A credit freeze restricts access to your credit report so no lender can pull it to approve a new account, and it's free at all three bureaus because federal law says it must be. A credit lock does essentially the same thing — but it's a product the bureaus sell, governed by a user agreement instead of a statute, and often bundled into a paid monitoring subscription. Same door, very different lock on it.
The short version up front: for most people, the freeze wins. It costs nothing, it's your legal right, and it blocks new-account fraud just as completely as a lock does. The lock's honest advantage is convenience — a toggle in an app versus a PIN and a form — and for a few specific situations that convenience is worth having. This guide walks through exactly where they differ, how to set up a freeze in about 15 minutes, and who should actually consider the lock instead.
What does a credit freeze do?
A credit freeze (the law calls it a "security freeze") tells each credit bureau to stop releasing your credit report to new creditors. When an identity thief applies for a card in your name, the lender tries to pull your report, gets nothing, and denies the application. Since a 2018 federal law, placing, lifting, and removing a freeze is free at Equifax, Experian, and TransUnion, and it stays in place until you remove it.
Two details people miss. First, a freeze only works if you place it at all three bureaus — freezing one is locking the front door while the side doors swing open, because a lender can pull from any bureau. Second, a freeze doesn't touch your existing accounts: your current cards keep working, your score keeps updating, and companies you already do business with can still see your file. It only blocks new access.
What does a credit lock do?
A credit lock is the bureaus' commercial version of the same idea: flip a switch in the bureau's app and your report is blocked from new-creditor access; flip it back and it's open. Functionally, a locked report and a frozen report look identical to a lender trying to pull your file — both come back unavailable.
The differences live in the paperwork. A lock is governed by the bureau's terms of service, not by federal law. Some locks are free (TransUnion and Equifax have offered free lock tools), while others — most notably Experian's — are packaged inside paid subscriptions like CreditWorks or IdentityWorks that run to hundreds of dollars a year. Cancel the subscription and the lock can go with it. And because a lock is a contract rather than a right, the user agreement may limit remedies or route disputes to arbitration if something goes wrong — protections the freeze gives you by statute.
Freeze vs. lock, head to head
| Credit freeze | Credit lock | |
|---|---|---|
| Cost | Free at all three bureaus — guaranteed by federal law | Free at some bureaus; Experian's is typically inside a paid subscription |
| Legal backing | Federal law (Fair Credit Reporting Act, as amended 2018) | The bureau's user agreement |
| Blocks new-account fraud | Yes | Yes |
| Affects your credit score | No | No |
| Speed to lift | Within 1 hour by law (online/phone requests) | Near-instant app toggle |
| Stays in place | Until you remove it, regardless of any subscription | Can end if a paid subscription lapses |
| If something goes wrong | Statutory rights and remedies | Whatever the terms of service say (often arbitration) |
| Setup | Once per bureau, with a PIN or account | Once per bureau, via the bureau's app |
Which should you choose?
Choose the freeze if you want the strongest default protection at zero cost — which is most people, most of the time. It is the only option where your protection is a legal right rather than a product feature, and where the one-hour lift requirement is written into law rather than promised by an app.
The lock earns its place in one scenario: you're already paying for a bureau's monitoring service for other reasons, or you open new credit often enough that the app toggle genuinely matters — serial balance-transfer users, frequent car-loan shoppers, landlords running their own applications. Even then, a free lock (where offered) is fine; paying a monthly fee solely to lock your report is paying for something the law gives you free.
And they're not mutually exclusive with the third tool in this family: a fraud alert. It's free, requires lenders to verify your identity before opening accounts (rather than blocking the pull entirely), lasts one year (seven for documented identity-theft victims), and placing it at one bureau covers all three. It's the lighter-touch option for someone who wants friction, not a wall.
How to freeze your credit in about 15 minutes
- Freeze at Equifax. Create an account (or use the PIN process) on Equifax's security freeze page and place the freeze. Save the confirmation.
- Freeze at Experian. Same process on Experian's freeze center — and note that Experian is where you're most likely to be steered toward a paid lock instead. The free freeze is on its own page.
- Freeze at TransUnion. Third verse, same as the first. Store all three logins or PINs somewhere you won't lose them — a password manager beats a sticky note.
- Check your reports first or after. You're entitled to free credit reports at AnnualCreditReport.com — worth pulling to confirm nothing fraudulent already exists. If you spot an account you don't recognize, our guide to disputing credit report errors walks through the fix.
- Lift it only when you need to. Applying for a card, loan, or apartment? Ask which bureau the lender pulls from, lift that one for a few days, and let it refreeze automatically.
Common mistakes with freezes and locks
- Freezing one bureau and stopping. New-account fraud only needs one open door. All three, always.
- Paying for protection the law gives you free. A monthly subscription whose main feature is "lock your report" duplicates a free federal right. Pay for monitoring only if you value the other features.
- Assuming a freeze protects existing accounts. It doesn't. A thief with your stolen card number can still charge it — that's what statement review and bank alerts are for, and it's the same reason a freeze can't replace basic account hygiene. Freezes stop new accounts; they don't babysit old ones.
- Losing the PINs or logins. The main historical pain of freezes was people locking themselves out. A password manager makes this a non-issue.
- Forgetting the freeze exists. Years later, a surprise denial on an apartment application is usually just your own freeze doing its job. Lift, apply, refreeze.
- Thinking either tool boosts your score. Neither a freeze nor a lock touches your score, positively or negatively. Score improvement is a different project — see our credit score myths guide for what actually moves it.
Edge cases worth knowing
Building credit right now? A freeze doesn't conflict with credit-building — your existing secured card or starter accounts keep reporting normally. You only lift the freeze when applying for something new.
Just had your data breached? Freeze first, ask questions later. Breach-settlement offers of "free credit monitoring" are fine to accept, but monitoring tells you about fraud after it happens; a freeze prevents the most damaging kind up front.
Have kids? All three bureaus let parents place a free freeze on a minor's file — child identity theft often runs undetected for years precisely because nobody checks a 9-year-old's credit.
Who should skip this? Almost nobody skips protection entirely, but if you're mid-mortgage-application or opening several accounts this month, wait and freeze when the flurry ends — or use a fraud alert as the interim layer. The freeze works best as a set-and-forget default, not something you toggle weekly.
Quick answers
Is a credit freeze really free? Yes — placing, temporarily lifting, and removing a security freeze is free at Equifax, Experian, and TransUnion under federal law, and has been since 2018. Anyone charging you to freeze your report is selling you a lock product or a subscription, not the freeze itself.
Does a credit freeze or lock hurt your credit score? No. Neither has any effect on your score, and both leave your existing accounts working and reporting normally. Lenders you already have a relationship with can still see your file; only new-creditor access is blocked.
How fast can I unfreeze my credit? By law, a bureau must lift a freeze within one hour of an online or phone request (mail takes up to three business days). You can also schedule a temporary lift for a set window and it refreezes automatically when the window closes.
Is a credit lock as safe as a freeze? Against fraudsters, yes — a locked report blocks a new-creditor pull just like a frozen one. The gap is legal, not technical: a freeze's protections and remedies are written into federal law, while a lock's depend on the bureau's terms of service, which can change and may require arbitration.
Do I need a freeze at all three bureaus? Yes. Lenders can pull from any of the three, so a freeze at only one or two leaves a working path for fraud. A fraud alert is the exception — placed at one bureau, it's forwarded to the other two.