It’s one thing for thieves to steal a password and break into an old account, but stealing your identity and stealing your tax refund? That’s another thing — and an increasingly common sight in a country flush with data breaches, wide availability of social security numbers, and increasing angst about unknown actors poking around in state databases. And while some privacy and security steps are common sense, one lesser-known trick could protect your return.

• Aside from utilizing two-factor authentication, credit bureau freezes, and strong passwords, Ron Lieber writes in WSJ that Americans should create an IP PIN.
• IP PINs, or identity protection PINs, offer an added level of security on your return, assuring that enterprising thieves can’t fraudulently file as you and create headaches.

How can you get one? The IRS used to only recommend higher-earning filers to apply for an IP PIN, but in Oct. 2024, it issued guidance encouraging “all taxpayers to sign up for an IP PIN for the 2025 tax season.” The easiest way to do so is to create an IRS Online Account. Then, it will walk you through the identity verification steps required to get an IP PIN. Taxpayers will get a new one each year, which goes in specified places on your return. If you file your own taxes, you’ll find this in different places, from software to software. Alternatively, if you rely on a third-party preparer to do it, make sure to inform them of your IP PIN in advance to avoid surprises.