What Is a Safe Harbor 401(k) Match: Formulas, Vesting, and Limits

A safe harbor 401(k) match is an employer contribution that follows one of three formulas set by federal law: a basic match worth 4% of pay when an employee defers at least 5%, an enhanced match that is at least as generous at every deferral level, or a flat 3% nonelective contribution paid to every eligible employee whether they defer or not. In exchange for using one of these formulas and vesting the money immediately, the plan is treated as automatically passing the annual nondiscrimination tests that trip up standard 401(k) plans.

The Three Required Formulas

Only three contribution structures qualify a plan for safe harbor status. Each is defined under 26 U.S.C. § 401(k)(12), and the employer picks one when the plan is designed.¹

Basic Match

The employer matches 100% of employee deferrals on the first 3% of compensation, plus 50% on the next 2%. An employee who defers at least 5% of pay receives a total match worth 4% of compensation. Employees who defer less get a smaller match on a sliding scale: someone contributing 3% receives a 3% match (100% of 3%), and someone contributing 4% receives 3.5% (100% of the first 3% plus 50% of the next 1%).

Enhanced Match

An enhanced formula must be at least as generous as the basic match at every deferral level. A common version pays a dollar-for-dollar match on the first 4% of compensation, which is simpler to explain and meets the requirement because it equals or exceeds the basic match at every rate. Two limits apply: the match rate cannot climb as the employee’s deferral rate climbs, and the formula cannot reward deferrals above 6% of compensation.

Nonelective Contribution

Instead of matching, the employer can contribute a flat 3% of compensation for every eligible employee, whether or not that employee defers anything. This costs more in a workforce with low participation because every eligible employee gets paid, but it comes with more design flexibility, including an exemption from the annual notice rule described below.

The Compensation Cap

All three formulas calculate contributions only on compensation up to the annual limit under Section 401(a)(17). For 2026, that cap is $360,000.² An employee earning $400,000 has their match or nonelective contribution figured on $360,000, not on the full salary.

The QACA Alternative

A Qualified Automatic Contribution Arrangement, or QACA, is a variation of the safe harbor 401(k) that pairs automatic enrollment with a smaller match. Under a QACA, employees who don’t make an affirmative election are enrolled automatically at a default deferral rate starting at 3% of pay, rising by 1% each year until it reaches at least 6%. The default rate cannot exceed 10%, and employees can always opt out or pick a different rate.³

The QACA match is cheaper than the basic safe harbor match. It requires 100% of the first 1% of compensation deferred, plus 50% on the next 5%. An employee deferring 6% or more receives a total match of 3.5%, compared to 4% under the basic formula. A QACA can also use the 3% nonelective contribution instead of the match.

The trade-off for employees is vesting. QACA contributions can require up to two years of service before they become 100% vested, whereas a traditional safe harbor match vests immediately.⁴

Vesting: You Keep the Money Right Away

In a standard 401(k), employers often use a three-year cliff schedule (nothing until year three, then 100%) or a six-year graded schedule that phases in ownership over time.⁵

A traditional safe harbor match works differently. Whether the employer uses the basic match, an enhanced match, or the 3% nonelective, those contributions vest immediately. Leave after a month and you keep every dollar. Immediate vesting applies only to the mandatory safe harbor amounts, though. If your employer layers a discretionary or profit-sharing contribution on top, that extra piece can still follow a standard vesting schedule.

The QACA match is the one exception, with the two-year cliff described above.

2026 Contribution Limits

The safe harbor match is subject to the same IRS limits that apply to any 401(k). For 2026:

Employee deferral limit: $24,500, up from $23,500 in 2025.⁶
Catch-up contribution for age 50 and over: an additional $8,000, for a total possible deferral of $32,500.⁶
Enhanced catch-up for ages 60 through 63 under SECURE 2.0: $11,250 instead of $8,000, for a total deferral of up to $35,750.⁶
Total annual additions (employee deferrals plus all employer contributions): $72,000, up from $70,000 in 2025.²
Compensation cap for calculating contributions: $360,000.²

Catch-up contributions sit on top of the $72,000 total additions limit, so an employee in the 60–63 window could theoretically receive $83,250 in combined contributions in a single year.

Why the Formula Exists: Skipping the Fairness Tests

Standard 401(k) plans have to pass two annual mathematical tests: the Actual Deferral Percentage (ADP) test and the Actual Contribution Percentage (ACP) test. Both compare the contribution rates of highly compensated employees to those of everyone else. For 2026, a highly compensated employee is generally someone who earned more than $160,000 from the employer in the prior year.² If lower-paid workers don’t participate at high enough rates, the plan fails, and excess contributions from top earners have to be refunded and taxed.⁷

A plan that meets one of the safe harbor formulas and follows the notice rules is treated as automatically passing both tests, no matter how many rank-and-file employees participate.¹ That’s the reason business owners and executives choose the structure: they can defer the full IRS maximum without worrying about refunds at year end.

Safe harbor plans also skip top-heavy testing when the only employer contributions are the required safe harbor amounts and employee deferrals. Top-heavy rules otherwise require extra contributions when key employees (owners, officers, and top earners) hold more than 60% of plan assets.⁸

The Annual Notice Requirement

Employers using a safe harbor matching formula must send a written notice to every eligible employee before each plan year begins. The notice is timely if delivered at least 30 but not more than 90 days before the plan year starts.⁹ For a calendar-year plan, that window runs from roughly early October through early December. Employees who become eligible partway through the year, such as new hires, must receive the notice by their eligibility date, or as soon as practical afterward with the right to defer from all eligible pay earned from day one.

The notice must describe the match formula, the employee’s right to make or change deferral elections, and the vesting terms. Missing the deadline can cost the plan its safe harbor status for the year and force it back into ADP and ACP testing.

The SECURE Act and SECURE 2.0 removed this annual notice requirement for plans using the 3% nonelective formula. Employers using the nonelective option still have to give employees at least one chance per year to make or change deferral elections, but no annual notice is required. Plans using the basic or enhanced match still must send it.⁹

1
Office of the Law Revision Counsel. 26 USC 401 – Qualified Pension, Profit-Sharing, and Stock Bonus Plans
2
Internal Revenue Service. 2026 Amounts Relating to Retirement Plans and IRAs
3
Internal Revenue Service. Retirement Topics – Automatic Enrollment
4
Internal Revenue Service. Issue Snapshot – Vesting Schedules for Matching Contributions
5
Internal Revenue Service. Retirement Topics – Vesting
6
Internal Revenue Service. 401(k) Limit Increases to $24,500 for 2026, IRA Limit Increases to $7,500
7
Internal Revenue Service. 401(k) Plan Fix-It Guide – The Plan Failed the 401(k) ADP and ACP Nondiscrimination Tests
8
Internal Revenue Service. Is My 401(k) Top-Heavy?
9
Internal Revenue Service. Notice Requirement for a Safe Harbor 401(k) or 401(m) Plan