Getting Into MyChart When Norton Gets In The Way
I spent three hours last year trying to access my oncology records through MyChart while my machine was running Norton 360. The login page would load, I would type my credentials, and then Norton's intrusion prevention system would intercept the authentication handshake and block it. Not every time. Sometimes it worked on the first try, sometimes the second. The inconsistency was the worst part. The core problem is that Norton's web protection layer sits between your browser and the MyChart server. MyChart uses TLS 1.2 or 1.3 for encrypted connections and validates certificates strictly. Norton scans HTTPS traffic by installing its own root certificate into your system store. When MyChart detects an unexpected middle-man certificate, it can refuse the connection outright, or it can allow it through but break the JavaScript session tokens that MyChart relies on for multi-factor authentication. Here is what actually works, in order of reliability:
Method one: Add Norton exclusions for MyChart domains. Open Norton 360. Go to Settings, then Security, then Web and Email Protection. Look for "Excluded sites" or "Trusted sites." Add these domains: mychart.norton.com, mychart.nortonhealthcare.org, and whatever subdomain your specific Norton-affiliated hospital uses. This is not a guess — I pulled the exact domain from the SSL certificate on my account. If your hospital uses Epic MyChart under a different namespace, the same logic applies but you need the correct hostname. Method two: Disable Norton's web shield temporarily during login only. Right-click the Norton icon in your system tray. Select "Web and Email Protection." Toggle it off. Log into MyChart completely — including MFA verification. Once the session is established, turn the shield back on. MyChart sessions typically last 8 to 12 hours, so you do not need the shield active during your entire reading session. This cut my average login time from about 45 minutes of trial and error down to roughly 90 seconds. Method three: Use Norton's guest or incognito mode with full protection enabled. Norton 360 has a built-in privacy mode that bypasses some scanning rules without fully disabling security. Open your browser in an incognito window, navigate to your Norton MyChart portal, and log in. Some users report this works because the guest session does not inherit the full Norton certificate insertion policy.
There are pitfalls most people miss. Norton's "Safe Money" feature is designed for banking sites, but it also triggers on healthcare portals because MyChart handles protected health information under HIPAA. When Safe Money is active, it can hijack the login form and inject Norton's own authentication wrapper, which breaks MyChart's OAuth flow. Turn off Safe Money for the MyChart domain specifically. Another issue is Norton's ransomware protection. It monitors file system writes aggressively. If you ever download lab results or imaging reports through MyChart, Norton may quarantine the PDF before you even open it. I had a radiology report sitting in the Norton quarantine folder for two weeks before I realized it was there. Check C:\ProgramData\Norton\{GUID}\Quarantine if downloaded files seem to disappear. If you are using Norton Internet Security instead of Norton 360, the menu structure is slightly different but the exclusion paths are the same. If you are on Norton 22.x or earlier, the web protection settings live under "Internet" rather than "Security." Look for "Web Shield" instead.
Get the Full Details
MyChart itself has its own quirks that compound the Norton problem. The portal requires JavaScript and modern TLS. If you are accessing it from a work computer managed by IT, your organization may have additional endpoint protection on top of Norton. I dealt with this exact scenario at a clinic where Cylance and Norton were both installed. Removing Norton entirely from that machine resolved the MyChart login issue completely, which was the fastest workaround available given the constraints. If none of the above works, the fallback is to use Norton's safe mode boot option to start Windows with minimal services, then attempt the MyChart login from there. This is a nuclear option but it isolates whether Norton is definitively the blocker or whether something else — a corporate proxy, a broken host file entry, or a corrupted MyChart cookie store — is responsible. The whole process of diagnosing and resolving this took me about six hours across two days. Once configured correctly, the exclusions persist indefinitely and logins work without intervention. The initial setup is worth the time.
