Jonathan Machado
Credit freezes and credit locks both block new accounts from being opened in your name, but they work differently under the hood and the right choice depends on how often you apply for credit and how much you trust a bureau's app. The freeze is a federal-law right, free, and a little clunky. The lock is a product, usually app-based, instant, and often bundled with a subscription. Both can keep an identity thief from opening a card in your name. Here is how to pick.
How a Credit Freeze Works
A credit freeze (sometimes called a security freeze) is governed by the Fair Credit Reporting Act and amendments from 2018. When you place a freeze with Equifax, Experian, or TransUnion, that bureau will not release your credit file to most new creditors. Without a credit file, a lender cannot approve a new credit card, auto loan, mortgage, or most other accounts. You need to place the freeze at each of the three bureaus separately - one freeze does not propagate.
Freezes are free to place, free to lift, and free to remove. The bureau must place an online or phone-requested freeze within one business day and lift it within one hour during normal business hours. You will receive a PIN or set up online credentials at each bureau, and you use those to lift the freeze when you actually want to apply for new credit. A freeze does not affect your existing accounts, your credit score, your ability to be pre-approved by your current card issuer, or rate shopping with lenders you already have a relationship with.
How a Credit Lock Works
A credit lock is a service offered by each bureau (often under brand names like Equifax Lock and Alert, Experian CreditLock, or TransUnion Credit Lock) and by some third-party apps. Functionally, a lock also restricts access to your credit file, but it works through a mobile app or website rather than the federally mandated freeze process. You tap a button and the lock is on; tap again and it is off. The whole flow takes seconds rather than minutes.
The catch is that locks are contractual products, not legal rights. The bureau decides the terms, can change them, and often bundles the lock inside a paid identity monitoring subscription. Equifax offers a free basic lock, but the premium versions and the locks at Experian and TransUnion typically come inside paid plans. Because a lock is a private contract, the legal remedies under the FCRA - guaranteed timing, free service, free lifts - do not apply. If the app glitches and a fraudulent account slips through, your recourse is whatever the terms of service say it is.
Speed, Cost, and Coverage Compared
Speed favors the lock. A freeze can be lifted in an hour online, which is fast enough for almost any planned application, but a lock is essentially instant. If you apply for credit cards opportunistically (a store offers ten percent off if you open a card at checkout), the lock is friendlier. If you plan ahead at all - and most large credit applications like mortgages and auto loans involve some planning - the freeze is fine.
Cost favors the freeze, decisively. Freezes are free by federal mandate. Locks are usually inside subscriptions that run from a few dollars a month to twenty or more per bureau. Over a few years that adds up, and you are paying for convenience rather than security.
Coverage is roughly the same for both, but with one caveat: a freeze is legally binding on the bureau, so it must be applied to every credit inquiry except a short list of exceptions (your existing creditors, certain government uses, some employment checks). A lock is a software state that the bureau implements. In practice both block new credit, but a freeze has the weight of federal law behind it.
Which One to Choose
For most people, the answer is the freeze, at all three bureaus, with the bureau credentials saved in a password manager. It is free, it is permanent until you lift it, and it has the strongest legal backing. The minor inconvenience of waiting up to an hour to lift the freeze before a credit application is trivial compared to the lifetime cost savings versus a paid lock subscription. Over a thirty-year credit life, a twenty-dollar-per-month lock subscription adds up to over seven thousand dollars - a significant figure to spend on convenience that is barely different from the free alternative.
A lock makes sense in two scenarios. First, if you have already paid for an identity monitoring service that includes the lock as a feature - the lock is just there, so use it on top of (not instead of) the freeze. Second, if you genuinely apply for new credit frequently enough that the instant-toggle convenience justifies the cost, which is rare for most consumers. A common mistake is choosing a lock because it is easier and then assuming you are protected at the same level as a freeze. You are protected, but on weaker legal terms.
One more nuance: place a freeze even if you also use a lock. The two are not mutually exclusive. If you lock your file through the bureau's app and also have a federal freeze in place, the freeze wins when the app fails. For high-value targets - anyone who has been through identity theft before, or anyone whose data has appeared in a major breach - belt and suspenders is the right approach. Also remember to freeze with the specialty bureaus where freezes are available: ChexSystems for bank accounts, the National Consumer Telecom and Utilities Exchange for phone and utility accounts, and Innovis (the smaller fourth credit bureau that some lenders pull). These freezes are also free and easy to overlook, but they close common identity theft entry points.
