Credit Freeze vs. Credit Lock in 2026: Which Actually Protects Your Score

Credit Freeze: The Federal Standard

A credit freeze (also called a security freeze) is a free, federally mandated protection. When active, it prevents anyone — including you — from opening new credit accounts in your name. Existing creditors can still access your file, and you can still use existing credit cards, but no new applications can be approved.

Key facts:

• Free under federal law. The Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018 made freezes free at all three bureaus, plus free to lift.
• Backed by federal law. If a bureau or creditor violates the freeze, you have grounds for legal action.
• Tri-bureau setup required. You must place the freeze separately at Equifax, Experian, and TransUnion. A freeze at only one bureau is incomplete protection.
• Lifts in minutes. Each bureau provides a PIN for managing your freeze. You can lift it temporarily (for a specific application) or permanently online.
• Doesn't affect your score. Freezes are not visible to lenders looking at your file and have no impact on FICO or VantageScore.

Credit Lock: The Bureau's Product

Credit locks are proprietary products offered by each bureau. They function similarly to freezes — blocking new credit applications — but operate under contract law (the bureau's terms of service) rather than federal statute.

Key differences from a freeze:

• Sometimes free, sometimes paid. Equifax offers a free lock through its Equifax Core Credit product. Experian's lock is bundled with paid CreditWorks Premium. TransUnion offers a free lock with limited features and a paid version with extras.
• Faster to engage and disengage. Locks are managed through the bureau's app, often with a single tap.
• Contract-based, not statutory. If the bureau fails to honor a lock, your remedies are governed by their terms of service, not federal law.
• Each bureau independently. Like freezes, you need to lock at all three.

Which One Should You Use?

For most consumers in 2026: use credit freezes. They're free, federally backed, and equally protective. The convenience advantages of locks are marginal in practice — modern freeze portals also lift in minutes — and the legal protections behind freezes are stronger.

The exception: if you regularly apply for new credit (frequent travel hacker, business owner opening new lines monthly), the slightly faster lift on locks may be worth the modest paid product cost. Otherwise, a freeze is the cleaner choice.

How to Place a Freeze at All Three Bureaus

Equifax

Visit equifax.com/personal/credit-report-services or call 1-800-685-1111. Online setup takes about 10 minutes. You'll create an account and receive a PIN to manage future lifts.

Experian

Visit experian.com/freeze or call 1-888-397-3742. The freeze is immediately effective online; you'll be assigned a PIN.

TransUnion

Visit transunion.com/credit-freeze or call 1-888-909-8872. Online setup is quickest. PIN is provided at setup.

Save all three PINs in a password manager. You'll need them every time you lift the freeze for a credit application.

Specialty Bureaus to Consider Freezing

The big three aren't the only credit data sources. Sophisticated identity thieves know to bypass them by applying for non-traditional accounts. Consider freezing:

• ChexSystems — used by banks for new checking account applications
• NCTUE (National Consumer Telecom & Utilities Exchange) — used by phone, internet, and utility providers
• Innovis — a fourth credit bureau used by some lenders
• SageStream / LexisNexis Risk Solutions — alternative consumer reporting

All offer free freezes and take 10-15 minutes each to set up. Freezing the big three plus these specialty bureaus is the gold standard for identity theft prevention.

If Identity Theft Has Already Happened

The fast-response playbook:

1. Place freezes at all three bureaus immediately (within hours, not days).
2. File an FTC identity theft report at IdentityTheft.gov. This generates an Identity Theft Report — a document that gives you stronger legal rights for disputing fraudulent accounts.
3. Place a fraud alert. Different from a freeze, a fraud alert tells lenders to take extra steps to verify identity. Initial alerts last 1 year; with an Identity Theft Report you can extend to 7 years.
4. File a police report. Some creditors and law enforcement actions require this.
5. Notify each affected creditor in writing. Use the FTC Identity Theft Report as your primary documentation.
6. Dispute fraudulent items with the bureaus. Under FCRA, accounts opened through identity theft must be removed once you provide the FTC report.
7. Monitor for 12-24 months. Identity theft often produces secondary fraud months after the initial breach.

What Doesn't Replace a Freeze

Several products marketed as identity theft protection don't actually prevent new account fraud:

• Credit monitoring tells you about fraud after it happens — not before.
• Identity theft insurance reimburses some recovery costs but doesn't prevent the theft.
• Dark web monitoring alerts you when your data appears in breaches but doesn't stop new credit applications.

These can be useful complements to a freeze — especially monitoring — but none replaces the actual blocking function of a freeze.

The Bottom Line

Credit freezes are free, federally backed, and the strongest single tool for preventing new account identity fraud. Place them at all three bureaus today and at the major specialty bureaus when you have time. Skip the paid "credit lock" products unless you have a specific need for the slightly faster mobile-app convenience.

If identity theft has already affected your reports and you need help untangling the damage, Clear Path's AI Advisor can walk you through the prioritized recovery steps for your specific situation — for free.