A prudent man foreseeth the evil, and hideth himself: but the simple pass on, and are punished (KJV). Foresight, applied here to a very modern kind of evil.
Proverbs 27:12Foresight, not fear
“A prudent man foreseeth the evil, and hideth himself” (Proverbs 27:12, KJV) is written about danger in general, but it fits identity theft precisely: almost every defense in this lesson is boring, preventive, and done once, long before any trouble arrives. None of it requires anxiety; it requires setting up a few free tools and moving on.
Freeze your credit: it’s free at all three
A credit freeze blocks anyone (including you, temporarily) from opening new credit in your name without you actively lifting it first. Since a 2018 federal law, freezing and unfreezing your credit file is free at all three national credit bureaus (Equifax, Experian, and TransUnion) and doing so does not affect your credit score. Freezes placed online or by phone must take effect within one business day, and lifting one must happen within an hour of your request. You can even freeze a minor child’s credit file. Because identity thieves usually need to open a new account to do damage, a freeze is one of the highest-leverage, lowest-effort protections available. Do it for every adult in the household, then only lift it briefly when you personally need new credit.
Strong passwords, a password manager, and two-factor authentication
Reused passwords are one of the most common ways one data breach becomes many account compromises: if a password leaked from one breached site is reused on your email or bank login, a thief has a working key. A password manager generates and stores a unique, long password for every account, so a breach at one site can’t unlock another. Two-factor authentication (2FA), a code texted or generated by an app in addition to your password, stops most account takeovers even when a password does leak, because the thief still lacks the second factor. Turn 2FA on for email and banking first; those two accounts are usually the keys to everything else.
Check your reports at the actually-free site
Federal law entitles you to a free copy of your credit report from each of the three bureaus, but only through one official channel: AnnualCreditReport.com, the only site authorized to fill these free requests. Many lookalike sites charge for what this one gives away or bundle it with a paid subscription. As of 2026, all three bureaus have made weekly free checks permanent through this same site, so there is no longer a reason to ration your checks to once a year. Reviewing a report periodically for accounts you don’t recognize is one of the fastest ways to catch fraud before it compounds.
If it already happened
If you discover you’re a victim, go straight to IdentityTheft.gov, the FTC’s free recovery service. Reporting there generates a personal, step-by-step recovery plan, pre-fills the letters and forms you’ll need for banks, credit bureaus, and the IRS, and tracks your progress as you work through it. It is free, government-run, and built specifically so a victim doesn’t have to figure out the recovery order alone in a stressful moment.
Watching without fear
Nehemiah’s builders “made our prayer unto our God, and set a watch against them day and night” (Nehemiah 4:9): trust and practical vigilance operating together, not one substituting for the other. A frozen credit file, a password manager, 2FA on the accounts that matter, and a bookmark to the one legitimate free credit-report site are the modern equivalent of the watch: quiet, unglamorous, and exactly the kind of foresight Proverbs 27:12 commends. Pair this lesson with how scams work: the watch guards the gate; that lesson teaches you to recognize who’s at it.
Before you go
Check yourself
1What does a credit freeze do, and what does it cost?
It blocks anyone (including you, temporarily) from opening new credit in your name until it is lifted. Since a 2018 federal law it is free at all three national bureaus, does not affect your credit score, must take effect within one business day, and must be lifted within an hour of your request.
2Which two accounts should get two-factor authentication first, and why?
Email and banking. Those two are usually the keys to everything else, and 2FA stops most account takeovers even when a password leaks, because the thief still lacks the second factor.
3You already pulled your credit report this year, so you are done until next year. Right?
No. As of 2026 all three bureaus have made weekly free checks permanent through AnnualCreditReport.com, the only site authorised to fill the free requests, with many lookalikes charging for it or bundling a subscription. There is no longer any reason to ration checks to once a year.
Do this now
Freeze your credit at all three bureaus this week, for every adult in the household, and for your children's files too. And turn on two-factor authentication for email and banking before anything else.