Case Study · Healthcare

Making secure login feel effortless at CVS Health

Authentication is the front door to everything in the CVS app, prescriptions, pharmacy, account. I redesigned login, biometric, and security flows for iOS and Android to remove friction without compromising safety. This case opens with where I would take the work next, because part of my job is showing the destination, then it walks through what shipped and what it changed.

Product DesigniOS & AndroidSecurity UXUsability Testing
Role
Senior Product Designer
Timeline
2022 to 2026
Platform
Native iOS / Android
Team
Accounts Team
Where I would take it

The vision leads, live and tappable

Where the work landed matters, and the rest of this page walks through it. The part of my craft I care about most, though, is showing where it should go. So the rework opens the case. I rebuilt the same account flow the way I would ship it today. No red header bars, content leads every screen, editing happens in a sheet so you never lose your place, the account greets you with one clear next step, and passkeys move ahead of passwords.

Open the rework full screen
Where it landed

What shipped, rebuilt as live UI

Rather than show static mockups, I recreated the account flow as working UI to show the small interactions that make it feel effortless. iOS push and pop transitions, an animated Face ID toggle, and a save to success morph. Tap through it below, or open it full screen.

Open the shipped prototype full screen
Overview

The front door used by millions

As a designer on the CVS Health Accounts team, I owned the experiences that get people into the app safely, with sign in, biometric setup, secure login, and account management across iOS and Android. These flows touch nearly every customer, every session, which means even small amounts of friction multiply into millions of frustrated moments.

"How do we make logging in faster and easier, without ever making it feel less safe?"
The Challenge

Security and simplicity were pulling in opposite directions

Login was a known pain point. Customers ran into friction during sign in and password recovery, biometric options weren't consistent across platforms, and navigating account settings was harder than it needed to be. Every safeguard we added risked adding a step, and every step we removed risked weakening trust. The work was to resolve that tension, not pick a side.

Original CVS account screen
The original account screen, dense navigation and friction heavy flows.
My Process

From user pain to validated flows

1

Research & discovery

Worked across teams with research to understand where users got stuck, mapping the login and account journeys and the moments that caused drop off and support contacts.

2

Wireframes & exploration

Explored streamlined sign in patterns, biometric (Face ID / fingerprint) setup, and clearer account navigation, balancing security requirements against the fewest possible steps.

3

Prototyping & usability testing

Built interactive prototypes and ran usability testing to validate that the new flows were both faster and clearer, iterating on what the testing surfaced.

4

Developer handoff

Partnered with engineering to ship pixel accurate, accessible implementations across iOS and Android, with specs that held up to platform differences.

The Solution

Faster in, without ever feeling less safe

The redesign resolved the security versus simplicity tension with a few deliberate moves. I helped move the account experience off a third party framed web view and onto a native One Account foundation, which gave people a faster, consistent sign in on iOS and Android and cut our reliance on outside vendors. I introduced phone number as username backed by risk based authentication, so returning users get in with far less friction while the app quietly raises the bar only when a sign in looks risky.

That work lived in engineering's world as much as design's. I sat in on the technical conversations, learned the constraints behind every API and release train, and built the habit of speaking with developers about their craft, which is where my own development practice took root.

Trust also meant designing for everyone. I centralized consent and communication preferences into one clear surface and led the accessibility work that resolved the issues flagged in an App Store review, aligning the flows to WCAG and validating them in testing. Biometric setup, sign in, and recovery were streamlined into fewer, clearer steps across both platforms.

Redesigned CVS profile and security screens
The redesigned Profile and Sign in & Security experience.
What my manager said
“A standout contribution was his leadership in designing a communication preferences experience for iOS and Android, partnering closely with Product, Design, and Engineering teams to balance business goals with user needs, all under an aggressive launch timeline.”
Jet Lim, Product Designer at CVS Health, managed Scott directly
Impact

Outcomes

60%
Fewer accessibility defects after building WCAG into the account and sign in flows, validated in testing
40%
Less complexity in the Select Payment flow, steps removed without weakening safety
66%
Less third party vendor dependency after moving to the native One Account foundation
50%
Faster design delivery through a shared component model reused across screens
Reflection

What I took from it

Designing the front door for millions taught me that security and simplicity aren't opposites, they're a design problem. The best authentication is the kind users barely notice. Working at this scale also sharpened how I collaborate, with research to find the real pain, and with engineering to make sure the polished prototype survives contact with two very different platforms.

Next project

BagEquity Fintech Platform
The CVS story · Chapter one

Behind the scale story is a personal one.

The account experience serves millions. What you are watching on the right began with one family, mine, a native app for managing a loved one’s prescriptions, running live and walking its own flow.

Born from caregivingEvery tap worksAbout a minute
Open chapter one
It is playing itself right now. On the next page you take the wheel.
Live Tap to open