How do I protect myself from identity theft?

The strongest protections are a credit freeze at all three bureaus, strong unique passwords with two-factor authentication, and regular credit report monitoring. None of these costs anything.

Identity theft happens when someone uses your personal information — name, Social Security number, date of birth, account numbers — to open credit, file taxes, receive medical care, or commit crimes in your name. Prevention doesn't require paid services. The most effective tools are free and available to every consumer under federal law.

Freeze your credit (the strongest single action)

A credit freeze blocks all new creditors from pulling your report — preventing anyone from opening a new account in your name without your explicit permission. Under federal law, freezes are free at all three bureaus (Equifax, Experian, TransUnion) and remain in place until you lift them. You must freeze separately at each bureau. For a full walkthrough, see how to freeze your credit. If you're not actively applying for credit, there's no downside to keeping a freeze in place indefinitely.

Protect your credentials and accounts

Use unique passwords for every account. A password reused across sites means one breach exposes all your accounts. A password manager generates and stores complex unique passwords so you don't have to remember them.
Enable two-factor authentication (2FA) everywhere it's offered — especially email, bank, and government accounts (SSA.gov, IRS.gov). Authenticator apps are more secure than SMS codes.
Never share your Social Security number unless required. Most forms that ask for it don't legally need it. Ask why it's needed and what their data security policy is before providing it.
Use unique login emails for financial accounts — separating your financial accounts from your everyday email reduces the blast radius of an email compromise.

Guard physical documents and mail

Shred documents containing your SSN, account numbers, or date of birth before discarding.
Retrieve mail promptly or use a mail hold when traveling. Stolen mail remains a common identity theft vector.
Consider a USPS Informed Delivery account — you can see images of incoming mail before it's delivered, alerting you to anything diverted.
Store your Social Security card and passport in a secure location — not in your wallet.

Monitor your credit regularly

Pull your free credit reports at AnnualCreditReport.com — the only federally authorized source. Review all three bureau reports for accounts you don't recognize, unfamiliar addresses, or inquiries you didn't authorize. The CFPB's credit monitoring guidance explains what to look for and how to dispute errors. Monitoring doesn't prevent theft, but it shortens the detection window — which limits damage.

Be alert to social engineering

Many identity theft incidents begin not with a data breach but with a person being tricked into surrendering their own information — through phone calls claiming to be the IRS or Social Security Administration, emails impersonating their bank, or text messages with fake fraud alerts. The FTC's scam guidance catalogs current tactics. The universal rule: no legitimate government agency or financial institution will call you unsolicited and demand immediate payment or personal information.

What the FTC and CFPB say

Credit freezes are free for all consumers under federal law. A freeze prevents new creditors from accessing your report, blocking most forms of new-account identity theft. — FTC — Credit Freezes and Fraud Alerts
Free credit reports from each of the three major bureaus are available at AnnualCreditReport.com — the only source authorized by federal law under the Fair Credit Reporting Act. — CFPB
The FTC's IdentityTheft.gov provides both prevention resources and, if theft occurs, a personalized recovery plan and official Identity Theft Report. — FTC — IdentityTheft.gov
Government impersonation scams — where fraudsters pose as the IRS, Social Security Administration, or other agencies to extract personal information — are among the most reported scam types tracked by the FTC. — FTC Consumer Advice

Key takeaways

A credit freeze at all three bureaus is the single most effective prevention tool — it's free and permanent until you lift it.
Unique passwords plus two-factor authentication on every financial and email account dramatically reduce credential-based theft.
Never share your SSN unless it's legally required — most requestors don't need it.
Monitor your credit reports at AnnualCreditReport.com to catch unauthorized accounts early.
No legitimate government agency calls you to demand immediate payment or personal information — hang up and call the agency directly using a number from their official website.