Editor's note - You can trust the integrity of our balanced, independent financial advice. We may, however, receive compensation from the issuers of some products mentioned in this article. Opinions are the author's alone, and this content has not been provided by, reviewed, approved or endorsed by any advertiser.

Your gym locker has a combination… why not your credit report?

You may be surprised to know that, by default, something as important as your credit report at Experian, Equifax, or TransUnion is NOT secured with a PIN or password.  So, what can you do to protect this information?

You probably already realize just how important your credit report really is. It contains payment history and loan information for accounts you presently have.  More importantly, it’s typically consulted before new credit in granted in your name.

However, hacking and data breaches happen with disturbing frequency.   For example, Yahoo, Target, and even the Federal Government’s Office of Personnel Management have all been victims.   When names, addresses, birthdays, credit card numbers, passwords, social security numbers, and security challenge answers are lost to hackers, consumers become at-risk for identity theft. After an ID thief opens up accounts in a victim’s name, undoing the mess can be expensive and takes years!

What Can You Do?

The three credit reporting agencies promote a combination of services which include credit report locking, monitoring, and ID theft-related services. These run in the range of $10-$30/month.  There is, however, an effective solution that will lock your credit reports. It doesn’t require a montlyl subscription, and simply involves a one-time expense. It’s called a security freeze.

Related: Credit Score vs Credit Report

This freeze locks your credit report with a PIN/Password, preventing it from being furnished to prospective lenders when an ID thief attempts to apply for credit in your name. There is a fee to initially lock all three reports, but that’s the only investment for this safeguard. Then, you’ll pay a smaller fee to unlock them each time a credit report is needed. Otherwise, they stay locked and secured.

But why would you go this route, rather than constantly monitoring your credit for changes? Are you adding unnecessary risk just to save a little bit of money?

“Security Freeze” vs. “Fraud Alert” vs. Credit Monitoring

Let’s look at the difference between the three and how they can each help you.

Credit Freeze

A security freeze will essentially put a lock on your credit report, so that lenders cannot access the information in response to a credit application. This is helpful if you’re not actually the one applying for new credit!

A separate security freeze is required for each of the 3 credit reporting agencies.  Depending on the state in which you live, the fee might be waived if you’re over a certain age, or have been the victim of identity theft.  When the fee is not waived, it is typically between $5 and $10 per freeze.

Resource: 12 Cards That Offer Credit Scores for Free

When a freeze is established on your credit file, you are given a Personal Identification Number (PIN) which is required in order to lift the freeze.  Keep this in a safe place!

According to the Federal Trade Commission, a security freeze will not affect your FICO credit score or prevent pre-screened credit offers.  Also note that your report can still be automatically released to your existing creditors or to debt collectors acting on their behalf.

How to place a Credit Freeze

You must apply for a security free separately, for each of the 3 credit bureaus. Here’s how to place a freeze through TransUnion, here are the instructions for Experian, and here’s info on Equifax.

Lifting a Credit Freeze

A security freeze not only prevents ID thieves from pulling a credit report, but it also prevents you from having one pulled when you apply for credit.  For example, you will need to lift the security freeze when you apply for a mortgage, car loan, credit card, switch cell phone providers, etc. Sure, this is an added step anytime you need to add an account or credit-based service, but it’s well worth the extra effort in my opinion.

Avoid lifting all 3 locks unnecessarily

When applying for credit, ask the lender which bureau will be used to check your credit.  Don’t spend the time and money to unlock 3 credit reports if only one will be consulted.

In my experience, when I ask a vendor which report will be consulted for my transaction, I often get a non-answer like, “We consult all three.”  I then ask to be transferred to their credit department to grill them on which report will most likely be requested. Once they finally spill, I’ll unlock just that one report. If worse comes to worse and they absolutely will not tell you, you should unlock all three. But certainly try to find out first, and save yourself some cash.

Fraud Alerts

The FTC also says that if you know you have been the victim of identity theft,  you may contact one of the three credit bureaus and have a Fraud Alert placed on your credit file for free.  Typically, this means a messages is added to your credit report asking lenders contact you at a certain phone number to confirm identity before granting credit.

The designated credit reporting agency is also supposed to contact the other two bureaus on your behalf.  The fraud alert remains on your files for 90 days although it may be renewed.

In my opinion, this is a terrible idea because you never know when an ID thief will attempt to open credit in your name.  Even if you knew exactly when your personal details were compromised in a breach, it doesn’t mean your details will be exploited right way.  Hacked information can remain in black market databases for years before being sold to cyber crooks.   Trying to time a 90 day protection window to when you think an ID thief will exploit it is as silly as wearing a seatbelt in your car only on the day you think you’ll be involved in a crash.

Resource: How to Correct an Error on Your Credit Report

About 10 years ago, I placed a fraud alert on my credit files and found that sometimes lenders did not contact me as required to verify identity.   Having now tried both, I very much recommend a security freeze over a fraud alert.

Credit Monitoring

Each of the three credit bureaus offers basic credit monitoring and identity theft protection services on a subscription basis.  These services range in price from $10 to $30/month.

Some offer the ability to lock and unlock credit reports — like TransUnion, as I’ll go into further — and some are monitoring-only services.  Some of the plans also add insurance or assistance if your identity is stolen.

TransUnion’s Unlimited Locking Subscription: Is It Worth It?

TransUnion offers a $10/month service, which includes unlimited lock and unlocks, as well as free access to your TransUnion credit report.  So, is this worth it?

In a word: NO.

Spending $120/year for the foreseeable future can really add up. Plus, it’s significantly more expensive than paying to lock all of the reports initially, and then unlocking them selectively as needed. Unless you are applying for new lines of credit every few weeks and would be constantly accessing the reports, this is an unnecessary expense.

Related: How to Avoid Identity Theft

For example, when I set up my security freeze years ago, it initially cost me $30 ($10 for each of the 3 credit bureaus).  During most years, I am not applying for credit and don’t need to unlock my reports. For that time period, my security freeze costs me nothing.

Last year for me was unusual, though. I leased a car, switched cell phone providers, and signed up for a Citibank Double Cash credit card.  Even still, I was able to determine which report needed to be unlocked for each vendor. In the end, I only spent $30 in unlock fees that year.

Remember: security freezes are done at separately for each credit bureau. This means that having a subscription for unlimited locks/unlocks at TransUnion isn’t very helpful if your mortgage company consults Equifax.

TransUnion’s True Identity Free Identity Protection

While writing this column, I was excited to find that TransUnion offered a free service called True Identity Free Identity Protection.

It offers free unlimited locks and unlocks of your TransUnion credit report, as well as several other features.  In order to sign up for this service, I had to first unlock my Transunion report.  I expected to pay the $10 fee to do so, but was able to do it for free using their automated phone system, instead of the website.

After signing up, I was dismayed to find the lock feature would not work.

When I called their tech support department, I was (incorrectly) told that the unlock feature was not free… despite the website clearly indicating it was:

Based on five separate phone call interactions with TransUnion, I found their off-shored tech support to be terrible and their comment submission form to be broken.  I eventually resorted to sending a tweet to TransUnion. In response, they gave me an email address to submit my complaint.

A few days later, I received call from a USA-based supervisor. He was very knowledgeable and explained there was a problem with my record in their database. It was this glitch that had prevented the locking feature from working.  He said it was now fixed and wanted me to test the locking… sure enough, it worked!

Read More: Best Identity Theft Protection Services

Despite the very bumpy journey, I am now successfully signed up for their free service and my TU credit report is locked.  I reviewed my TU credit report and everything was correct.  The free subscription also includes a base level of ID theft insurance and the option to buy more:

Be Proactive Versus Reactive

In my opinion, locking the credit file with a PIN is your best option. At the very least, it’s much better than leaving it unlocked and being notified AFTER someone fraudulently opens credit in your name.   Therefore, I recommend locking credit reports over simply monitoring-only solutions.

Locks Are Great, But Still Check Free Annual Reports

Even if a cyber crook didn’t open up an account in your name, your credit report might still contain errors and erroneous information.  Therefore, it’s best to obtain your credit report each year — everyone gets it for free every 12 months.

A simple Google search for ‘free credit report’ will yield countless offers and scams. You have a number of legitimate options to choose from, though my personal favorite is AnnualCreditReport.com. It’s the official, truly free solution mandated by federal law:

Learn More: AnnualCreditReport.com versus FreeCreditReport.com

Identity Theft

For victims of identity theft, the Federal Trade Commission has a list of steps that should be taken. If you believe your identity has been compromised, you should start here.

Final Thoughts

The idea of identity theft is scary, at the very least. However, being proactive will reduce your chances of a thief utilizing your credit for their own benefit — possibly creating an expensive headache that could take years to fix.

To summarize, here are my thoughts on protecting your own report:

  1. Locking each of your 3 credit reports is an easy, cost-effective way to prevent them from being used by ID thieves.
  2. Credit monitoring is not a good alternative to locking credit reports with a PIN/password.
  3. TransUnion’s True Identity Free Identity Protection is a great way to easily lock and unlock your TransUnion credit report, without paying a monthly fee.

Staying one step ahead will give you peace of mind and, should the situation ever arise, protect you from theft.

Related: Still looking for an ID theft prevention service? Check out Identity Guard or read our full Identity Guard Review

Has your credit ever been used fraudulently? Were you actively monitoring your credit or was it caught by accident?

Author Bio

Total Articles: 5
Michael Toub is an IT geek and condo-board Treasurer who loves solving problems and sharing knowledge. He enjoys researching and implementing optimal solutions in the spheres of technology, gadgets, efficiency, and personal finance. He can be reached on Twitter @MichaelToub

Article comments

Keith says:

This was a great article and really opened my eyes to something I should have done some time ago. We are settled with much of our credit/debt so freezing our accounts is a no brainer. What’s even better is in NJ it’s free to freeze and $0 to $5 to unfreeze. So well worth the extra time and possible $15 each time I need to lift the freeze in order to help secure our credit and ID’s. After their data breaches, anyone with a Yahoo account was given advice to Freeze their credit in their “What additional steps can I take to protect my information?” section. Thanks for this!!!

Michael Toub says:

Thanks for taking the time to comment Keith. I’m really convinced that everyone should have a freeze in place! -Michael Toub

Bob says:

Do I already have to have a credit freeze with Trans Union to use their True Identity Free Identity Protection?

Eric Gibson says:

No you don’t. In fact, you cannot use the free lock/unlock feature if you have a credit freeze in place according to their website.

Ty says:

Hello and thank you so much for this wisdom. I was looking up this information because I was originally considering LifeLock and wanted to double check sources like this. I will definitely be placing a credit freeze in place. I do have a question though:

Besides credit related things, is there anything else I should do if someone did some shady things with my SSN?

The reason I was looking into LifeLock is because I just rented a room in a house and the owners want to do a background check.
I dont neccisarily think they are shady individuals. But I just want to be as protected as possible. Thank You!

Hammond Frisch says:

We put a freeze in place years ago, and agree that it’s a great way to protect against ID theft. But we’ve been afraid to lift the freeze, even for a few days, to take advantage of credit card offers that would otherwise be desirable.

Are there ID thieves who keep checking the same account until one fine day it becomes unfrozen as the holder applies for credit? And if so, is there a way to check one’s credit for a breach immediately after refereezing an account, in time to prevent the successful granting of credit to a thief?

Denise says:

When you temporarily lift a freeze (to apply for a new credit card or to buy a home, apply for a car loan, etc.), you have the option to lift the freeze only for a particular company (like Honda, if you’re buying a car, for example) or an across-the-board lift. If you are going to do a lift for a particular company, make sure to get the exact name (like Honda Financial Services, for example).

Tim T says:

TransUnion credit monitoring service now offers lock and unlocking of your TransUnion AND Equifax report. I locked both. This is free and included in their tri-bureau service. I wish they all would all play ball and allow TransUnion to lock all 3. My 2 cents.

Sam England says:

Great article. Thanks for the thoughtful input. Very well reasoned and presented, I thought. Meanwhile – 0020Ty – I would avoid LifeLock if possible. Just Google them and see the pages and pages of complaints. Just saying….

S says:

Thank you Michael for taking the time to keep us safe and informed with this great article. Regarding the free TransUnion TrueIdentity service, do you feel that this is equal to a credit freeze, and do you have any reasons to recommend one over the other?

Michael says:

Hi! Great article. I just signed up with TrueIdentity but I seem I cannot get it to lock my credit. I tried several times and it says to click on the Support link (which is useless, since it doesn’t even talk about resolving this issue). Plus there is no contact information for asking questions about TrueIdentity. Do you happen to know the email that I can email to resolve this? Thanks!

Nate says:

I tried locking my Transunion account and it looks like I ran into the same issue as you. Is there anyway you can send me the US supervisor’s email so I can get this sorted out?

The Truth says:

I’m pretty sure a credit freeze and unfreeze are free to persons over 65 years of age.

Paul says:

Just wanted to point out that there is free credit monitoring as well. AAA offers it for free with membership. The freeze is the way to go, but free monitoring is nice.

Claudia Avalos says:

Excellent article! Could you please publish something related to obtaining information and protecting MINORS from ID theft? I’ve looked into it myself for my son and it’s somewhat of a complicated process.

Michael McNierney says:

Does husband and wife both need to “lock” credit?

Denise says:

Absolutely! Each individual with a social security number should freeze him or her accounts at all three credit bureaus.

Rick says:

Well, I put a freeze on Trans-Union & Experian with no problem. When I got to Equifax I failed to read the small box that pertained to verifying that your computer will except the PDF download, which INCLUDES YOUR PIN#!! I was expecting to get to the last page before confirming & be able to either set or receive a PIN#, as it was with the first two. Now, my credit report is frozen with Equifax yet I have no pin # to unlock it. I’ll be calling in the morning to hopefully sort out this mess. Good grief.

Michael says:

Thank you so much for this article. My driver’s license number may have recently been compromised (SSN and bank info are safe). I have no credit report on file with any of the big three, and have found it impossible to freeze my credit. Is that because my credit report does not exist? I have never purchased anything on credit before and don’t plan to. What can I do to protect myself in case my DL# is ever misused?