A credit freeze is free, takes minutes to set up, and is the single most effective tool available for preventing new account fraud. Most people have never used one. Here's exactly how it works and when you need it.
A credit freeze — also called a security freeze — instructs the three major credit bureaus (Equifax, Experian, and TransUnion) to block access to your credit report for the purpose of opening new credit accounts. When a lender attempts to pull your credit report to evaluate a credit application, the bureau returns a message indicating the file is frozen and the application cannot be processed.
The result: anyone who tries to open a new credit card, personal loan, auto loan, or other credit account in your name is blocked — because lenders cannot access the credit report needed to approve the application. Even if a fraudster has your Social Security number, name, address, and date of birth, they cannot successfully open new accounts while a freeze is in place at all three bureaus.
A restriction placed on your credit file at a credit bureau that prevents new creditors from accessing your credit report. New credit applications require a credit report pull — a freeze blocks that pull, effectively blocking new account approvals. The freeze does not affect existing accounts, does not impact your credit score, and has no effect on your ability to use existing credit cards or loans. Source: Federal Trade Commission.
Three different tools are commonly discussed in the same context. They are not the same thing:
A credit lock is a product sold by the bureaus — not a federally mandated right. It works similarly to a freeze but is governed by the bureau's terms of service rather than federal law, and some versions carry monthly fees. A credit lock offers no meaningful advantage over a free freeze and is generally not worth paying for.
A fraud alert is a less restrictive tool — it flags your file and asks lenders to take extra verification steps before approving credit. It doesn't block access to your report and is appropriate for moderate-risk situations. A security freeze is appropriate when you want actual blocking power.
Since September 2018, federal law — specifically an amendment to the Fair Credit Reporting Act — has required all three major credit bureaus to provide security freezes free of charge to all consumers. Before that, the bureaus charged fees of $5–$15 per bureau in most states. The free requirement was passed after the 2017 Equifax data breach exposed the personal information of approximately 147 million Americans.
Lifting a freeze — temporarily or permanently — is also free under the same law. There is no charge at any step of the process at Equifax, Experian, or TransUnion. Source: Federal Trade Commission.
You must freeze your credit separately at each bureau. Freezing at one does not automatically freeze the others. Each bureau has an online process, a phone option, and a mail option — online is fastest.
Each bureau may issue a PIN when you set up a freeze. You'll need this PIN to lift the freeze temporarily. Store PINs in a password manager or a secure physical location — losing them doesn't permanently block you from lifting the freeze, but recovering access without a PIN takes longer and requires identity verification with the bureau.
When you want to apply for credit — a car loan, a credit card, a mortgage — you need to temporarily lift the freeze at the bureau(s) the lender will pull. You can lift it for a specific time window (e.g., 7 days) or for a specific creditor in some cases.
Ask the lender or creditor which bureau(s) they pull before you apply. Lift the freeze only at the relevant bureau(s) for the minimum time window needed. Relift the freeze immediately after applying — most online processes allow you to do this in minutes from the same account or with your PIN.
Online lifts at Equifax and Experian are typically effective within an hour. TransUnion lifts may take up to 3 business days if done by mail. If you're applying for a mortgage with a scheduled closing date, lift your freeze at all three bureaus several days in advance to avoid any timing issues.
A freeze is appropriate in any situation where you're concerned about unauthorized new account fraud — and is worth maintaining as a baseline even when no specific threat exists:
A credit freeze is powerful but not comprehensive. It does not protect against:
A credit freeze prevents new account fraud but doesn't alert you to activity on existing accounts. Pairing a freeze with free credit monitoring — available through most banking apps, Credit Karma, or AnnualCreditReport.com — gives you coverage for both vectors: the freeze blocks new fraud, monitoring alerts you to changes on existing accounts. Source: FTC Consumer Information.
Children are prime targets for identity theft precisely because the fraud may go undetected for years — until the child applies for student loans or their first credit card and discovers someone has been using their SSN since they were young. Federal law allows parents and guardians to freeze the credit of children under 16.
The process requires submitting documentation by mail to each bureau — proof of the child's identity (birth certificate or SSN card) and your identity as the parent or guardian. It's more involved than an adult freeze, but for children with no existing credit accounts, it's the cleanest protection available.
A credit freeze is free, effective, reversible, and has no downside for anyone who isn't actively applying for new credit. It's the strongest available protection against new account fraud — stronger than fraud alerts, credit locks, or any paid identity protection service's monitoring component. Setting up a freeze at all three bureaus takes about 15 minutes online. Maintaining it costs nothing and requires no ongoing action. For most people, it should be the default state of their credit files. Source: Federal Trade Commission.