Protecting Your Privacy: Action Steps

The specific, free actions that actually reduce your exposure — in the order they matter most.

Do these first

  1. Freeze your credit at all three bureaus. Equifax, Experian, and TransUnion are each required by federal law (the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018) to offer a free freeze. A freeze blocks new accounts from being opened in your name and can be lifted temporarily online in minutes when you actually need credit checked.
  2. Check HaveIBeenPwned.com for your email address to see which known data breaches exposed your credentials, then change the reused passwords those breaches revealed.
  3. Use a password manager (Bitwarden's free tier is a common recommendation) so no password is reused across sites — reused passwords are the mechanism behind most account-takeover fraud.
  4. Turn on multi-factor authentication on email and banking first — email is the recovery path for almost everything else, so it's the highest-value account to lock down.
  5. Opt out of prescreened credit offers at optoutprescreen.com, the official industry site mandated under the FCRA — this stops most preapproved credit card mail, a common source of mail-theft identity fraud.

Your free annual credit report

annualcreditreport.com is the only site authorized under federal law to provide your free reports from all three bureaus. Since 2023 this has been available weekly, not just annually. Check for accounts you don't recognize — that's the first sign of identity theft, before any fraud alert triggers.

What a VPN actually does and doesn't do

A VPN hides your traffic from your ISP and from networks you connect through (useful on public WiFi), but it does nothing about data you willingly give a website — logging into Google through a VPN still lets Google see everything Google always sees. Don't treat it as a general privacy fix.

Theme