Credit Freeze vs Lock: My 90-Minute Choice

The notification said my new account was approved and my card was on its way. I had not applied for anything. A store card, a two thousand dollar limit, an address in a state I have never lived in.

For the next ninety minutes, I tried to sort out three products that sound like synonyms but are not: freeze, lock, and alert. Every article I found listed all three and told me to "consider" them, a useless verb when someone is opening accounts in your name and you must choose within the hour. Their legal basis, cost, inconvenience, and weak points differ, and those differences matter most when you have no patience for a long explanation.

This is what I worked out that night, what I actually did, and what each of the three would and would not have stopped. I am not a lawyer and this is my experience rather than legal advice, but the mechanical differences below are checkable and they are what the decision turns on.

The security freeze is the strongest of the three and the one with a statute behind it.

A freeze restricts access to your credit report. When it is on, a lender who tries to pull your file to open a new account generally cannot get it, which means the application cannot be approved in the ordinary way. That is the entire mechanism, and it is blunt in a way that works: an identity thief with your Social Security number and date of birth still cannot open the account, because the lender cannot see the report they need.

A lock is the same idea sold as a convenience, and the difference is what backs it.

A lock is a product a bureau offers, typically through an app, that restricts access to your file in a broadly similar way. The pitch is speed: toggle it off in seconds when you want to apply, toggle it back on afterward, no PINs to lose.

The important difference is legal, not technical: a freeze is a statutory right, while a lock is a contractual service. A freeze carries statutory duties for the bureau. A lock is governed by the agreement you accept when you sign up, whose terms the company sets. Some locks are bundled with paid monitoring subscriptions, and terms can change. If a lock fails to work as advertised, your recourse depends primarily on those terms. The bureau's underlying obligations under the Fair Credit Reporting Act still apply, but the lock itself is a product promise, not a statutory right.

In ordinary use, a lock offers broadly comparable protection and is easier to manage. Reading terms of service at eleven that night, I decided that if I had to rely on one tool against active fraud, I wanted the one backed by law, not a subscription. That is a judgment call. Frequent credit applicants may find a freeze inconvenient enough to leave it off entirely. A protection you keep on is better than a stronger one you disabled in March and forgot.

The fraud alert is the weakest of the three and the easiest to place, and it does something the other two do not.

An initial fraud alert is free, lasts one year, and, in the part that makes it efficient, you place it with one bureau and that bureau must notify the other two. One phone call or one web form covers all three, which is not true of a freeze.

A fraud alert works differently from a freeze. It does not block access to your report. It adds a notice to your file instructing creditors to take reasonable steps to verify your identity before extending credit. The application still proceeds normally, but the lender must verify more carefully. How carefully varies, and that is its main weakness.

One point most write-ups skip: an initial fraud alert is not a general-purpose precaution you can place just because you want to. The statute applies to a consumer who asserts in good faith a suspicion of having been, or being about to become, a victim of fraud or a related crime. In my situation, that condition was plainly met. That good-faith suspicion can rest on a threat you have not yet suffered, so it is not limited to people already defrauded. If you cannot assert one at all, the freeze is available without qualification.

The honest summary: a fraud alert is a request for diligence, and a freeze is a locked door. On the night in question I wanted a door.

In order, over about ninety minutes:

• Froze my file at all three nationwide bureaus, separately, and saved each confirmation and PIN somewhere I would find it again.
• Placed a fraud alert as well, since it is free, covers all three from one request, and layers on top of the freeze rather than replacing it.
• Called the store card issuer's fraud line directly to report the account as not mine and get it flagged at the source.
• Pulled my full reports from all three bureaus to see whether anything else had been opened that I had not been notified about.
• Filed a report at the federal identity theft site to generate the report that unlocks the stronger remedies, including the extended alert.

The freeze and the alert are not alternatives. That matters because the comparison articles I read that night treated the three as a menu from which you pick one. Freeze and alert do different jobs and cost nothing, so in an active-fraud situation the sensible move is both.

None offers much protection for your existing accounts; a freeze offers the least. A freeze restricts release of your report, which stops a new account from being approved. It does nothing about someone using a card you already hold. That is a separate problem handled through the issuer's fraud process and by reading your statements.

None covers every consumer report about you. The three nationwide bureaus are the main ones, but specialty consumer reporting agencies also cover things like bank account history and utility and telecom accounts, and a freeze at the big three does not reach them. If you are worried about someone opening a phone contract or checking account, that requires a separate set of requests.

The inconvenience is real but smaller than I expected. I have lifted it three times in the past year, each for a specific credit application. Each lift takes a few minutes online. You can lift it for a set period or permanently, and at one bureau rather than all three if you know which bureau the lender will use.

Keep the confirmation details somewhere durable. Some bureaus issue a PIN for managing the freeze, and losing it means an identity verification process at exactly the moment you are in a hurry. I keep mine with my other important documents rather than in an email folder.

Freeze: anyone not planning to apply for credit in the near term, and anyone who has been a victim. It is free, does not affect your score, and is the only one of the three that limits release of the report rather than merely adding an alert. If you are not going to open new accounts this quarter, there is little reason not to have it on.

Lock: someone who applies for credit frequently enough that freeze friction would realistically lead them to leave it off. Read what the agreement says, and check whether it is bundled into a paid subscription you would otherwise not buy.

Fraud alert: anyone who can honestly assert a good-faith suspicion that they have been or are about to become a victim. That is the statutory condition, not a formality. If that describes you, place it, because it is free and one request covers all three bureaus. It is too weak to be your only defense, but it is worth using alongside a freeze. If you have an identity theft report, use the extended version instead.

The store card was resolved. It took about six weeks between the issuer's fraud process and the bureau disputes, and the account and its inquiry came off my file. The freeze has been on ever since, with three brief lifts, and it has cost me perhaps twenty minutes in total over the year.

What I would change is the timing. I placed the freeze after the fraud, as most people do, but that is the least useful time to do it. A freeze is cheap insurance because it costs nothing and does not affect your score; the only real price is remembering to thaw it before you apply for something. If you are not planning an application in the next few months, consider it at a moment of your choosing rather than on the night you get a notification about a card you did not order.

The comparison articles are not wrong about the three tools; they are written as though you will read them calmly in advance. A freeze limits release of the report, so the application generally cannot be approved. An alert asks the lender for extra verification. A lock does roughly what a freeze does under a contract rather than a statute. Those three sentences are what I needed at eleven at night; everything else is detail you can read later.

1. What is the difference between a credit freeze and a credit lock?

A freeze is a right established by federal law, free to place and lift, with duties the bureau must meet. A lock is a product governed by the agreement you accept when signing up, sometimes bundled into a paid subscription. The practical protection is broadly comparable; the difference is whether a statute or a contract stands behind it.

2. Does a credit freeze hurt your credit score?

No. A freeze restricts who can access your report. It does not affect your score, does not close or interfere with existing accounts, and does not block your own access to your report.

3. Is a credit freeze free?

Yes. Since federal law changed in 2018, placing and lifting a security freeze is free at each nationwide credit reporting agency. You must place it separately at each of the three bureaus.

4. What does a fraud alert actually do?

It places a notice on your file telling any creditor pulling it to take reasonable steps to verify your identity before extending credit. It does not block access to the report, so it is a request for diligence rather than a locked door. It is free and one request covers all three bureaus.

5. Should I use a freeze or a fraud alert?

They are not alternatives. Both are free and they do different jobs, so in an active fraud situation the sensible move is both. The lock is the genuine alternative to the freeze, since the two occupy the same slot.

6. Will a credit freeze stop fraud on my existing accounts?

7. Do I have to unfreeze at all three bureaus to apply for credit?

Not necessarily. If you ask the lender which bureau they pull, you can often lift the freeze at just that one. Lifts can be temporary for a set window or permanent, and each takes a few minutes online.