Two free locks almost nobody sets
Two of the most effective protections against identity theft and phone-number hijacking are free, take about ten minutes total, and most people never turn them on: a credit freeze at the three bureaus, and a carrier port-out PINon your phone line. Between them they block the two main ways an attacker cashes in — opening new credit in your name, and stealing your number to intercept text codes. Here is how to set both.
Shield 1: Freeze your credit
A credit freeze restricts access to your credit file, so a thief cannot open new accounts in your name even if they have your details. It has been free at all three bureaus since 2018, and it does not affect your credit score or your existing accounts. The one thing to know: unlike a fraud alert, you must set a freeze at each bureau separately.
- Equifax, Experian, and TransUnion— freeze with each one, online or by phone. Save the credentials or PIN each gives you.
- When you genuinely apply for new credit, temporarily liftthe freeze and re-apply it after — also free.
Do not confuse three similar tools. A freeze is the statutory, free, strongest option. A lock is a paid or app-based product some bureaus market that does something similar by contract. A fraud alert is a one-bureau, one-year flag that asks lenders to verify your identity but does not block new credit. For most people, the free freeze is the one to use.
Shield 2: Lock your phone number
The second shield stops a SIM swap— an attacker moving your number to their device to steal your text codes. Every major US carrier now offers a free account lock or port-out PIN, a code required before your number can be ported or moved to a new SIM. Note that this is separate from your regular account PIN.
- Verizon — turn on Number Lock in the app or account security settings.
- AT&T — enable Wireless Account Lock. It is the newest of the three, launched in July 2025, so check that it is switched on.
- T-Mobile — turn on Account Takeover Protection.
If you want to understand the attack these locks defend against, see what a SIM swap is and how to spot one, and SIM-swap attack recovery if a number has already been hijacked.
Why these two, together
These shields cover the two big money vectors. The credit freeze stops new-credit fraud; the carrier lockstops the SIM swap that hijacks your SMS two-factor codes. Both are free, reversible, and take minutes — and they are most useful before anything goes wrong. If you are already dealing with theft, work through your first 48 hours after identity theft and consider a professional identity-theft investigation.
Your 10-minute setup checklist
- Freeze your credit at Equifax, Experian, and TransUnion (each separately).
- Turn on your carrier's account lock or port-out PIN.
- Move your most important accounts off SMS codes to an authenticator app or security key.
- Store every PIN and credential in a password manager so lifting a freeze later is painless.
Sources
- Federal Trade Commission, What To Know About Credit Freezes and Fraud Alerts. https://consumer.ftc.gov/articles/what-know-about-credit-freezes-and-fraud-alerts
- Federal Trade Commission, Free credit freezes and yearlong fraud alerts (press release). https://www.ftc.gov/news-events/news/press-releases/2018/09/starting-today-new-federal-law-allows-consumers-place-free-credit-freezes-yearlong-fraud-alerts
- Verizon, Protect against unauthorized port-outs (Number Lock). https://www.verizon.com/about/account-security/unauthorized-port-outs
- AT&T, AT&T Wireless Account Lock (newsroom). https://about.att.com/story/2025/wireless-account-lock.html
- T-Mobile, Account Takeover Protection. https://www.t-mobile.com/support/plans-features/account-takeover-protection/
















