1Why You'd Want to Do Either of These
Identity theft numbers in this country are genuinely alarming. The FTC gets millions of identity theft reports annually. A data breach exposes your Social Security number, date of birth, and address. Someone files a credit application in your name. A new credit card account opens. A car loan gets taken out. You find out months later when you get a collections call about a debt you never incurred.
Both credit freezes and credit locks are designed to prevent exactly this. The idea is simple: if a lender can't pull your credit report, they can't approve a new account in your name — even if the fraudster has all your personal information. It's a wall between your Social Security number and any new credit.
The practical difference between a freeze and a lock is mostly about speed of removal and legal backing. Freezes are slower to lift but carry the weight of federal law. Locks can be toggled on and off instantly from your phone but operate under terms of service rather than statute.
For most people who want a permanent or semi-permanent block on new credit — people who aren't actively applying for credit and don't want to think about it — the freeze is the right call. For people who need more flexibility to turn it on and off quickly, locks have a role.
But honestly? Both work. The question is which workflow fits your life.
2Credit Freezes: The Federal Law Option
A credit freeze — officially called a 'security freeze' — is a right under federal law, specifically the Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018, which made freezes free at all three major bureaus. Before that law, some states charged fees. Now it's permanently free everywhere.
When a freeze is active, credit bureaus are legally prohibited from releasing your credit report to potential new creditors. Someone applying for credit in your name can't get an approval because the lender can't see your report. Full stop.
The freeze doesn't affect existing accounts. Your current credit cards still work. Your current mortgage payment still reports. You can still check your own credit. Existing creditors can still access your report for account management purposes. It only blocks new credit inquiries from lenders considering new credit applications.
How to place a freeze at each bureau:
Equifax: Online at equifax.com/personal/credit-report-services/credit-freeze, by phone at 1-888-298-0045, or by mail to Equifax Security Freeze, PO Box 105788, Atlanta, GA 30348-5788.
Experian: Online at experian.com/help/credit-freeze, by phone at 1-888-397-3742, or by mail to Experian Security Freeze, PO Box 9554, Allen, TX 75013.
TransUnion: Online at transunion.com/credit-freeze, by phone at 1-888-909-8872, or by mail to TransUnion LLC, PO Box 2000, Chester, PA 19016.
Online is the fastest method. Account creation takes a few minutes, freeze is placed immediately. You'll receive a PIN or account credentials to use when you want to temporarily lift (thaw) the freeze.
You need to freeze all three bureaus separately. Freezing one doesn't freeze the others. Different lenders pull from different bureaus — a mortgage lender might pull all three, a retail credit card might only pull one. Freeze all three.
There's also a fourth bureau worth knowing: Innovis. Less common but some lenders use them. You can freeze at innovis.com/personal/securityFreeze. ChexSystems (for bank accounts) and NCTUE (for telecom/utility accounts) are also worth considering if your identity has been compromised broadly.
Lifting (thawing) a freeze: done through the same portal where you placed it. You can temporarily lift it for a specific lender and timeframe, or lift it entirely. The bureaus are required to process unfreeze requests within one hour of receiving them online or by phone.
3Credit Locks: The App Experience
Credit locks aren't a federal statute protection — they're a product each bureau offers, governed by their own terms of service. The functional result is similar (new creditors can't access your report) but the mechanism and user experience are different.
The key benefit of a lock: speed and convenience. Most bureau lock apps let you toggle your credit on and off in seconds. No PIN lookup, no waiting for processing — instant.
Here's the cost breakdown, which is more complicated than freezes:
Equifax: Lock & Alert is free. You can lock and unlock your Equifax report through their free app.
Experian: CreditLock is bundled with Experian IdentityWorks Premium, which costs $24.99/month. The free tier doesn't include the lock feature.
TransUnion: Credit lock is included in their Credit Monitoring service at $29.95/month.
So: Equifax lock is free. Experian and TransUnion locks require paid subscriptions. This asymmetry is important — locking all three bureaus for free isn't fully possible because two of the three charge for their lock services.
Contrast that with freezes: all three are free by federal law, no subscription required.
For people who want an instant-toggle experience and are okay paying $25-30/month per bureau for it... that's a lifestyle choice. For most people who just want protection and aren't applying for credit constantly, the free freeze achieves the same protection without the subscription fees.
One note: TransUnion's paid service apparently includes both TransUnion and Equifax locking as of their current offering — the bundling changes occasionally. Check their current pricing before subscribing.
This is the part that matters most and gets talked about least.
4The Real Difference: Legal Protection
This is the part that matters most and gets talked about least.
Credit freezes are governed by federal statute. If a bureau violates a freeze — somehow allows a creditor to pull your frozen report — they've broken federal law and you have concrete legal remedies. You can sue under the FCRA. There's a paper trail of when the freeze was placed. It's not ambiguous.
Credit locks are governed by the bureau's terms of service. It's a contract, not a statute. The specific remedies available to you if something goes wrong are whatever the terms of service say, not federal consumer protection law. The bureaus can change their terms of service.
In practice, both freezes and locks effectively prevent report access when active. The real-world failure rate of both products is low. But if something does go wrong, the legal footing of a freeze is significantly stronger.
For someone who's experienced identity theft or has serious reason to believe they're a target — a major data breach, a stalker, a known bad actor — the freeze is the right tool. The legal protection matters in those scenarios.
For someone who just wants a general deterrent against casual fraud and wants an easy-to-toggle solution for frequent credit applications: locks are convenient. Just understand the trade-off.
5When to Use Each: Decision Framework
Use a freeze when: — You're not planning to apply for any new credit in the near future (months or years) — You want set-it-and-forget-it protection without any subscriptions — You've been a victim of identity theft or a major data breach exposed your SSN — You're placing protection for a minor child (child identity theft is common — you can freeze a minor's credit file) — You want the strongest possible legal protection
Use a lock when: — You apply for credit somewhat frequently and hate the friction of thawing/refreezing — You're already paying for the bureau's monitoring service for other reasons — You want to toggle protection from your phone in seconds — You need to unblock credit urgently (like buying a car same-day)
For most people reading this: use the freeze. Here's why — it's free everywhere, the legal protection is stronger, and if you're going to apply for credit you can unfreeze online and have it processed in under an hour. The 'but freezes are inconvenient to lift' argument is overstated. Lifting an Experian freeze takes about 3 minutes online.
If you genuinely do need rapid toggling — you're in the middle of shopping for a mortgage and comparing quotes from multiple lenders, for instance — you could temporarily thaw and re-freeze between applications. Cumbersome but free. Or use a lock for that active period and switch back to a freeze when you've settled.
For children: definitely use freezes. Child identity theft is a documented problem — kids get their SSNs stolen and it goes undetected for years because nobody's checking a 7-year-old's credit. Freezing a minor's credit file is free and the bureaus have specific procedures for it.
6Identity Theft Response: What to Do Right Now
If you think your identity has been compromised — a breach notification, a credit inquiry you didn't initiate, an account you don't recognize — the playbook is:
Step 1: Freeze all three bureaus immediately. Online takes about 5 minutes per bureau. Do all three today.
Step 2: Pull all three credit reports at AnnualCreditReport.com. Look for accounts, inquiries, or addresses you don't recognize.
Step 3: File an identity theft report at IdentityTheft.gov (this is the FTC's official identity theft resource). You get an official ID theft report, which is a legal document you can use with creditors and bureaus to dispute fraudulent accounts. The report also generates a personalized recovery plan.
Step 4: For any fraudulent accounts you find, dispute them with the bureaus as 'not mine' and include your FTC identity theft report as supporting documentation. Fraudulent accounts disputed with an ID theft report are treated differently and more seriously than standard disputes.
Step 5: Consider a fraud alert. A fraud alert is different from a freeze — it's a notice to lenders that you may be a fraud victim, requiring them to take extra steps to verify your identity before approving new credit. Initial fraud alerts last one year. Extended fraud alerts (for confirmed victims) last 7 years. Placing a fraud alert at one bureau automatically notifies the others.
Step 6: If fraudulent accounts were opened: contact each creditor directly to dispute and close the accounts. Get everything in writing. Keep a log of every call with date, time, and representative name.
Freezes and fraud alerts can coexist. The freeze prevents new access. The fraud alert warns lenders who do pull your report (which can happen in limited circumstances even with a freeze, like existing creditors).
7Common Questions and Misconceptions
Does a credit freeze hurt my credit score? No. Placing, maintaining, or lifting a credit freeze has absolutely no effect on your credit score whatsoever. Your existing accounts still report normally. The freeze just prevents new credit pulls from new creditors.
Does a credit freeze prevent all access to my report? No — it prevents access by new creditors considering a new account. Your existing creditors can still access your report. Employers you authorize can still pull it. Background check companies for housing can still pull it (freezes don't block employment or tenant screening pulls). Government agencies can pull it.
Can I apply for credit while frozen? No — or rather, the application will be denied because the lender can't pull your report. You need to temporarily lift the freeze, apply, and then refreeze. Do this bureau by bureau: if you know the lender only uses Equifax, you only need to temporarily thaw Equifax.
Does a freeze affect my ability to open a bank account? Banks use different systems for checking account applications — ChexSystems primarily, not the three major credit bureaus — so usually no. But some banks do pull a credit report for checking accounts, especially premium accounts. If that's a concern, ask the bank which bureau they use.
Can I freeze my credit if I have no credit history? Yes. Absolutely. If you have an active credit file (even a thin one), you can freeze it. This is a proactive measure that makes sense regardless of your credit situation.



