Credit Freeze vs Fraud Alert vs Credit Lock: What Each Does and How to Set Them Up Free
Two of these are rights under federal law and cost nothing. The third is a product the credit bureaus sell or bundle on their own terms.
⚡ Quick Answer
A credit freeze blocks most access to your credit report so new accounts can't be opened in your name. It's free by federal law and lasts until you lift it. A fraud alert tells lenders to verify your identity before opening credit. It's also free, and you only need to contact one bureau. A credit lock works much like a freeze, but its terms and any fees are set by the bureau, not by federal law.
Affiliate disclosure: some links on this page are affiliate links. If you sign up through them we may earn a commission at no cost to you.
If your data was in a breach, you got a suspicious letter, or you just want to shut the door before something happens, you have three tools. They sound alike but work differently, and only two come with legal guarantees. For most people, a freeze at all three bureaus is the strongest free option, and a fraud alert is the quick first step when you suspect a problem.
Credit freeze: the strongest free option
A security freeze restricts access to your credit report, which stops most new creditors from checking it. Since most lenders won't open an account without a credit check, a freeze stops most new-account fraud.
What federal law (FCRA section 605A, 15 U.S.C. 1681c-1) and the FTC say:
- It's free. The FTC says there's "no cost to place or lift a credit freeze."
- Fast placement. A bureau must place the freeze within 1 business day of an online or phone request, or within 3 business days of a mailed request.
- Fast removal. A bureau must lift it within 1 hour of an online or phone request, or within 3 business days of a mailed request.
- It lasts until you lift it. There's no expiration.
- It doesn't affect your score, according to the FTC.
- You set it at each bureau separately: Equifax, Experian and TransUnion.
What a freeze doesn't do: it doesn't stop someone from using an existing card number, and it doesn't block companies you already do business with from reviewing your account. You can still check your own credit, and checking your own report or score is a soft inquiry that never hurts your score (see hard vs soft inquiries).
Fraud alert: a verification flag
A fraud alert doesn't block access to your report. It adds a note telling businesses to take steps to verify your identity before extending credit. There are three types:
| Type | How long it lasts | Who can get it | How to place it |
|---|---|---|---|
| Initial fraud alert | 1 year, renewable | Anyone who suspects fraud | Contact one bureau; it must notify the other two |
| Extended fraud alert | 7 years | Identity theft victims | Requires an FTC Identity Theft Report or police report |
| Active duty alert | 1 year, renewable for the deployment | Active duty servicemembers | Contact one bureau |
According to the FTC, an extended alert also takes you off certain prescreened marketing lists for five years. The big practical advantage of a fraud alert is convenience: one call or form covers all three bureaus, which makes it a sensible first move the day you notice something wrong.
Credit lock: a bureau product
A credit lock has a similar effect to a freeze: it restricts access to your report. The difference is legal. A lock isn't defined in the federal freeze law. Each bureau offers locks under its own terms of service, sometimes free and sometimes bundled into a paid monitoring subscription. Locks are usually toggled in an app.
The convenience is real, but you give up the statutory guarantees: the fixed lift times, the no-fee requirement and the clear legal definition. Since a freeze is free and can now be lifted within an hour online, most people don't need to pay for a lock.
⚠️ Read before you pay for 'lock and monitor'
Some identity protection bundles charge monthly for things you can do free: a freeze, a fraud alert, and free weekly reports at AnnualCreditReport.com. Compare carefully, and see our guide to credit-related scams.
A note on paid locks and freezes: if you already pay for a bureau's monitoring bundle that includes a lock, there's no harm in using it. Just know that the free statutory freeze is available at every bureau regardless, and canceling a subscription shouldn't leave you unprotected if you've placed a freeze too.
Side-by-side
| Freeze | Fraud alert | Lock | |
|---|---|---|---|
| Cost | Free by law | Free | Set by the bureau |
| Blocks new credit checks? | Yes, most | No, adds a verification step | Yes, per bureau terms |
| How many bureaus to contact | All three, separately | One (it notifies the others) | Each bureau's product separately |
| Legal protections | FCRA 605A timelines | FCRA 605A | Bureau terms of service |
| Affects your score? | No | No | No |
How to freeze your credit in about 20 minutes
- Go to each bureau's freeze page. The FTC points to Equifax (equifax.com/personal/credit-report-services), Experian (experian.com/help) and TransUnion (transunion.com/credit-help).
- Create an account or follow the request steps, and verify your identity.
- Save your login or PIN somewhere safe. You'll need it to lift the freeze later.
- Repeat for all three bureaus. A freeze at one bureau doesn't cover the others.
- Before you apply for credit, ask the lender which bureau it uses and lift the freeze there, either temporarily or for a set date range.
- Refreeze when you're done if you lifted it permanently.
Living with a freeze day to day
Most people worry a freeze will get in the way. In practice, it adds one step before applications:
- Applying for a card or loan: Ask which bureau the lender pulls and lift the freeze there for a few days. If the lender can't tell you, lift all three temporarily.
- Renting an apartment or setting up a phone or utility account: Some of these check credit. Ask, and lift the relevant freeze before you apply.
- Existing accounts: Your current cards and loans keep working normally. A freeze doesn't change your limits, rates or payment due dates.
- Your own credit checks: Pulling your reports at AnnualCreditReport.com or checking a free score still works with a freeze in place.
Two habits make freezes painless: keep each bureau's login or PIN in a password manager, and set a calendar reminder to refreeze if you lifted it permanently instead of for a date range.
If you also want fewer credit offers in the mail
A freeze doesn't stop every mailed offer. The credit bureaus run an official opt-out site for prescreened offers, OptOutPrescreen.com, which lets you opt out for a period or permanently. An extended fraud alert also removes you from certain prescreened lists for five years, according to the FTC. Fewer pre-approved offers in your mailbox means fewer documents for someone to steal.
Which should you use?
- You think you're already a victim: Place a fraud alert today, freeze all three bureaus, file a report at IdentityTheft.gov, then dispute anything that isn't yours using our DIY dispute guide.
- Your data was in a breach but nothing has happened yet: Freeze all three bureaus. It's free and reversible.
- You're applying for credit soon: Freeze anyway. Lifting a freeze online takes about an hour at most.
- You want app convenience and don't mind the bureau's terms: A lock is fine, but don't pay for one when a free freeze does the job.
✓ Keep watching after you freeze
A freeze stops most new accounts but not every type of fraud. Check your reports for free at AnnualCreditReport.com, where the bureaus have made weekly free reports permanent, and use a free monitoring service to get alerted to changes in between.
Get alerts between report checks
Credit Karma is free, requires no credit card, and shows VantageScore 3.0 from TransUnion and Equifax with weekly updates, so you can spot unexpected accounts or inquiries early.
Check Your Free Score on Credit Karma →Affiliate link: we may earn a commission if you sign up, at no cost to you.
Frequently Asked Questions
Is a credit freeze really free?
Yes. Federal law requires the bureaus to place and lift a security freeze free of charge, and the FTC confirms there is no cost to place or lift one.
How fast can I lift a credit freeze?
Under the FCRA, a bureau must lift a freeze within 1 hour of a request made online or by phone, or within 3 business days of a mailed request.
Do I need to contact all three bureaus for a fraud alert?
No. For an initial fraud alert you contact one bureau, and that bureau must notify the other two. A credit freeze is different: you place it at each bureau separately.
Does freezing my credit hurt my score?
No. The FTC says a credit freeze does not affect your credit score, and you can still check your own reports and scores while it is in place.
Is a credit lock the same as a freeze?
Not legally. A freeze is defined by federal law with fixed timelines and no fees. A lock is a product each bureau offers under its own terms, which may include fees or a subscription.
The Bottom Line
For prevention, freeze your credit at all three bureaus. It's free, it doesn't touch your score, and you can lift it within an hour online. If you think fraud is already happening, place a fraud alert first, since one request covers all three bureaus, then freeze. Paid locks are optional convenience, not a requirement.