A free year of breach-settlement identity monitoring and LifeLock's "Million Dollar" protection package both promise the same thing: that somebody is watching for fraud on your family's accounts. Only one of them ever actually sent an alert. That gap between what a service promises and what it delivers is the whole reason I started digging through the fine print, and it's the question at the center of this LifeLock review: is the identity theft protection headline worth paying for, or is it fraud prevention dressed up as marketing? For anyone juggling their own accounts alongside a parent's, that question isn't academic — it's the difference between real family digital safety and a false sense of it.
Quick disclosure before we go further: I use affiliate links here, and if you sign up for LifeLock or one of the other services through this page, I earn a commission at no extra cost to you (don't worry, I'll still tell you which one annoyed me). That doesn't change what I'll tell you about any of them. I've paid for and tested LifeLock, Norton, and McAfee across my own accounts and my parents', and the opinions below come from the paperwork trail, not the marketing page.
A Free Year of Fraud Monitoring That Never Once Pinged Me
Two months before I ever looked closely at LifeLock's numbers, a data-breach settlement offered me a free year of identity monitoring, and I signed up without reading much past the enrollment button. Nothing about my accounts changed during that year — no alerts, no emails, nothing — and it wasn't until I actually sat down and checked the settings that I realized the monitoring had never once flagged anything, or possibly hadn't been running at all. Free isn't the same thing as working. That's the lesson the year taught me, and it's the reason I started reading the fine print on paid options instead of assuming a checkbox equals coverage.
By the end of that free year, I'd started keeping my own paperwork instead of trusting an app to catch what a stranger was doing with my name — a habit that turned into a real system once my dad had his own scare. I remember pulling the last folder from 2022 out of the drawer to feed it into the shredder parked next to the printer in the spare-bedroom office of our split-level in Steele Creek, watching the pages curl and disappear, and realizing the binder back on the shelf was, for the first time in months, completely empty. The whiteboard above that corner desk still has a running checklist scrawled on it — which account got a fraud alert, which one actually got frozen — because a checklist doesn't forget, and apparently a "free" monitoring service can. Buried somewhere in that same paperwork is every FTC IdentityTheft.gov form we ever filed, along with a photo of the skimmer tape I peeled off a card reader at the Shell station on Providence Road — proof that identity theft protection has to cover the physical world, not just the accounts you can see on a screen.
The Three Buckets Behind the Million-Dollar Number
LifeLock's headline number only makes sense once you break it into pieces, because it isn't one pool of money you can spend on anything fraud-related. The biggest piece is stolen funds reimbursement — actual cash a thief drained from an account — and on the Ultimate Plus plan that limit runs up to 1,000,000, while the Standard plan caps it at just $25,000. The second piece covers personal expenses: notary fees, certified mail, even lost wages if you have to take time off work to untangle a mess someone else made. The third piece pays for lawyers and investigators if the theft turns into an actual legal problem, like someone racking up charges or committing a crime under a stolen name.
That third bucket turned out to matter more to my family than the headline figure ever did. My dad may never touch anywhere near the reimbursement ceiling, but knowing there's someone to call on a bad Sunday afternoon — someone whose job is untangling exactly this kind of mess — turned out to be worth more than the number on the brochure. This bucket is reimbursement money for restoration work, not the restoration process itself, and if you're weighing whether it's worth paying separately for that kind of help, I laid out my thoughts on if Norton 360 identity restoration is worth the cost in a separate piece.
What Does the Fine Print Actually Ask Of You?
None of that million-dollar language replaces your own paperwork, and this is the part nobody puts on the homepage banner. Your bank has its own clock for reporting unauthorized transfers, set by federal law under the Electronic Fund Transfer Act — and that clock doesn't pause while LifeLock's claims process works through your file. Wait too long to tell your bank, and its own protections thin out fast, even if LifeLock's insurance eventually kicks in. A higher potential payout also comes with a heavier documentation burden than most people expect: police reports, denial letters from the bank, a paper trail thorough enough to satisfy someone whose entire job is to say no.
Tax-related fraud raises that bar even further, since the documentation has to satisfy a completely different agency with its own forms and its own timeline. I wrote up that specific process separately, because it deserves more room than a side note here — see how to file taxes after identity theft if that's the situation you're dealing with. It's also where a coworker of mine, Deon, saved me real time: he found the IdentityTheft.gov checklist before I'd even heard the site existed, back when my dad's situation was still brand new and none of us knew where to start.
Weighing the Free Layer Against What You're Paying For
Free tools and paid insurance aren't competing for the same job, and mixing them up is where a lot of people go wrong. A credit freeze at all three bureaus costs nothing and blocks new-account fraud harder than any paid alert ever will, since a frozen file can't be pulled at all — a fraud alert, by comparison, just asks a lender to double-check before approving anything, which is a much weaker lock. Dark web monitoring falls into that same free-ish category: it tells you your information already leaked somewhere, which is useful, but it's a smoke detector, not a fire extinguisher.
My neighbor Bettye knocked on my door on a Sunday afternoon a while back, holding a printout of three credit inquiries she didn't recognize and looking like she hadn't slept. She didn't need a subscription that day — she needed the three bureau phone numbers written down where she could actually find them, so that's what she left with, scrawled on a notecard. Cases like hers are exactly why I don't think everyone needs to pay for monitoring right away; sometimes the free layer, used correctly and immediately, is enough to stop the bleeding.
What the free layer doesn't touch is where the paid packages start to earn their keep. A stolen Social Security number doesn't expire the way a cloned card number does — a bank can cancel a card in an afternoon, but an SSN stays exposed for good, and that's part of what the higher tiers are actually pricing in. None of the three coverage buckets get your name pulled off the data broker sites reselling it in the first place, either — that's a separate feature, one McAfee leans on harder through its Personal Data Cleanup tool than LifeLock does. A hijacked phone number is its own soft spot too, since a SIM swap can intercept the very verification codes these services depend on, and the email account behind everything is the first thing I lock down on a relative's phone, because it's the one login that can reset every other password on the list. Even the VPN bundled into some of these bundles only encrypts the connection, not the account itself — worth knowing before you assume it's doing more than it is.
These days, if a call sounds like it's from a government office — or even sounds like a shaky version of someone we know — I tell my dad to hang up and call back on a number he already has saved, since a familiar voice through the phone doesn't prove anything the way it used to. When I actually sat down and compared LifeLock against something like McAfee+, the difference that mattered most wasn't the insurance number at all: it was how many credit bureaus each one actually watches. LifeLock monitors all three major US bureaus on its higher tiers, while a lot of budget-tier plans only watch one, usually Equifax or TransUnion, which is like locking the front door and leaving the garage wide open. If a thief opens a loan against the bureau nobody's watching, you won't find out until a collections call shows up.
The reason I eventually leaned on Norton 360's bundled version instead of standalone LifeLock is the single dashboard — one login covers antivirus and identity monitoring both, which matters when you're also managing accounts for parents who can barely keep track of one password. I did try a cheaper standalone app for a few months first and canceled it before the year was out: the alerts arrived days late, and the "insurance" behind it turned out to be a maze of third-party providers I could never quite reach on the phone. That experience is a big part of why I stuck with a bigger name afterward, even knowing the renewal price would run two to three times the first year's rate once the promo ended.
Two Households, Two Different Plans
My parents ended up on LifeLock Ultimate Plus specifically because of that seven-figure stolen-funds ceiling — their retirement is sitting in accounts a thief would love to drain, and the gap between the Standard plan's limit and the top tier isn't small change to them. I'm on the Norton 360 with LifeLock bundle instead, mostly because I needed the VPN and device security for my work laptop anyway, and paying once for both felt smarter than juggling separate subscriptions. Home title monitoring is a related question I get asked a lot, and the honest answer is more limited than people expect — I dug into whether LifeLock Home Title Protect actually prevents deed fraud and the short version is that it mostly watches, it doesn't block anything before the fact.
So Which Layer Does Your Family Actually Need?
Choose the free layer — a freeze at all three bureaus, fraud alerts, a habit of checking card readers before you swipe — when your accounts are simple, your savings are modest, and you're disciplined enough to actually do the legwork yourself. Choose a paid tier like LifeLock Ultimate Plus when you're managing a parent's retirement accounts, a household with more moving pieces than one person can track, or assets big enough that a six-figure gap in reimbursement coverage would actually hurt. Most families I know end up needing both layers at once, just in different proportions depending on whose name is on which account.
No service in this review stops identity theft before it happens — they only catch it, insure it, or help clean it up after the fact, and any ad that implies otherwise is selling something. What paying for the higher tier bought my family wasn't a guarantee; it was a shorter list of things to panic about on a bad night, and a professional to call instead of guessing. If you're leaning toward trying it, you can look at the current LifeLock plans here and compare the tiers against what your own family actually needs to cover. Keep your own paperwork either way — check the card reader before you swipe, and freeze what you can freeze for free.