Credit Freeze vs Credit Lock: Which One You Actually Need

You just got a fraud alert, or you saw your information in a data breach notice, or someone tried to open a card in your name. Now you're staring at two options on your credit bureau's website, "freeze" and "lock," and they look like the same button with a different label. They're not, and picking the wrong one can cost you time when you need speed the most.

Here's the answer: get the freeze. It's free, it's backed by federal law, and it does the same core job as a lock, which is blocking new creditors from pulling your credit report. The lock is a convenience product the bureaus sell you, often bundled with a paid monitoring service, and it runs on a private contract instead of a legal right. For almost everyone, the freeze is the better tool. Keep reading for the one situation where that changes.

What a credit freeze actually does

A credit freeze restricts access to your credit report at Equifax, Experian, and TransUnion. When a freeze is active and a lender pulls your report to open a new account, the bureau returns a report that says the file is frozen, or in some cases returns nothing usable. Since new credit almost always requires a hard pull, a freeze stops most new account fraud cold.

Freezes are governed by federal law, specifically the Fair and Accurate Credit Transactions Act as amended in 2018. That law requires all three bureaus to offer freezes for free, to let you place one online in most cases, and to lift it within one hour if you unfreeze online, or within three business days if you request it by mail. That one hour number matters. It's the law, not a marketing promise.

Freezes also do not expire on their own and they do not affect your credit score. Existing accounts still work normally. You can still use your current credit cards, your mortgage servicer can still report your payments, and your score keeps updating. The freeze only blocks new inquiries tied to new account applications.

What a credit lock actually does

A lock does almost the same thing on the surface. You flip it on through an app, new creditors can't see your report, you flip it off when you need it. The difference is underneath.

A lock is a product built on a contract between you and the bureau, not a right created by federal law. That means the terms, the guarantees, and the speed of unlocking are whatever the bureau's terms of service say this year. Some lock products are free. Many are bundled into paid plans that run $10 to $30 a month and include identity monitoring you may not need. Read the agreement before you assume "lock" means "free and instant," because it can be either, both, or neither depending on which bureau and which plan.

There's also a legal detail worth knowing. Some lock agreements include an arbitration clause, meaning if the bureau messes up your lock and you're harmed by it, you may have signed away your right to sue and be routed into arbitration instead. A freeze, being a statutory right, doesn't come with that trade-off.

Where people get this wrong

The most common mistake is thinking the lock is faster. It isn't, not by law. It might be faster on that specific bureau's app on that specific day, but nothing requires it. The one hour online unfreeze rule for freezes is a legal floor, not a best case.

The second mistake is paying for a bundled lock service when the freeze does the same blocking job for free. If a $15 a month product is really identity theft insurance and monitoring you'd buy anyway, that's a separate decision. But don't pay for the locking mechanism itself when the freeze version costs nothing.

The third mistake is freezing or locking only one bureau. Lenders don't all pull the same bureau. A mortgage lender might pull all three. An auto lender might pull just Experian. A store card might pull TransUnion. If you freeze Equifax and skip the other two, someone can still open an account using whichever bureau you left open. All three need to be frozen for the protection to mean anything.

A worked example

Say your wallet gets stolen with your driver's license and a pre-approved credit card offer inside it. Someone tries to open three new accounts using your name and social security number, one application to a bank that pulls Equifax, one to a retail card that pulls TransUnion, one to an online lender that pulls Experian.

If you froze all three bureaus the day you noticed the wallet missing, all three applications get rejected or flagged at the pull, because each lender hits a frozen file. Cost to you: $0. Time to set up: about ten minutes per bureau, done online.

If you had instead just locked one bureau, say Experian, because that's the app you happened to download, the other two applications go through unblocked. The thief now has a live account with your name on it, and you find out when a collections letter shows up two months later. The gap wasn't the difference between freeze and lock, it was the gap of only covering one bureau. That's the part people skip.

Now say you need to apply for an apartment lease next month and the property manager runs your credit through TransUnion. If TransUnion is frozen, you unfreeze it online, wait for the confirmation email, usually a few minutes, and it's open for the pull. Same day, no cost, no lost application.

The one honest limitation

A freeze does not stop every kind of fraud. It blocks new account fraud, which is the account-opening kind. It does nothing for someone who already has your existing card number and is running charges on an account you already have open. That's a different problem, solved by watching your existing statements and reporting fraudulent charges to the card issuer directly, not by freezing anything. If your specific worry is someone using a card number they stole rather than opening a new one, a freeze won't touch that risk at all.

What to actually do

Go to each bureau's site directly, Equifax, Experian, TransUnion, and place a freeze on all three. Skip any bureau's marketing page that leads you to a paid lock plan first. Write down your PIN or login for each one somewhere you'll actually find it, because you'll need to unfreeze temporarily the next time you apply for credit, rent an apartment, or get a phone plan that requires a credit check.

Getting the freeze right is one piece of a bigger picture, the kind we walk through step by step inside Foundation at readmoneydecoded.com/foundation, where the goal is building credit and financial decisions you understand completely, not ones you take on faith.

← All articles