Identity Theft Protection for Families in 2026: What “Family” Actually Buys You

Identity theft protection for families is sold on a headcount, and paid out on a definition. Aura advertises five adults and unlimited kids. Its policy says any family member who does not live at your address is not eligible for coverage. Both sentences are true. Only one of them pays a claim.

On August 4, 2026 I read four benefit documents, from Aura, Identity Guard, LifeLock, Experian and IDShield, plus the published coverage terms of two insurance routes. Prices came from each vendor’s own page the same day. What follows is what those documents say, next to what the pages selling them say.

“Family” is not a defined term, and every vendor defines it differently

There is no industry meaning for the word in identity theft protection for families. Each company decides how many people it counts, whether it counts them as adults and children or just as people, and whether those people have to live with you. Four brands, four answers.

Read the second row again. Three of the four biggest subscription brands restrict paid coverage to people living at your address, and they only put it in writing where almost nobody looks. Not on the plan page. In the summary of benefits.

One word in that table does less than it appears to. “Unlimited kids” is a headcount, not an age. The age ceilings sit in the benefit documents, and they differ: Aura stops at 21, or 26 for a full-time student, and LifeLock at 21, or 24 for a student who is a relative. Nobody is unlimited for long.

The address rule: who is allowed to live somewhere else

Most people shopping for identity theft protection for families are buying it for one specific person. Usually a parent. Sometimes a student, sometimes an adult child, occasionally a sibling. The question of whether that person has to share your front door is the single most consequential thing on the contract, and it is answered in a document you receive after you pay.

More Read

McAfee vs Norton: What Year Two Costs and What the Labs Show

Is Avast Safe in 2026? The FTC Case, Lab Tests and Refunds

TotalAV Review 2026: What Year Two Costs and How to Leave

Is Windows Defender Enough? What a Year of Lab Tests Shows

What Is a Passkey? How It Works and What If You Lose It

Aura’s $5M Insurance Summary of Benefits, last updated August 15, 2025, defines a covered family member as a spouse or domestic partner, parent, sibling, child “or any other member of, or dependent persons residing in the primary member’s household.” Then it closes the door:

“Any family member who does not reside at the primary member’s home is not eligible for coverage, except unmarried children (including those who the member is a legal guardian) under twenty-six (26) years of age if a full-time student at an accredited college or university.”

Look at who the exception is written for. A college student gets a carve-out. A parent does not. A parent is named in the definition of family member and then removed by the next sentence, because a parent, by definition, has their own home. The $1M version of the same document, last updated April 29, 2025, carries the identical wording. This is not a quirk of one policy tier. It is the house rule.

Identity Guard runs on the same document. I checked by clicking. The footnote on Identity Guard’s own pricing page invites you to “Review the Summary of Benefits”, and the link goes to aura.com. The two brands share an owner, which our Identity Guard review documented in detail. What matters here is narrower: the paperwork that decides whether your family gets paid is one and the same file.

LifeLock says the same thing, and then contradicts itself

LifeLock’s Summary of Benefits, document code SIE SB 10 2025, issued by HSB Specialty Insurance Company, defines a member as the primary member plus, where family coverage applies, “the residents of the household of the primary member” who are relatives, or under 21 and in their care, or a full-time student who lived in the household before moving out to attend school, capped at 24 for a relative.

The same company’s family plans page, on the same day, sells the two-adult tier with this line: “Add a spouse, parent, grandparent, sibling.”

Same vendor. Same product. Two pages of the same website. I searched the family plans page for the word “household” and found it zero times. The word “reside” appears once, in a footnote about which US states the scam coverage is sold in, never as a rule about who is covered.

Two of the biggest subscription families in the category write the student exception and skip the parent. That is a choice, not a constraint, and two other routes prove it.

The two routes that cover the person the others exclude

Allstate Identity Protection publishes the opposite rule, in its own words: “Family member coverage extends to your dependent children, or other dependent family members, who do not reside with you but who are supported financially by you.” It goes further. “There is no age limit or floor for enrolled family members.” And for older relatives it drops the financial test as well: coverage “extends to relatives 65+ who do not reside with you or receive financial support from you.” Our full Allstate Identity Protection review covers what else that plan does and does not do.

Then there is the cheapest thing on the board. State Farm sells identity restoration as a rider at $25 per year, attached to an existing home, renters, condominium, manufactured home or farm policy. On its own page it says this:

“We may also provide coverage if you’re responsible for an elderly parent and have power of attorney.”

A rider, sometimes called an endorsement, is an add-on bolted to a policy you already hold rather than a product you buy on its own. Power of attorney is the document that lets you act on somebody else’s behalf, and every institution decides for itself which version it will accept, so ask before you assume.

Read the hedge too. It says “may”, not “does”, and the limit is modest: up to $50,000 for necessary and reasonable expenses, with expense reimbursement and fraud loss “jointly subject to an expense reimbursement and fraud loss limit of $50,000 annual aggregate per insured.” It reimburses the cost of cleaning up, not the money taken. You also have to hold a State Farm policy to attach it.

Even with all of that, the point stands. A $25 rider names the case that a $384-a-year subscription excludes.

One pot or one each: how the insurance is actually structured

Identity theft protection for families holds its insurance in one of two shapes. Either every covered person has their own limit, or the whole household draws from a single pool. The difference only becomes visible when two people are hit in the same year, which is exactly when you find out which one you bought.

Aura’s plan page prints “Up to $5M Identity Theft Insurance ($1M per adult)”. The document underneath it prints this:

“The Aggregate Limit of Liability … will be the maximum amount we will pay for all covered losses per Family Plan regardless of the number of losses that occur for any one member per twelve (12) month period.”

The limits table in the same document reads “$5,000,000 per Single/Family Membership per 12 Month Period”. One figure, covering a single person and a family of six equally. Every sub-benefit underneath it, cash recovery, home title theft, cyber extortion, senior expense reimbursement, is marked “part of and not in addition to” that same number. It is one pot with a lot of labels on it.

There is a clause that partly reconciles the marketing with the document, and it should be read carefully rather than dismissed: “Each additional adult member on your Aura Membership Plan will be individually entitled to benefits under a Single Membership plan.” So an added adult does carry a separate entitlement. What the document does not say, anywhere, is whether that added adult must also live at your address. That gap is real and it is unresolved on the page.

LifeLock puts the same answer in a table

The HSB schedule for LifeLock’s scam, cyber extortion and online fraud coverage lists the individual and family versions of the same tier side by side.

The family column equals the individual column. Adding ten people to the plan does not add a dollar to this limit. It divides it.

This schedule governs the scam and cyber layer, not the headline identity theft reimbursement, which sits under a separate policy. That distinction matters and I am not going to blur it. Our review of whether LifeLock is worth it takes the main reimbursement ladder apart tier by tier.

One more definition from the same document deserves a place in your head. An occurrence means all events that “arise during the same policy period from the same source, cause or vulnerability.” A single breach that exposes a whole family is one occurrence, not five.

Membership headcount is a different unit from the insurance aggregate. Family adds eleven members, not eleven additional insurance pots.

Scam, cyber-extortion and online-fraud layer; 100 USD deductible per occurrence on every row. Family adds zero USD of annual aggregate. Aura similarly states 5M USD per Single/Family Membership, and cash recovery is limited to one occurrence in twelve months for everybody on a family plan.

Is your child insured, or only watched?

Children are the reason a large share of identity theft protection for families gets bought, and they are the members whose status is least clear. Being on the plan and being insured under the policy are two different things, and the vendors split on which one a child gets. Insurance has a term for the difference. A named insured is a person the policy will pay for. Everyone else on the account is a monitored member, which means the plan will tell you something happened and stop there.

Aura and Identity Guard answer in one sentence, and it is the same sentence. Character for character, on both pricing pages: “Child members on the family plan will only have access to online account monitoring and social security number monitoring features. All adult members get all the listed benefits.” Two competing brands, one footnote, one owner. Details of what Aura’s tiers gate are in our Aura review.

Experian answers the other way. Its Summary Description of Benefits for IdentityWorks Premium opens by telling you who is entitled:

“you and each child of yours that you enrolled in child monitoring (if applicable) are entitled benefits under the Master Policy”

That is the clearest statement I found anywhere that an enrolled child is inside the policy rather than beside it. The coverage sits at a $1,000,000 aggregate limit per policy period, with a deductible of zero, underwritten by subsidiaries or affiliates of American International Group under master policies issued to ConsumerInfo.com. Note the shape is still an aggregate. Better on the child question, same on the pot question.

LifeLock covers minors through LifeLock Junior, up to 10 of them, “for whom you are a parent or legal guardian”, and its family plan page attaches its reimbursement line to “each family member”. IDShield takes a fourth position, and it is the most explicit of all about what a child loses and when.

There is a practical reason this matters more for children than for anyone else on the plan. A child with no credit history has no file to watch, so monitoring produces nothing until somebody opens an account in their name, which is the moment the damage has already happened. If the child is inside the insurance, the plan can pay for the cleanup. If the child is only a monitored member, the plan tells you and then hands the bill back.

So the question to ask a salesperson is not whether children are covered. Every plan says yes. The question is whether a child is a named insured under the policy, and the answer lives in a document with a title like Summary of Benefits. Ask for it before you pay.

The clause nobody quotes: one cash recovery claim a year, for everyone

Every plan sold as identity theft protection for families splits its insurance in two. Expense reimbursement pays for the cleanup. Cash recovery is the part that gives you back money that was actually taken. On an Aura family plan, that second part is rationed by the household, not by the person.

“For Family Plans, the Cash Recovery Aggregate benefit is limited to payment for one (1) occurrence within twelve (12) consecutive months.”

The same one-occurrence restriction appears twice more in the same document, once for investment and health savings account cash recovery, once for the emergency cash benefit. Three separate clauses, each written specifically for family plans. This is not an artefact of general policy language. Somebody drafted it for families.

What that means in a bad year: your spouse gets defrauded in March and claims, your teenager gets defrauded in September, and the cash recovery benefit is gone. Expense reimbursement continues, up to what is left of the shared aggregate. The money-back part does not.

While you are in that document, two more lines are worth knowing. Legal help is capped at “$125 per hour”, which sets what a lawyer you can actually hire looks like. And there is an exclusion for loss caused by “the member or any person acting in concert with the member, or immediate family member”. Family-perpetrated identity theft is excluded by name, on a family plan.

That $125 figure deserves a moment, because restoration is the benefit families actually use. It is not a total. It is an hourly rate, and it applies to the attorney, the certified public accountant and the private investigator alike. The same document reserves the right to choose that professional, with your own pick allowed only by prior written consent. Whatever “white glove” means on the plan page, this is the shape of it underneath.

One breach, one occurrence, however many of you it hits

LifeLock’s benefit document defines an occurrence as all events that “arise during the same policy period from the same source, cause or vulnerability.” Read that against how breaches actually happen. A school system leaks, a health insurer leaks, an employer leaks, and everybody in one household is in the same file.

Under that definition your family has suffered one occurrence, not four. On a plan with a per-occurrence deductible, you pay it once, which is the good half. On a plan with a shared limit and a single cash recovery claim per year, the bad half is that the whole household is now drawing on one event.

The senior benefit that sits next to the exclusion

Here is the part I did not expect. The same Aura document that excludes non-resident family members contains a benefit called Senior Expense Reimbursement, which covers expenses and legal costs arising from “identity fraud of a member’s senior family member”. It carries the full aggregate figure, part of and not in addition to the main limit, and it is not available in New York.

So the policy has a senior benefit and a residency exclusion in the same file. On the plain wording, the benefit reaches a senior family member who lives with you. The parent in another city, the one most people are actually thinking about, is removed by the definition before the benefit can apply. The same document carries another unusual benefit, Ghosting Expense Reimbursement, for identity fraud committed against a member’s deceased family member.

I am not going to tell you those benefits are worthless. They are unusual and somebody thought about them. But a senior benefit gated behind a household test is a benefit designed for a multigenerational home, not for the way most American families are spread across a map.

What happens on the eighteenth birthday

A child covered by identity theft protection for families turns 18 and starts building credit for the first time. That is the moment monitoring is worth the most. It is also the moment most plans go quiet, and almost nobody writes down what happens.

Across nine of the ten pages ranking for this search, exactly one mentions an eighteenth birthday at all, once. None of the vendor plan pages I read states what happens to a minor’s profile, alerts or history on that date.

One benefit document does answer it, and the answer is a cliff. IDShield’s family plan covers the participant, their spouse or partner, dependent parents, and up to 10 dependent children under the age of 26. Then it splits them:

“Dependent children ages 18-26 and dependent parents of the participant or participant’s spouse are eligible for consultation and restoration services only. Monitoring services are not available for dependent parents and dependent children ages 18-26.”

Monitoring runs to 18. After that your child keeps the phone number for help and loses the thing that would have told them they needed it. The same rule applies to the dependent parent you added, which is worth pausing on: the parent is inside the plan and outside the monitoring.

The second adult has to show up

Identity theft protection for families is sold as one purchase, but it is not one signature. Adding a device to a plan takes a click. Adding an adult takes that adult. They have their own credit file, and no vendor will open it on somebody else’s say-so.

Allstate says it plainly: “You may not enroll your spouse or other family members or dependents who are over the age of 18 into credit monitoring. Any such spouse, adult family member or adult dependent must register for credit monitoring and pass identity verification separately.”

Two practical consequences follow. First, a paid seat can sit empty for a year because the person in it never finished signing up, and nothing on your bill will tell you. Second, this is why you cannot quietly put an unwilling relative under monitoring. If your reason for buying is a parent who does not want to deal with any of this, that is the wall you will hit, and it is worth hitting before you pay rather than after.

Aura’s structure implies the same thing from the other side. An added adult is “individually entitled to benefits under a Single Membership plan”, which is another way of saying they are their own member, with their own account.

What it actually costs per covered person

Identity theft protection for families is priced per household, which hides the number that matters. Prices below were read on each vendor’s own page on August 4, 2026. The last column is the only number that lets you compare these plans honestly, and exactly one vendor prints it themselves.

Allstate does the per-head arithmetic on its own page, which no other vendor here does: the Blue family tier is described as “You + 10 members for as low as $3.28/mo per person”, and the restoration-only tier at $6.00 a month works out at “$0.55/mo per person”.

Run the same maths yourself and the crossover is not where the marketing implies. Identity Guard’s family Value tier at $150 for the first year across five adults is $30 per adult per year. Nothing individual touches that. But it skips credit monitoring, so the tier worth having is Total. At renewal that is $359.88 for the whole household against $239.88 for the same tier bought by one person, both printed on Identity Guard’s own pricing page.

Two adults is where a family plan starts making sense on price alone. The trouble is that price alone is the wrong test, because at two adults you are usually still choosing between plans that cover your household and plans that cover your household plus the person who does not live in it.

Year two costs more, and the family tier does not always move with the individual one

Identity theft protection for families is sold on a first-year number. The number that matters is the second one, and the two tiers at the same vendor do not always behave the same way.

Identity Guard prints both figures on its own pricing page, which is more than most do. Take the family Total tier: $300.00 for the first year, renewing at $359.88. That is a twenty percent step, and it applies to every tier, individual and family alike. Predictable, at least, and printed where you can see it before you enter a card number.

LifeLock rebuilt its lineup in February 2026 and made standalone renewal prices match sign-up prices. That fix did not reach the Norton bundles, where our review found the old step-up still running. If you are buying LifeLock through a bundle rather than directly, check the renewal separately, because the number you signed at may not be the number you will pay.

Aura publishes no renewal price at all. Not for the individual tier, not for the family tier. You find out in your account dashboard after you have already bought. On a family plan that is a larger unknown than it looks, because you are committing several people to a subscription whose year-two cost is not on the page.

Allstate renews flat, which is the quiet reason its per-head arithmetic holds up over three years rather than one.

Match the plan to your household

Choosing identity theft protection for families starts with deciding who you need to cover, before you compare anything else. That one fact removes most of this market from your shortlist before price enters the conversation.

• Two adults and young children, one address. Everything on this page works. Choose on price per head and on renewal, and read our Identity Guard versus LifeLock comparison if you are between those two.
• Teenagers. Buy for the eighteenth birthday, not for today. Ask what happens to the profile on that date and get the answer in writing before you pay.
• A student who has moved out. This is the one case every subscription document covers explicitly. Aura’s exception runs to 26 for a full-time student, LifeLock’s to 24 for a relative. Check the age, they differ.
• A parent at a different address. Aura, Identity Guard and LifeLock exclude them in their benefit documents. Allstate covers relatives 65 and over regardless of where they live, and covers a younger relative you support financially. State Farm’s $25-a-year rider says it may cover a parent you hold power of attorney for, capped at $50,000 for expenses and only if you already hold a State Farm policy. Those two are your shortlist.
• A parent who will not participate. Nobody can enrol an adult in credit monitoring without that adult verifying their own identity. Solve the consent problem before the product problem.
• An incapacitated adult under guardianship. The blocking question is authority, not product. Our hub on whether identity theft protection is worth it covers what a power of attorney lets you do and where it stops.
• A multigenerational house under one roof. Headcount is your constraint. Ten people at Allstate, five adults at Aura and Identity Guard, two adults at LifeLock.
• An adult sibling or a disabled adult child. Aura’s definition reaches dependants with documented disabilities who share your address. Allstate’s reaches dependants you support financially at a different address. The wording decides it, not the marketing.

Older relatives face harms that credit monitoring does not touch. Benefit redirection, medical identity theft, and above all the call that talks someone into moving their own money. If that is the risk you are actually worried about, our guide to AI voice-cloning scams and our test of free deepfake detectors are more use than any subscription tier.

What the pages recommending these plans don’t say

On August 4, 2026 I took the ten results for this search, retrieved nine of them (one served a block page), stripped the markup and counted words. Not opinions. Words.

The pages ranking for this query repeat the vendors’ marketing vocabulary and never reach the vendors’ policy vocabulary. Five of nine print “per adult”. One says “aggregate”. None says “named insured”.

The vendors are no better on their own storefronts. Aura’s plan page runs to just under eighteen thousand characters and contains the word “reside” zero times and “household” zero times. Identity Guard’s plans page, zero and zero. LifeLock’s family plans page, zero for “household”. These are the words their own policies turn on.

One honest limit on that measurement. It counts vocabulary, not understanding. A page could in principle explain the shared-pot problem without ever typing the word aggregate. None of the nine did, but the number I am reporting is about the words.

Ten results were retrieved; one blocked access and was excluded. Counts are exact vocabulary occurrences by page, not comprehension. No guide explains the shared limit. Aura and Identity Guard plan pages use reside and household zero times. Filled circles in the original graphic represented pages, not people insured.

Three households this market does not serve at all

Identity theft protection for families assumes one shape of family: two adults and some children, all at one address, all willing. Step outside that shape and the products stop having answers.

Separated parents sharing custody. Two homes, one child, and no plan on the market with a second parent’s login. Nothing I read addresses whether a non-custodial parent can enrol a child, who consents, or what happens when both parents buy. The child ends up either doubly enrolled or not enrolled at all, and the vendors are silent on both outcomes.

An adult child managing a parent’s finances. The blocking question is not which plan. It is whether you are permitted to act, and with what paperwork. Powers of attorney are accepted by some institutions and refused by others. Then the plan itself adds a second wall: an adult has to verify their own identity, so the person you are trying to help has to participate in being helped.

Anyone protecting a relative who refuses. This is more common than the marketing admits. You cannot buy vigilance for somebody else. What you can do, and it is free, is freeze the credit of a minor or of a protected consumer where you hold the authority to act.

There is one more gap worth naming, because it sits inside a product people buy specifically for children. A plan sold as a kids product is not automatically an identity product. Aura sells a standalone Kids plan that carries parental controls and no identity monitoring, no credit protection and no insurance, which we took apart in our breakdown of what Aura’s tiers quietly gate. Screen time and identity theft are different problems with similar shelf placement.

Before you pay for anyone, do the free part

Federal law already gives you the strongest single move for a child, and it costs nothing: a protected consumer freeze at each of the three bureaus. It is free, it does not expire, and no subscription replaces it. Our hub on what the law already covers walks through how each bureau takes the request and where the paperwork gets awkward. If what you actually want is to watch credit files rather than insure against them, the free options are in our roundup of the best credit monitoring services.

How to read a family plan in ten minutes

Every plan sold as identity theft protection for families can be checked in six questions, in this order. The answers are almost never on the page with the price on it. Look for a link called Summary of Benefits, Terms, or Evidence of Coverage.

1. Search the benefit document for “reside” and “household”. If a sentence excludes members who live elsewhere, the plan cannot do the job most people buy it for.
2. Search for “aggregate”. If the limit is per membership, one bad year for one person spends the family’s coverage.
3. Search for “named insured” or “Member means”. This tells you who can actually be paid, as opposed to who appears on a dashboard.
4. Look for a family-specific sentence about cash recovery. One occurrence per twelve months is a real and common restriction.
5. Ask what happens at 18, in writing. Almost nobody publishes it.
6. Check the renewal price for the multi-person tier separately from the individual tier. They do not always behave the same way.

If the vendor will not show you the document before you buy, that is your answer for that vendor.

Frequently Asked Questions