A credit freeze and a credit lock sound like the same thing, but they come from different laws, different companies, and offer different levels of protection when your identity is on the line.
You get an email at 2 a.m.: a new credit card application was just submitted in your name, in a state you've never lived in. Your heart rate spikes, and you start searching "how do I stop this," which is when you run straight into two confusingly similar terms: credit freeze and credit lock. They sound interchangeable. They are not, and the difference matters more than most people realize.
Both tools stop new lenders from seeing your credit report, which stops most fraudulent applications cold. But one is a federally guaranteed legal right, and the other is a private product feature that can be changed or discontinued by the company offering it. Here's what's actually different, and which one deserves priority.
A credit freeze (sometimes called a security freeze) is a right created by federal law and enforced through each of the three major credit bureaus — Equifax, Experian, and TransUnion. When you freeze your credit, lenders can't pull your report to approve a new account, which blocks the vast majority of identity theft attempts that involve opening new credit in your name. It's free to freeze and unfreeze as many times as you want, and by law the bureaus have to lift a freeze within one hour of an online or phone request. You have to freeze at all three bureaus separately, since a lender might check any one of them.
A credit lock does something similar on the surface — it also blocks new lenders from viewing your report — but it's a private product, not a legal right. Locks are usually bundled into a bureau's paid monitoring subscription or a free app, and they can typically be toggled on and off instantly through a mobile app, which is more convenient than the freeze process in some cases. The tradeoff is that the terms are set entirely by the company offering it. A lock can come with fine print about liability protection that's weaker than what a freeze guarantees, and the company can change the terms of the lock service at any time since it isn't backed by the same law.
The practical effect of both tools on a day-to-day basis is nearly identical: a new lender tries to pull your report, gets blocked, and the application typically gets denied or held for manual review. Where they diverge is what happens if something goes wrong — if a freeze fails to block a fraudulent account, you have a clear federal law to point to when disputing the account and dealing with the bureau. If a lock fails, you're relying on the specific terms of a private contract, which can vary by company and may include arbitration clauses or liability limits that a freeze doesn't carry. For that reason, security experts generally recommend freezes as the primary tool and locks as, at best, a convenience layer on top.
It's worth separating out a third, related tool: a fraud alert. A fraud alert doesn't block access to your report at all — it just requires a lender to take extra verification steps before approving new credit, like calling you directly. It's weaker protection than a freeze, but it's useful for situations where you still expect to apply for credit soon (like during a home purchase) and don't want the friction of unfreezing and refreezing. An initial fraud alert lasts one year and is also free to place at any bureau, which then shares it with the other two automatically.
If you're not actively applying for credit — buying a car, financing furniture, opening a new card — there's very little downside to keeping all three bureaus frozen at all times. It costs nothing, takes a few minutes to set up once, and only needs to be temporarily lifted the rare times you actually need a lender to check your file. If you're someone who opens new accounts frequently for rewards or sign-up bonuses, a credit lock's instant on/off convenience through an app can be genuinely useful as a day-to-day layer, but it shouldn't replace having freezes in place as the underlying protection.
After a data breach notification from a retailer she'd shopped at, Renata froze her credit at all three bureaus the same afternoon — it took about 15 minutes total and cost nothing. Three months later she went shopping for a car loan, so she logged into each bureau's site, temporarily lifted the freeze for 48 hours, got approved for a loan with a 6.4% APR, and let the freeze snap back automatically.
Her brother Wale relied only on the credit lock built into a free banking app because it looked easier. Six weeks later, someone opened a fraudulent store card in his name anyway — the lock app had a lapse where the bureau's underlying data feed hadn't synced properly, and because it was a private product rather than a legal freeze, resolving the dispute took him several extra weeks of back-and-forth with the retailer versus the fairly standardized process a freeze dispute would have followed.
A frequent mistake is freezing only one bureau and assuming that's enough — a fraudster or lender can simply pull from a different one. Another is confusing a credit lock app's convenience with the same legal protections a freeze carries, especially if something does go wrong. People also sometimes freeze their credit right before applying for a mortgage or big loan and forget to lift it in time, which can delay the closing. And freezing a minor child's credit (which is possible and often smart, since child identity theft can go undetected for years) is something many parents simply never think to do until there's already a problem.
Start by freezing your credit at all three bureaus directly through Equifax, Experian, and TransUnion's own official sites — this takes about five minutes each. Save the PIN or login credentials somewhere secure, since you'll need them to lift the freeze later. If you also want app-based convenience, add a lock on top as a secondary layer, not a replacement. Check whether your state or the bureau you're using also offers a free lock for minors, and set that up too if you have kids. Finally, mark your calendar to lift the freeze temporarily any time you know you'll be applying for new credit.
A credit lock is a convenience feature; a credit freeze is a legal right. Use the freeze as your real line of defense, and treat a lock as a nice-to-have on top of it, not instead of it.
This article is for general educational purposes and does not constitute financial or legal advice. Credit bureau processes and fraud protection laws can change — confirm current procedures directly with Equifax, Experian, and TransUnion.
Join the newsletter your bank hates and your wallet loves.
No spam. Unsubscribe anytime.