Data breaches have made one thing clear: your Social Security number is probably already out there. A credit freeze is the single most effective — and completely free — step you can take in response. It locks your credit files so that lenders cannot pull them, which stops identity thieves from opening new accounts in your name cold. Yet millions of Americans still have not frozen their credit. Here is what a credit freeze does, how to set one up, and whether you should get one.
Table of Contents
- What a Credit Freeze Is
- Freeze vs. Fraud Alert vs. Credit Lock
- How to Freeze Your Credit in 20 Minutes
- Thawing and Managing Your Freeze
- Who Should Get One — and Who Might Wait
- What a Freeze Does Not Protect Against
- Key Takeaways
What a Credit Freeze Is
A credit freeze (also called a security freeze) restricts access to your credit reports at the three major bureaus — Equifax, Experian, and TransUnion. When your file is frozen, most lenders cannot view your credit report at all. Since nearly every application for a credit card, auto loan, mortgage, or apartment lease requires a credit check, a freeze effectively blocks new-account fraud: the thief may have your personal details, but without an accessible credit file, the application dies on arrival.
Federal law makes freezes free for everyone — to place, to lift temporarily, and to remove permanently. This has been the rule nationwide since 2018, when Congress eliminated the fees some states had allowed bureaus to charge. Any site or service trying to charge you for a basic freeze is selling you something else.
A freeze does not affect your credit score. It does not close existing accounts, change your payment history, or prevent you from using the credit you already have. Your current lenders can generally still access your file for account reviews, and you can still pull your own reports. Think of it as a deadbolt on the front door: everything inside keeps working normally; strangers just cannot walk in.
Freeze vs. Fraud Alert vs. Credit Lock
These three tools sound similar but differ in strength and convenience. A fraud alert is a notice attached to your file telling lenders to take extra steps to verify your identity before extending credit. It lasts one year (or seven with an identity-theft report) and you only need to contact one bureau, which notifies the others. It is weaker than a freeze — a rushed or careless lender can still approve the application — but it is useful as a complement.
A credit lock is the bureaus’ commercial product: functionally similar to a freeze (it blocks access to your file) but offered through their apps and websites, often bundled with paid monitoring subscriptions. Locks can be toggled instantly in an app, which is convenient — but they are governed by the company’s terms of service rather than by federal law, and the free tier may come with marketing strings attached.
| Feature | Credit freeze | Fraud alert | Credit lock |
|---|---|---|---|
| Blocks new-account fraud | Yes — strongest | Partially | Yes |
| Cost | Free by federal law | Free | Often tied to paid plans |
| Legal protection | Federal statute | Federal statute | Company terms |
| Setup effort | Contact all 3 bureaus | Contact 1 bureau | Per-bureau app signup |
| Temporary lift speed | Within 1 hour online | N/A | Instant in app |
For most people, the right combination is a freeze at all three bureaus plus a fraud alert as a secondary tripwire. The freeze does the heavy lifting; the alert adds a verification step for the rare lender that can access a frozen file. Consumer protection resources at usa.gov describe both tools in detail.
How to Freeze Your Credit in 20 Minutes
You must freeze your file separately with each bureau — one freeze does not propagate. Each bureau offers online, phone, and mail options; online is fastest, with the freeze typically effective within one business day (often much sooner). You will need to verify your identity with your Social Security number, date of birth, address, and answers to authentication questions drawn from your credit history.
- Equifax: use its online security-freeze portal or automated phone line; you will create an account and receive a PIN for managing the freeze.
- Experian: use its online freeze center or phone system; it likewise issues a PIN — store it somewhere safe, like a password manager.
- TransUnion: use its online freeze page or phone line; note that TransUnion also markets its paid “lock” product — make sure you select the free security freeze.
Parents should also consider freezes for minor children. Kids are prime targets for identity theft precisely because the fraud can go undetected for years — nobody checks a ten-year-old’s credit. All three bureaus allow parents or guardians to freeze a child’s file, usually by mail with proof of guardianship. The paperwork is mildly annoying; the protection is worth it.
While you are at it, pull your free credit reports to check for unfamiliar accounts. You are entitled to free reports from each bureau, and reviewing them annually is the companion habit that makes a freeze part of a complete identity-protection routine.
Thawing and Managing Your Freeze
A freeze is not permanent exile from credit — you will thaw it whenever you legitimately apply for something. Each bureau lets you lift the freeze temporarily for a specific time window (say, 48 hours while a mortgage lender pulls your file) or for a specific creditor. Online and phone requests must be honored within one hour; mail requests take up to three business days, so plan ahead for mailed applications.
The practical workflow: when a lender, landlord, insurer, or employer says they need to check your credit, ask which bureau they use, then lift the freeze at that bureau only, for the narrowest window that works. This keeps the other two files sealed and minimizes exposure. After the pull, the freeze automatically reinstates at the end of your chosen window.
Store your PINs securely. Without them, lifting a freeze requires slower identity-verification steps. A password manager entry labeled for each bureau is the simplest solution. And if you ever decide freezes are more hassle than help, removing one entirely is free and takes effect within an hour online — though few people who understand the protection choose to do so.
Who Should Get One — and Who Might Wait
The short answer: nearly everyone should freeze their credit. The protection is free, the inconvenience is minor and occasional, and the downside of new-account identity theft — months of disputes, police reports, and frozen legitimate applications while you clean up — is severe. Retirees, who may not apply for credit often but are frequent scam targets, benefit enormously. So do young adults establishing their first files and new arrivals building U.S. credit histories, whose thin files are easy for thieves to exploit.
The main group that might pause: people in the middle of rapid-fire credit applications — say, mortgage shopping across several lenders in a single week, when repeated thawing gets tedious. Even then, the smarter move is usually to freeze and use targeted temporary lifts per lender rather than leaving all three files open. Convenience for a week is a poor trade for exposure that lasts indefinitely.
Business owners should think one step further: business credit files and EIN-based accounts can also be targeted, and separating personal and business finances limits blast radius. Good business banking hygiene pairs naturally with frozen personal credit.
What a Freeze Does Not Protect Against
A freeze is powerful but narrow: it stops new accounts, not all fraud. It does nothing against theft of your existing accounts — a criminal with your credit card number can still make charges, which is why monitoring statements and using card alerts remains essential. It does not stop tax-refund fraud, medical identity theft, or government-benefits fraud, which run on your Social Security number rather than your credit file.
It also does not stop account-takeover attacks on your bank logins, SIM-swapping, or phishing — the broader fraud economy has many doors, and the freeze deadbolts only one of them. Treat it as the foundation of your defenses, not the whole house: unique passwords, two-factor authentication, and skepticism toward unsolicited messages complete the picture.
Finally, remember that a freeze does not improve a bad credit score or erase legitimate negative history. If your goal is rebuilding credit rather than protecting it, the work is payment history and utilization — the freeze simply guards the file while you do that work.
