes. Individual providers can authorize a Surrogate or Staff End User (SEU) to access PECOS on their behalf. Organizations must first designate an Authorized Official (AO) through the I&A System. The AO can then invite Access Managers, Surrogates, and SEUs. Surrogates and SEUs can view, access, and modify CMS system information but cannot sign enrollment applications or manage staff.
Go to the I&A System at nppes.cms.hhs.gov/IAWeb and use the "Forgot User ID" function on the login page. The system will send your user ID to the email address on file. If you no longer have access to that email address, call the EUS Help Desk at 1-866-484-8049 (Monday through Friday, 7 AM to 7 PM ET) for manual identity verification.
No. NPPES and PECOS are separate systems. Updating your NPI record in NPPES does not automatically update your Medicare enrollment information in PECOS. Changes such as a new legal business name or practice address must be reported in both systems independently. Incorrect data in either system can trigger unnecessary credential inquiries or claims issues.
System errors, screen navigation problems, and printing issues within PECOS are handled by the CMS External User Services (EUS) Help Desk at 1-866-484-8049 (TTY 1-866-523-4759), email [email protected], Monday through Friday 7 AM to 7 PM ET. The EUS portal at eus.cms.gov also offers live chat and ticket history. For non-technical enrollment questions, contact your MAC instead.
Check a provider's PECOS enrollment status. Search by name or NPI to see the PECOS enrollment flag, Medicare participation status, and opt-out information where available.
PECOS LookupSources
This guide is based on the following official government publications. NPI Profile summarizes official documentation for convenience; the source documents remain the authoritative reference.
- Centers for Medicare & Medicaid Services, Medicare Learning Network. Medicare Provider Enrollment (MLN9658742). 2026 edition. I&A System section: one account for multiple systems, 60-day password expiration, PECOS redirect behavior on expired passwords, user roles and responsibilities table (AO, Access Manager, SEU, Surrogate), EUS Help Desk contact information and hours, MAC contact routing guidance.
- Centers for Medicare & Medicaid Services. Provider Enrollment, Chain, and Ownership System (PECOS) Fact Sheet. December 2024. Getting Started with PECOS: I&A login requirement, NPPES-PECOS data independence, name-matching requirement across systems, consequences of mismatched data.
- Centers for Medicare & Medicaid Services. CMS-855A Medicare Enrollment Application for Institutional Providers (09/24 edition). Section 15 Certification Statement: Authorized Official definition, legal binding authority, delegated official restrictions, AO signature requirements for initial applications.
