Credit Freeze vs Credit Lock: Which Protects You Better?

Identity theft affects roughly 1 in 15 Americans every year—that's about 21 million people. If someone opens a credit card or takes out a loan in your name, you're stuck dealing with the mess: damaged credit, collection calls, and thousands in fraudulent charges.

Here's what it costs the average victim: 40+ hours of their time cleaning it up, $5,000+ out of pocket to fix, and sometimes years of credit damage. If you already have bad or fair credit, identity theft is even worse because you have less room to recover.

That's why understanding credit freezes and credit locks matters. These are two different tools designed to stop fraudsters from opening accounts in your name. But they work differently, cost different amounts, and offer different levels of protection. This guide breaks down exactly how each one works and which one is actually right for your situation.

The stakes are high, but the choice is straightforward once you know the facts.

A credit freeze is a legal request that prevents credit bureaus from sharing your credit report with anyone without your explicit permission. This stops fraudsters from opening new accounts because lenders can't see your credit history to approve the application.

Here's the technical part made simple: There are three main credit bureaus—Equifax, Experian, and TransUnion. When you apply for a credit card or loan, the lender asks one of these bureaus for your report. A freeze tells the bureau to say no to that request unless you unlock it first.

To freeze your credit, you contact each bureau directly or use their websites. As of 2024, freezes are free under the Fair Credit Reporting Act (FCRA). You don't pay anything upfront or ongoing. The process takes about 15 minutes total.

Once frozen, someone can't open a credit card, auto loan, mortgage, or phone account in your name. This is the biggest advantage: it's a legal requirement, so it's rock-solid protection.

But here's the catch: A freeze doesn't protect your existing accounts. If a fraudster gets your current credit card number, they can still make charges. A freeze only stops new account openings. Also, you have to temporarily unfreeze to apply for credit yourself. If you apply for a job that checks your credit, you need to unfreeze first.

A credit lock is offered directly by the credit bureaus as a service. It's similar to a freeze in that it restricts access to your credit report, but it's not based on law—it's a contractual service you sign up for.

Here's the key difference: A lock is managed through the bureau's app or website. You can typically unlock and relock instantly without calling anyone. This makes it more convenient if you apply for credit frequently.

Credit locks are offered in three flavors: free basic locks, paid locks with extra features (usually $10–30/month), and locks bundled with credit monitoring services (often $15–25/month).

The free version exists, but most people upgrade because the paid versions include credit monitoring, identity theft insurance ($1 million coverage in some cases), and faster fraud resolution support.

Here's what locks don't cover: They're not legally required like freezes are. If a credit bureau decides to remove your lock or ignore it, you don't have legal recourse the same way you do with a freeze. The bureaus created locks as an alternative, not because they were required to.

Also, credit locks only work if all three bureaus honor them. If one bureau doesn't recognize your lock (rare, but possible), you have a gap in protection. Freezes are legally binding across all three, so this isn't an issue.

For people rebuilding credit after bad decisions, locks with monitoring make sense if you want convenience and peace of mind about fraudulent activity on your existing accounts.

Cost

Credit freeze: Free (required by law as of 2018).

Credit lock: Free basic version available, but most people pay $15–30/month for monitoring and insurance. Over a year, that's $180–360.

How Long It Takes to Set Up

Freeze: 15 minutes across all three bureaus. Effect is immediate.

Lock: 5 minutes online. Instant effect.

Speed of Unlocking

Freeze: 1–2 business days if you call. Instant if you use the PIN method and have it stored.

Lock: Seconds. Unlock in the app instantly.

Legal Strength

Freeze: Federal law (FCRA) backs it. If a bureau violates it, you can sue.

Lock: Contract-based only. No legal backing.

Protects Existing Accounts

Both: No. A freeze or lock stops new accounts, not fraud on current cards.

What Happens If You Lose Your PIN or Password

Freeze: You have to call the bureau and verify your identity (adds 1–2 days).

Lock: You can reset it online like any app.

Does It Affect Credit Monitoring Services

Freeze: No. You can use separate monitoring services.

Lock: Some are bundled with monitoring (advantage if you want all-in-one).

Best For Whom

Freeze: People who want maximum legal protection for zero cost and don't apply for credit often.

Lock: People who want convenience, don't mind paying for extras, and apply for credit regularly.

Choose a freeze if:

You're on a strict budget and can't afford monitoring ($15+/month). You want ironclad legal protection and don't plan to apply for credit soon. You've been a victim of identity theft before and want the strongest defense. You're rebuilding credit and only need occasional new accounts (maybe a secured card or one loan). You trust yourself to keep your PIN in a safe place and remember it.

Choose a lock if:

You apply for credit fairly often (new cards, refinancing, job applications requiring credit checks). You want the convenience of instant unlock/relock without calling anyone. You have the budget for monitoring and want to catch fraud on existing accounts quickly. You want identity theft insurance included. You prefer managing everything through an app instead of phone calls.

Here's what most people should actually do:

Start with a free credit freeze on all three bureaus. It costs nothing and provides legal protection immediately. Store your PIN somewhere safe (not a sticky note on your monitor).

If you find you need to unfreeze often because you apply for credit regularly, switch to a lock. The $15–25/month is worth it if you're not constantly calling to manage a freeze.

Also, a freeze and lock aren't your only defense. Use credit monitoring (many cards offer free monitoring, or sign up with free services like Credit Karma). Check your credit reports annually at annualcreditreport.com. Set up fraud alerts with at least one bureau—they last one year and are free.

For people with bad or fair credit, a freeze alone removes a major worry: you're not adding new debt you don't know about. That protects your score and your future.

Mistake #1: Freezing Only One Bureau

If you freeze Equifax but not Experian and TransUnion, a fraudster can still open an account using one of the other bureaus. You must freeze all three. It takes an extra 10 minutes, but it's non-negotiable.

Mistake #2: Getting a Lock and Thinking You're Done

A lock alone doesn't monitor your current accounts. Someone could be running up charges on your existing credit card and you won't know until your bill arrives. Pair a lock with credit monitoring or check your accounts weekly.

Mistake #3: Forgetting to Unfreeze When Needed

You apply for a job that requires a credit check, or you want to refinance a loan. If your credit is frozen, the check fails. Unfreeze first, then freeze again after. Many people forget the second step and stay unfrozen.

Mistake #4: Keeping Your PIN Written Down in Obvious Places

If someone steals your PIN, they can unfreeze your credit without you knowing. Store it in a password manager (like Bitwarden or 1Password), a safe, or memorize it.

Mistake #5: Ignoring Your Credit Report

A freeze doesn't prevent existing fraud—it only stops new accounts. Check your credit report free annually at annualcreditreport.com. Look for accounts you didn't open or inquiries you didn't authorize. If you spot fraud, file a report with the FTC at identitytheft.gov and the relevant credit bureau.

Mistake #6: Assuming a Lock Replaces Monitoring

Even paid locks with "identity theft insurance" don't monitor your existing accounts in real time. Check your credit cards and bank accounts regularly yourself.

Understanding the laws behind these tools matters because they define your rights.

The Fair Credit Reporting Act (FCRA) says credit bureaus must allow you to freeze your credit for free. This is federal law. If a bureau refuses or charges you, you can file a complaint with the Consumer Financial Protection Bureau (CFPB) or sue.

The FCRA also requires that you have access to your credit report once per year for free from each bureau. You can dispute inaccurate information within 30 days of finding it. If a bureau doesn't fix an error, you have legal recourse.

The Gramm-Leach-Bliley Act (GLBA) requires financial institutions to protect your personal information. If a bank's security is breached and your data is stolen, they must notify you within 30 days.

The Fair and Accurate Credit Transactions Act (FACTA) lets you place fraud alerts with bureaus. A fraud alert tells lenders to verify your identity before opening an account. Unlike a freeze, it doesn't block access—it just adds a speed bump. Fraud alerts are free and last one year (seven years if you're an identity theft victim).

Credit locks have no federal law backing them. They're a service the bureaus created. If they violate their service agreement, you can dispute the charge or cancel, but you don't have the same legal protections as with a freeze.

For someone with bad or fair credit rebuilding their financial life, knowing this matters. A freeze is your legal right, not a favor the bureau is doing you. If they refuse or charge you, push back. The law is on your side.

This Week: Freeze Your Credit

1. Go to annualcreditreport.com and get your free credit reports from all three bureaus. Scan for accounts or inquiries you don't recognize. If you see fraudulent activity, skip ahead to step 5.

2. Visit Equifax.com/personal/credit-lock-and-freeze, Experian.com/freeze, and TransUnion.com/credit-freeze. Create an account on each one.

3. Initiate a freeze on each bureau. They'll generate a PIN. Write it down or store it in a password manager. Save the confirmation numbers.

4. If you see fraud on your report, file a report immediately with the FTC at identitytheft.gov. Keep the report number.

In 2–4 Weeks: Set Up Monitoring

5. Choose one of these free options: Credit Karma (offers free weekly monitoring), AnnualCreditReport.com (re-check quarterly), or your bank/credit card's built-in monitoring.

6. Set a quarterly reminder to check your credit reports. Mark it on your calendar.

If You Need to Apply for Credit:

7. 2–3 days before applying, unfreeze your credit. When you have the confirmation that the account is open, refreeze immediately.

If You Decide to Switch to a Lock:

8. Use one of the free lock options first (Equifax, Experian, or TransUnion's free locks). If you find yourself unlocking more than twice a month, consider paying for a lock with monitoring.

If You're a Victim of Identity Theft:

9. Call the FTC hotline: 1-877-438-4338. They'll walk you through a recovery plan. File a police report. Contact your banks and creditors immediately to dispute fraudulent accounts. Send a certified letter to the credit bureaus requesting removal of fraudulent accounts (include a copy of your police report).

This isn't overwhelming if you break it into steps. Most people spend 30 minutes on the freeze and then check their credit quarterly. That's enough to catch 95% of fraud before it spirals.