Embed the Credit Freeze Tool
Two lines of HTML puts a working credit freeze letter generator on your page. It is free, it has no dependencies, and it sends nothing to any server.
Built for legal aid offices, senior centers, credit unions, and other elder law firms. If your visitors include families protecting an older adult, take it and use it.
Paste This
<div data-stepup-freeze></div>
<script src="https://stepuplaw.com/embed/credit-freeze.js" async></script>That is the whole integration. The script looks for every element carrying data-stepup-freeze and renders a widget into each one, so a single script tag covers as many placements as you want.
<!-- The script scans for every container on the page, so one
script tag covers as many widgets as you place. -->
<div data-stepup-freeze></div>If You Cannot Paste a Script Tag
Wix, Squarespace, Google Sites and most page builders will not let you add a script tag, but every one of them has an element that embeds another page by URL. Point it at this address and you get the same widget.
https://stepuplaw.com/embed/frame/In Wix the element is called Embed a Site, in Squarespace it is a Code block set to embed, and in Google Sites it is Embed by URL. Set the height to about 900 pixels and the width to full. The page tells the parent window how tall it is as the visitor moves through the form, so a builder that can size to content will follow along.
WordPress and Joomla
On WordPress, install the Credit Freeze Letters plugin and add the block, or type the shortcode [credit_freeze] into any page. On Joomla, install the content plugin and type {credit_freeze} into any article. Both carry the widget inside the download, so neither one calls out to another server, and both let you set the colours from the settings screen.
Working Copy, Right Here
This is the real widget, running from the same file you would embed. Fill it in and print.
What We Ask, Which Is Not a Condition
The code is plain MIT. It asks nothing of you beyond keeping the copyright notice in the source, and you can restyle it, translate it, fork it, or ship it inside a commercial product without telling us.
Here is the ask, and it is only an ask. Please leave the credit line the widget renders at the bottom, naming Kevin D. Klagge, Esq. with a plain link to stepuplaw.com. If you would rather write your own wording, that is fine too, and if you need it gone entirely, data-sufz-credit="off" on the container removes it.
We wrote this for our own clients, letting your visitors use it costs us nothing, and that link is what makes maintaining it worth doing. It is also the practical way corrections travel: when a bureau moves a post office box, we hear about it because someone followed that link and told us. The full text is in the LICENSE file.
Matching Your Colors
Set any of these on the container and the widget follows.
[data-stepup-freeze] {
--sufz-brand: #1F4D3A; /* buttons and accents */
--sufz-fg: #14201A; /* body text */
--sufz-mut: #475569; /* muted text */
--sufz-line: rgba(71,85,105,.22); /* hairlines inside the card */
--sufz-edge: #334155; /* outer frame and tab strip */
}Questions
What Does the Widget Cost?
Nothing. There is no account, no key, no usage limit, and no paid tier. The code is MIT licensed, which asks nothing of you beyond keeping the copyright notice in the source. We do ask, without requiring it, that you leave the credit line at the bottom of the widget in place with its link to stepuplaw.com. That link is what makes maintaining this worth doing, and it is how corrections reach you when a bureau moves a post office box.
Does It Send Anything to a Server?
No. After the script file loads, the widget makes no network calls at all. There is no analytics, no tracking pixel, no cookie, and no form submission. Names and addresses typed into it stay in the visitor’s browser and are gone when the tab closes. An attached photo of a document is read locally with the browser’s file reader and never uploaded. The widget also never asks for a Social Security number, and you should not add a field for one.
What Does the Widget Actually Include?
Three tabs. The first is the fraud alert, which is the five minute step, with tap to call numbers for all three bureaus and the rule most people get wrong, that one call obligates that bureau to notify the other two. The second writes the credit freeze letters for all three bureaus, either for the visitor or for someone they hold a power of attorney, guardianship, or conservatorship over. Your visitor can attach photos of the documents they need to enclose, and each one prints behind each letter so the printout separates into three complete envelopes. The third is for money already gone, with the recall and Hold Harmless Letter script for the sending bank, a lookup of the fraud line at more than thirty institutions, and the reporting steps that matter in the first 72 hours.
How Big Is It?
One JavaScript file, 40 KB of source that arrives compressed at about 11 KB, with no dependencies and no framework. It injects its own stylesheet once, scoped to its own class names, so it will not touch the rest of your page. Load it with the async attribute and it will not block rendering.
Does It Carry a Disclaimer?
Yes, and it travels with the widget so you do not have to write one. The footer states that the tool is general information rather than legal advice and creates no attorney-client relationship, that agency contact details change without notice and should be confirmed before mailing or calling, and the date the addresses and numbers were last verified against the bureaus. That date updates when we re-verify, which is another reason to load the script from stepuplaw.com rather than copying it.
Can I Change How It Looks?
The widget reads five CSS custom properties on its container, so you can match your own palette without touching the script. Override --sufz-brand for the button and accent color, --sufz-fg for body text, --sufz-mut for muted text, --sufz-line for the hairlines inside the card, and --sufz-edge for the outer frame and the tab strip. Keeping those last two separate means you can strengthen or soften the outline without touching every divider inside. Restyle it however you like. If you need the credit line gone, put data-sufz-credit="off" on the container, or switch it off in the settings if you are running the WordPress or Joomla plugin. The disclaimer stays either way, because that is the part that protects you.
Who Should Put This on Their Site?
Legal aid organizations, Area Agencies on Aging, senior centers, credit unions, adult protective services pages, guardianship programs, financial counselors, and other elder law firms. Anyone whose visitors include families protecting an older adult. We built it for our own clients and there is no reason to keep it to ourselves.
Is the Code Public?
Yes. The letter logic, every bureau address, and the statutory language are on GitHub as elder-fraud-toolkit, so you can read what the widget will put in front of your visitors before you embed it. If a bureau changes an address, open an issue and it gets fixed for every site running the widget at once.
Are You Responsible for What My Visitors Mail?
No, and the credit line says so. It identifies where the tool came from and does not mean we reviewed your site or advised your visitors. The widget produces template correspondence from published law and published bureau procedures. It is general information, not legal advice, and it creates no attorney-client relationship with you or with anyone who uses it.
Embedded it somewhere?
Tell us and we will link back to you from this page. If you need a change to make it fit, open an issue on GitHub and we will take a look.
Updated on August 12, 2026. Reviewed by Kevin D. Klagge, Esq., Fla. Bar No. 99502. Attorney Kevin Klagge represents families, businesses, and international clients in estate and tax planning, business structuring, and international law, with a focus on Florida legal tools. He litigates estate and business issues in court. The widget produces template correspondence from published federal law and published bureau procedures. It is general information, not legal advice, and embedding it does not create an attorney-client relationship. Bureau addresses and procedures change, so keep the script loading from stepuplaw.com rather than copying it, and it stays current for you.