Tooling

Credit Monitoring & Reports

AnnualCreditReport.com (★ ★ free official), Credit Karma, Experian, freezes vs locks vs alerts — the legitimate free credit-data landscape.

The credit-bureau landscape has one ★ ★ free official source (AnnualCreditReport.com — your weekly free credit report from each bureau by federal law), several free monitoring services that monetize via offers, and a paid identity-theft-protection tier. There is no OSS / self-host option here — credit data is locked behind the three bureaus. Credit freezes are free and underused. For the broader index see Self-Hosted Personal Apps; for the post-Mint paid finance tier see Bill Tracking & Household Finance; for SOC2 / compliance context see SOC2 Compliance; for password / breach monitoring see Self-Hosted Passwords; for inheritance see Inheritance & Tax Planning.

The single official free source (★ ★)

  • ★ ★ AnnualCreditReport.comthe only federally authorized source for free credit reports from Equifax, Experian, and TransUnion. As of 2023+, free weekly reports from each bureau (extended permanently from the original annual cadence). Data only — no FICO score. The single most-trusted, ad-free, no-upsell place for credit data.
  • ★ Discover / Capital One / Chase / etc. — many credit-card issuers provide free FICO scores in the app — usually a single bureau, refreshed monthly. Free; no ads; not the report itself.

Free monitoring services (★ — but ad-supported)

  • Credit Karma (Intuit-owned, post-Mint) — free; Equifax + TransUnion VantageScore (not FICO); offers + targeted ads as monetization model.
  • Experian — free + paid; only direct-from-bureau free service; gives Experian FICO 8; aggressive upsells.
  • Credit Sesame — free + paid; TransUnion VantageScore.
  • WalletHub — free + paid; multiple bureau data.
  • Mint Credit — gone with Mint.
  • Bank apps with free credit-score widgets — Chase Credit Journey, Wells Fargo CR, Capital One CreditWise, Discover Credit Scorecard — all free; usually one bureau.
  • LifeLock (Norton) — paid (~$10–35/mo); monitoring + insurance + restoration.
  • Aura, IdentityForce, Identity Guard, IDShield — paid; broadly similar.
  • MyFICO — paid; only legit source for actual FICO scores from all three bureaus + score simulator. Useful before a major loan application.
  • Privacy.com (paid premium) — virtual cards; not credit monitoring per se but reduces exposure surface.

Credit freeze vs lock vs alert (★ understand the difference)

  • ★ ★ Credit freezefree, federally protected, the strongest tool. Place online at each bureau; prevents new credit pulls until you unfreeze. Recommend default on; lift temporarily for legit applications. The post-Equifax-2017-breach answer.
  • Credit lockpaid, weaker than a freeze, marketed by bureaus as "easier"; you sign a contract that limits liability differently. Use the free freeze; don't pay for a lock.
  • Fraud alertfree, weaker than a freeze; flags applications for verification; renews each year. Useful after suspected ID theft.
  • Initial fraud alert (90 days) + extended fraud alert (7 years for verified ID-theft victims) — both free.
  • Active-duty military alert — free; for deployed servicemembers.

Children's credit

  • ★ ★ Freeze your child's credit — free; shockingly effective; child SSNs are highly targeted because no one looks for years. Each bureau accepts written / online requests with parent ID + child SSN.
  • ★ Verify no credit history exists; if there's any file, dispute immediately.

Disputes (★ free)

  • ★ Each bureau is required by FCRA to investigate disputes within 30 days; dispute online, free.
  • CFPB complaint portal — free; escalation path when a bureau is unresponsive; data shows resolutions accelerate after CFPB filing.
  • ★ Document everything; certified mail for serious disputes; keep copies.
  • MyFICO — paid; the only consumer source for actual FICO scores from all three bureaus. Worth one month subscription before a mortgage / auto loan / refinance to know what underwriters will see.
  • VantageScore (Credit Karma / others) is not the same as the FICO score lenders use; usually within 20–40 points but not identical.

Credit-utilization + score levers (free advice)

  • Utilization < 30% of available credit — and ideally < 10% — moves the score most.
  • On-time payments — autopay minimums everything to avoid 30-day-late marks.
  • Average age of accounts — don't close oldest cards casually.
  • Credit mix — installment + revolving variety helps marginally.
  • Hard inquiries — temporary 5–10 point dip; falls off in ~2 years.

Self-host / OSS — the honest take

  • There is no OSS / self-host substitute for credit-bureau data. Bureau data is locked.
  • What you can self-host: financial dashboards that include manually entered credit balances + utilization (Firefly III, Beancount, Actual Budget). Track utilization yourself; freeze externally.
  • Breach monitoring — Have I Been Pwned (free), self-host Watchtower / HIBP integration in Bitwarden / Vaultwarden. See Self-Hosted Passwords.
  • SSN exposure check — IRS IP PIN (free; opt in); SSA "my Social Security" account (free; track earnings record + flag fraudulent claims).

License / pricing

  • AnnualCreditReport.com: free.
  • Credit Karma, Experian (basic), Credit Sesame, WalletHub, bank-app credit widgets: free.
  • Credit freezes / fraud alerts / disputes / CFPB complaints / IRS IP PIN / SSA account: free.
  • MyFICO: paid.
  • LifeLock, Aura, IdentityForce, Identity Guard, IDShield: paid.
  • Privacy.com (paid premium): paid.

Pick this if…

  • Default annual / quarterly check (★ free): AnnualCreditReport.com.
  • Want a daily-check app (free, ad-supported OK): Credit Karma + Capital One CreditWise.
  • Pre-mortgage / pre-auto-loan score check: MyFICO for one month.
  • Default protection (★ ★ free, do today): freeze all three bureaus + freeze kids' bureaus + IRS IP PIN.
  • Recent ID theft: extended fraud alert + freezes + LifeLock-shape paid restoration if you want hand-holding.
  • Regular monitoring is enough: the bank-app free score widgets cover it.