New DOL Rules for Crypto in 401k 2026: A Fiduciary Checklist

Understand the 2026 DOL proposal

The Department of Labor (DOL) issued a proposal in March 2026 that would allow 401(k) plan sponsors to offer crypto and other private assets as investment options for employees [[src-serp-1]][[src-serp-2]]. This represents a significant shift from the current landscape, where these assets are generally restricted to Self-Directed IRAs rather than workplace retirement plans.

The proposal aims to modernize retirement plans by aligning them with the growing demand for alternative investments. While Self-Directed IRAs have long permitted individual investors to hold cryptocurrency, 401(k) plans have traditionally been limited to publicly traded stocks, bonds, and mutual funds. This new rule would remove that barrier, potentially allowing employees to diversify their workplace retirement savings into digital assets [[src-serp-3]].

For fiduciaries, this proposal introduces new complexities in evaluating the prudence and diversification of such options. The DOL’s guidance will likely focus on how plan sponsors can offer these assets while managing fees and protecting participants from excessive risk. Understanding this proposed framework is the first step in preparing for potential changes in retirement plan offerings.

Step 1: Review plan document restrictions

Before considering any new crypto options, you must first determine what your current plan document and Summary Plan Description (SPD) already allow. The Department of Labor’s proposed rules for 2026 do not automatically override existing plan terms; they set the regulatory floor for how new alternatives are managed, not what is included by default.

Most standard 401(k) plans explicitly exclude alternative investments like cryptocurrencies, private equity, or real estate. These exclusions are often buried in the investment lineup section or the fiduciary guidelines. If your document does not specifically list digital assets as an approved option, you cannot simply add them without amending the plan.

Locate the specific section titled "Investment Options" or "Eligible Investments." Look for language that prohibits "non-traditional assets," "digital currencies," or "alternative investments." If you find these restrictions, your first task is to draft a plan amendment. This amendment must clearly define which crypto assets are permitted, the custody requirements, and the valuation methods to ensure compliance with the new DOL standards.

1

Locate the investment section

Open your current plan document and SPD. Go to the section detailing approved investment options. This is usually near the beginning or in the appendix of eligible assets.

2

Identify exclusion clauses

Scan for broad language that bans "alternative investments" or "non-traditional assets." Cryptocurrency is often caught in these general exclusions even if not named explicitly. Note any specific references to digital currencies or blockchain assets.

3

Document current restrictions

Record the exact wording of any exclusions. This creates a baseline for your plan amendment. You will need this text to justify the changes to your plan sponsor and legal counsel during the amendment process.

Previous

123

Next

If your plan already permits self-directed brokerage windows or specific alternative investment options, you may have a clearer path to adding crypto. However, even in self-directed plans, fiduciaries must ensure the crypto option meets the new prudence and diversification standards set by the DOL. Always verify the current plan language before proceeding with provider selection.

Vet crypto investment providers

Choosing a custodian for crypto in a 401(k) requires more than checking for Bitcoin availability. Under the Department of Labor’s 2026 prudence standards, fiduciaries must prove that digital asset options meet the same security, liquidity, and cost-efficiency bars as traditional investments.

The DOL’s proposed rule shifts the burden of proof to the plan sponsor. You are not just buying a product; you are selecting a vendor that must demonstrate institutional-grade safeguards. If a provider cannot clearly explain how they protect private keys or handle market volatility, they are a liability, not an asset.

Focus on three non-negotiable criteria when comparing providers:

1. Security Architecture: The provider must use cold storage for the majority of assets and offer multi-signature authorization. Avoid any custodian that keeps funds in hot wallets accessible via single-point web interfaces.
2. Liquidity Mechanisms: Crypto markets can freeze or gap. Ensure the provider has clear, rapid redemption processes that align with your plan’s distribution schedule. Delays in selling crypto can breach fiduciary duties if participants need funds.
3. Fee Transparency: Look beyond the trading fee. Some providers charge hidden custody fees or mark up exchange rates. The DOL expects all fees to be disclosed in plain language, with no hidden spreads that erode participant returns.

The table below compares how major crypto-capable 401(k) providers stack up against these DOL-aligned criteria.

Document the fiduciary process

To satisfy ERISA prudence duties under the new 2026 rules, you must prove that every decision was made through a deliberate, documented process. The Department of Labor expects a paper trail that demonstrates how you evaluated the risks and benefits of adding crypto to your 401(k) plan. This documentation serves as your primary defense against claims of imprudence.

Start by updating your Investment Policy Statement (IPS). This document should explicitly authorize the inclusion of private assets, including cryptocurrency, and define the specific types of digital assets permitted. Clearly state the investment objectives, such as diversification or return enhancement, and set limits on allocation percentages. Without this foundational update, any subsequent action may be viewed as unauthorized.

Next, conduct a formal risk assessment. Document the analysis of volatility, liquidity constraints, and regulatory exposure. Compare the proposed crypto investment against other available options in your plan’s lineup. Record the rationale for why the chosen fund or strategy meets the fiduciary standard of care. This assessment must be thorough enough to show that you considered the unique risks of digital assets rather than treating them as a standard equity position.

Finally, maintain a record of all due diligence. Save meeting minutes, consultant reports, and fee comparisons. The DOL will look for evidence that you acted independently and in the best interest of participants. If you cannot produce these documents, the burden of proof shifts against you in any potential litigation.

Common compliance mistakes to avoid

Even with clear DOL guidance, fiduciaries often stumble on execution details. The 2026 rules for including crypto in 401(k) plans require precise adherence to ERISA standards. Missing these nuances can expose plan sponsors to unnecessary liability.

Ignoring liquidity limits to account for

Crypto assets can be volatile and illiquid. A common error is allowing crypto allocations that exceed the plan’s ability to meet participant distribution requests. Fiduciaries must model cash flow scenarios to ensure that digital asset holdings don’t trap capital when participants need to withdraw funds. If the plan cannot reliably value or liquidate positions, the inclusion violates prudence standards.

Overlooking fee transparency

Participants must see exactly what they pay for holding crypto. Custodial fees, transaction costs, and valuation charges for digital assets are often higher than for traditional stocks. Failing to disclose these specific costs in the plan’s fee disclosure document is a compliance gap. The DOL expects fees to be reasonable and clearly itemized, not buried in general administrative charges.

Missing a written investment policy

A vague or absent investment policy statement (IPS) is a frequent pitfall. The IPS must explicitly define the role of crypto within the broader portfolio, including allocation limits, rebalancing triggers, and risk tolerance thresholds. Without this written framework, fiduciaries cannot demonstrate that their decisions were made with the care, skill, and diligence required by ERISA.

Frequently asked questions about 2026 rules