Credit Lock vs. Credit Freeze: The Critical Difference Most Identity Theft Victims Learn Too Late

A credit freeze and a credit lock both block new accounts from being opened in your name, but they are not the same thing — and the difference matters most at the moment identity theft actually happens. A freeze is a federal legal right enforced under the Fair Credit Reporting Act. A lock is a proprietary product offered by each bureau. Knowing which one protects you, how to activate both, and when to lift them is the practical gap most identity theft victims discover after the damage is done.

What is a credit freeze and how does it work?

A security freeze (also called a credit freeze) is a legal mechanism under the Fair Credit Reporting Act that prevents a credit bureau from releasing your credit file to new lenders without your explicit authorization. When your credit is frozen, a lender requesting your file for a new credit application receives a refusal — the application cannot proceed.

Since 2018, credit freezes have been free at all three major bureaus — Equifax, Experian, and TransUnion — following the Economic Growth, Regulatory Relief, and Consumer Protection Act, which amended the FCRA. You can also freeze your credit at two secondary reporting agencies: ChexSystems (for bank accounts) and Innovis.

Lifting a freeze requires an explicit unfreeze request with a PIN or account confirmation. The bureau has one business day to lift a freeze requested online or by phone, and three business days if done by mail. This friction is intentional.

What is a credit lock and how is it different?

A credit lock is a proprietary service offered by each bureau. Equifax (Lock & Alert), Experian (CreditLock), and TransUnion (myTransUnion) all offer app-based locking features that toggle access to your credit file instantly. The mechanics are similar to a freeze — new hard inquiries are blocked — but the legal foundation is entirely different.

The core distinction: if a lender pulls your credit despite an active freeze, the bureau is legally liable under the FCRA. If a lender pulls your credit despite an active lock, your remedy is the bureau’s dispute process and their terms of service — not a federal statute.

How do you freeze your credit report at all three bureaus?

Each bureau requires a separate freeze request. There is no single portal that covers all three.

All three major bureaus allow online, phone, and mail requests. Online freezes and unfreezes are the fastest — confirmed immediately. Mail requests require a written request with a copy of a government ID and proof of address, and can take up to three business days.

How do you know if your credit is frozen?

There is no centralized system to check all three bureaus at once. The only way to confirm a freeze is active is to log in at each bureau individually:

• Equifax: log in to freeze.equifax.com — freeze status appears under “Manage Security Freeze”
• Experian: log in at experian.com/freeze/center — active freeze shows as “Frozen”
• TransUnion: log in to your TransUnion account — freeze status is displayed on the main dashboard

If you placed the freeze without creating an online account, you may need to re-verify your identity. Keep your PIN from the original freeze request — losing it does not prevent you from unfreezing, but the recovery process (mail-based) adds several days.

When should you use a freeze versus a lock?

The choice depends on how frequently you expect to apply for credit:

• Use a freeze if you are not actively applying for credit and want the strongest legal protection at zero cost. The friction of unfreezing is a feature — it makes unauthorized access harder even if someone obtains your login credentials.
• Use a lock if you want to toggle access quickly and frequently — for example, if you are rate shopping across multiple lenders and need to enable and disable access several times in a week.
• Use both during an active identity theft incident — activate the freeze first for legal protection, then use the lock app for convenience while managing the situation. They do not conflict with each other.

Does a credit freeze affect your existing accounts?

No. A credit freeze prevents new credit accounts from being opened, but it has no effect on:

• Your existing credit card accounts or loan balances
• Your credit score — freezing does not change your score in any direction
• Soft inquiries — employers, insurance companies, and your own credit checks are still permitted
• Payment reporting — creditors continue to report payment activity on existing accounts normally
• Pre-screened offer generation, unless you also opt out via OptOutPrescreen.com

What does a credit freeze not protect against?

A credit freeze is narrowly targeted at preventing new credit from being opened. It does not prevent:

For a complete protection posture, a freeze at all three bureaus is one layer. Regular monitoring of your credit reports at AnnualCreditReport.com and bank account alerts complete the picture. For a detailed guide on what a credit report actually contains — including how negative items are listed, their timelines, and what an underwriter reads between the lines — reading a credit report the way lenders do covers every section with concrete timelines.

How does unfreezing work when you need to apply for a loan?

When you are ready to apply for credit — a personal loan, a credit card, or a mortgage — you need to temporarily lift the freeze at the bureau the specific lender uses. Most lenders do not publicly disclose which bureau they pull from.

The practical approach for personal loan applications is to lift all three freezes temporarily for the duration of your rate-shopping window. Under FICO 8, FICO 9, and FICO 10T rules, multiple personal loan inquiries within a 45-day window count as a single inquiry in the scoring calculation — so shopping multiple lenders during a temporary unfreeze does not compound the score impact. After the window closes, reapply the freezes.

Some lenders — including most online marketplace lenders who match borrowers to offers — perform only a soft pull for initial matching, which a credit freeze never blocks. A freeze only blocks the hard pull required to finalize a credit decision. If you are using a matching service for personal loan comparison that uses soft-pull pre-qualification, you do not need to lift your freeze to see initial rate offers.

What about freezing a child’s credit report?

Under the FCRA, parents and legal guardians can place a security freeze on behalf of a minor under 16. Bureaus are required to create a credit file for the child if one does not exist and immediately freeze it upon request. This is called a protected consumer freeze. Documentation requirements include proof of guardianship and the child’s Social Security number.

Child identity theft often goes undetected for years — until the child applies for their first loan or apartment at 18 and discovers fraudulent accounts. A proactive freeze eliminates that risk category entirely at no cost.

Frequently Asked Questions

Does freezing your credit hurt your credit score?

No. Placing, lifting, or maintaining a credit freeze has no effect on your credit score whatsoever. It is not a credit event and does not appear as any type of inquiry.

How long does a credit freeze last?

Indefinitely in all U.S. states. A freeze remains active until you explicitly request it be lifted. There is no automatic expiration date.

Can someone open a credit account if my credit is frozen?

Most lenders require a hard inquiry — which a freeze blocks — before opening a new account. A freeze is effective against the vast majority of new-account fraud scenarios. Some pre-approved card offers processed through permissioned channels may work differently, but fraudulent new-account openings are overwhelmingly stopped by a freeze.

Is a credit lock worth it if I already have a freeze?

If you have an active freeze and are not actively applying for credit, a lock adds minimal incremental protection — and its terms-of-service legal foundation is weaker than the FCRA-backed freeze. The main use case for a lock is the instant toggle speed when borrowers need frequent access.

What happens to my credit score if I am a victim of identity theft?

Fraudulent accounts opened in your name can severely damage your score if they go delinquent. The dispute process under the FCRA allows removal of fraudulent accounts. For a complete walkthrough of how credit bureau disputes actually work — and why generic AI-generated letters are flagged as frivolous before a human reads them — the mechanics of FCRA credit disputes covers the process and the arguments that actually result in removal.

The takeaway

A credit freeze is the stronger protection: free, federally mandated, legally enforceable, and permanent until you choose to lift it. A credit lock is a convenience tool for frequent toggles. Neither replaces the other, and neither stops fraud on accounts you already have open. For most people not actively applying for credit, a freeze at all three bureaus costs nothing and eliminates the most common avenue for new-account identity fraud. If you are in the process of applying for a small personal loan and want to see offers without triggering a hard inquiry, Credditt’s matching process uses a soft pull for initial offers — your freeze does not need to be lifted to check available rates.