Lock it down before anything happens.
You're ahead of the game. Most people don't think about identity protection until after something goes wrong. Here's a complete guide to securing your identity proactively.
Good news
Core Protection (Do Once)
These one-time actions provide the foundation of your identity protection. Total time: about 90 minutes.
Freeze your credit at all three bureaus
30 min EasyThis is the single most effective protection. A credit freeze prevents anyone (including you) from opening new credit accounts until you temporarily lift the freeze. It's free, and it stops 90%+ of identity-based fraud.
Store your PINs in a password manager—you'll need them when applying for credit.
Get an IRS Identity Protection PIN
15 min EasyThis 6-digit PIN is required to file your tax return. Without it, no one can file in your name—even if they have your SSN.
You'll get a new PIN each year. Store it securely.
Create your Social Security online account
10 min EasyClaim your account before someone else does. You can also use it to check your earnings record and monitor for suspicious activity.
Freeze ChexSystems
10 min EasyChexSystems is used by banks when you open checking or savings accounts. A freeze prevents fraudulent bank accounts.
Set up USPS Informed Delivery
5 min EasyGet daily email previews of your incoming mail. This helps you spot if someone has changed your address or is intercepting your mail.
Account Security
Protect your existing accounts from takeover.
Enable 2FA on all financial accounts
30 min EasyTwo-factor authentication adds a second layer beyond your password. Enable it on:
- Bank and credit card accounts
- Investment and retirement accounts
- Email (especially important—email is used for password resets)
- Social media accounts
Use an authenticator app (like Google Authenticator or 1Password) rather than SMS when possible.
Use unique passwords everywhere
varies ModerateEvery account should have a unique, strong password. A password manager makes this practical.
Recommended password managers:
- 1Password
- Bitwarden (free option available)
- Apple Keychain (if you're all-Apple)
Review privacy settings on social media
15 min EasyLimit what's publicly visible. Fraudsters use social media to answer security questions and craft convincing phishing attempts.
- Hide your birth date (or at least the year)
- Don't list your mother's maiden name, high school, etc.
- Review who can see your posts and personal info
Ongoing Maintenance
Light ongoing habits to maintain your protection.
Check your credit reports annually
30 min/year EasyReview your reports from all three bureaus once a year. Look for accounts you don't recognize.
Set up free credit monitoring (optional)
15 min EasyServices like Credit Karma provide free monitoring and alerts. They're not essential if you have freezes in place, but they're a nice backup.
See our free monitoring options for recommendations.
Check haveibeenpwned periodically
2 min EasySee if your email or phone number has appeared in any data breaches.
Optional: Additional Protections
For extra peace of mind, consider these additional freezes:
- NCTUE — Prevents fraudulent utility accounts (electricity, phone, etc.)
- LexisNexis — Used for insurance and some background checks
See our full additional protections guide →
Remember: Freezes don't affect existing accounts