How to keep your identity private

Your personal information is valuable. Criminals can use information such as your Social Security number, account numbers, passwords, date of birth, address or other identifying information to impersonate you, access accounts or open new accounts in your name.

You cannot prevent every data breach or identity theft attempt, but you can make it much harder for someone to obtain and misuse your information. The following habits can help protect your identity.

Protect Your Social Security Number

• Do not carry your Social Security card unless you actually need it. Keep it in a secure location at home rather than routinely carrying it in your wallet or purse.
• Do not provide your Social Security number simply because someone asks for it. Ask why it is needed, how it will be used and whether another form of identification can be used instead.
• Be especially cautious with unexpected requests for your Social Security number. Government agencies, financial institutions and other legitimate organizations can be impersonated by scammers. Independently verify who is contacting you before providing sensitive information.

Share Less Personal Information

• Think before providing personal information. Do not provide your Social Security number, bank account information, card numbers, passwords, authentication codes or other sensitive information unless you initiated the contact and know why the information is necessary.
• Limit what you share on social media. Birth dates, family names, pets, schools, hometowns, vacations and other details can give criminals information that may help them impersonate you or answer account-recovery questions.
• Review your privacy settings. Restrict who can see personal information, photos, posts, friends lists and other details on social media and online accounts.
• Be cautious with quizzes, surveys and games. Questions about your first car, childhood street, mother's maiden name or favorite pet may resemble information traditionally used for account security questions.

Protect Your Online Accounts

• Use strong, unique passwords. Avoid using the same password for multiple important accounts. If one company experiences a data breach, a reused password may allow criminals to access your accounts elsewhere.
• Consider using a reputable password manager. A password manager can help you create and maintain unique passwords without having to remember every password yourself.
• Turn on multifactor authentication whenever available. This adds another layer of protection beyond your password. An authentication app, security key or other strong authentication method may provide additional protection when offered.
• Never give someone a one-time verification code. A caller or texter asking you to read back a security code may actually be attempting to access your account or reset your password.
• Keep your devices and software updated. Install operating-system, browser and application security updates so known vulnerabilities can be corrected.
• Lock your devices. Protect phones, tablets and computers with a PIN, password, biometric lock or other security feature.

Watch for Phishing, Text and Phone Scams

• Do not trust a message simply because it appears to come from a familiar organization. Criminals can impersonate banks, credit unions, government agencies, delivery companies, technology companies and people you know.
• Be suspicious of unexpected requests for personal or financial information. This includes requests made by email, text message, telephone call, social media message or pop-up notification.
• Do not use contact information supplied in a suspicious message. If you are concerned about an account, contact the organization independently using its official website, mobile application, a trusted statement or the number printed on the back of your payment card.
• Be cautious when someone creates urgency or fear. Claims that your account has been compromised, your benefits will be suspended, you owe money or immediate action is required are commonly used to pressure people into revealing information.
• Never allow an unexpected caller to remotely access your computer or mobile device. A scammer who gains remote access may be able to view financial information, capture passwords or manipulate what appears on your screen.

Protect Your Mail and Paper Records

• Collect your mail promptly. Financial statements, checks, tax documents, credit offers and other mail may contain information useful to an identity thief.
• Pay attention to missing mail. Unexpectedly missing statements, bills, checks or replacement cards may indicate that someone has intercepted or redirected your mail.
• Shred sensitive documents before disposing of them. Destroy documents containing Social Security numbers, financial account information or other sensitive personal information when you no longer need them.
• Keep important documents secure. Store passports, Social Security cards, tax records and other sensitive documents somewhere that visitors, contractors and others cannot easily access.
• Do not leave sensitive documents in your vehicle. Wallets, checks, financial statements and identification documents can be stolen during a vehicle break-in.

Protect Your Debit and Credit Cards

• Keep possession of your cards whenever possible. Report a missing or stolen debit or credit card promptly to the issuing financial institution.
• Protect your PIN. Cover the keypad when entering your PIN at an ATM or payment terminal and do not write your PIN on your card.
• Look at ATMs and payment terminals before using them. If the card reader appears loose, damaged, altered or unusual, do not use it and notify the business or financial institution.
• Enable account alerts when available. Transaction, purchase, withdrawal and login alerts can help you identify suspicious activity sooner.

Be Careful When Using Public Wi-Fi and Shared Devices

• Avoid accessing sensitive accounts on devices you do not control. Public or shared computers may store information or contain software that can capture what you enter.
• Use caution on public Wi-Fi. Avoid transmitting sensitive personal or financial information unless you are using a secure connection you trust.
• Do not leave your phone, tablet or computer unattended while unlocked. Someone with physical access may be able to view saved passwords, email, financial information or authentication messages.

Dispose of Old Devices Safely

• Remove your personal information before selling, donating, recycling or disposing of a device. Follow the manufacturer's instructions for securely erasing the device and restoring it to factory settings.
• Remove SIM cards, memory cards and other removable storage when appropriate. Make sure personal information is not left behind on a device you no longer control.

Monitor Your Financial Accounts

• Review your bank and credit card accounts regularly. Look for purchases, withdrawals, transfers or other activity you do not recognize.
• Investigate unfamiliar transactions promptly. Even a small transaction can be important. Contact your bank, credit union or card issuer using a trusted phone number or official application if something appears suspicious.
• Review your credit reports. Look for accounts, inquiries or other information that you do not recognize.

Consider Freezing Your Credit

A credit freeze can make it harder for an identity thief to open new credit accounts in your name. A freeze is free and can be placed with each of the three nationwide credit reporting companies: Equifax, Experian and TransUnion.

A credit freeze does not affect your credit score and does not prevent you from using your existing accounts. You can temporarily lift or remove the freeze when you legitimately need someone to access your credit file.

Pay Attention to Data-Breach Notices

• Do not ignore a legitimate notice that your information was exposed. The appropriate response depends on what information was involved.
• Change affected passwords promptly. If you used the same or a similar password elsewhere, change those passwords too.
• Consider a credit freeze if sensitive identifying information was exposed.
• Monitor the accounts associated with the exposed information. Follow any additional recommendations provided by the organization and trusted government resources.

Know the Warning Signs of Identity Theft

Take action if you notice:

• Transactions or withdrawals you do not recognize.
• Accounts on your credit report that you did not open.
• Unexpected credit inquiries.
• Bills or collection notices for accounts that are not yours.
• Mail that unexpectedly stops arriving.
• A credit card, loan or account application you did not make.
• Unexpected password-reset or authentication notifications.
• Changes to the email address, phone number or other information associated with one of your accounts.

If Your Information Is Lost, Stolen or Exposed

• Contact your bank or credit union promptly if financial account information, debit cards, checks, online banking credentials or other financial information may have been compromised.
• Change passwords for affected accounts and enable multifactor authentication if it is available.
• Review your financial accounts and credit reports for activity you do not recognize.
• Consider placing a credit freeze or fraud alert depending on the information that was exposed and your circumstances.
• Report identity theft and obtain a personalized recovery plan at IdentityTheft.gov if someone has used your personal information without permission.