Credit Lock vs. Credit Freeze: How the Two Tools Differ
A credit lock and a credit freeze both restrict access to the credit file held by the three nationwide credit reporting agencies, but they come from different sources. A security freeze is a federal right under the Fair Credit Reporting Act and is free to place, lift, or remove. A credit lock is a provider's contractual feature.
This guide is general educational information for U.S. readers. It is not financial advice and does not describe your individual credit file. Figures such as score ranges and timeline estimates are typical examples, not promises.
Key takeaways
- A security freeze is a statutory right and is free to place, temporarily lift, or remove under federal law.
- A credit lock is a provider feature governed by a contract, so its controls and any cost are set by that provider rather than by statute.
- A freeze must be requested from each nationwide agency individually — Equifax, Experian, and TransUnion — because each maintains its own file.
- Fraud alerts are separate from freezes: an initial fraud alert lasts 1 year and an extended fraud alert lasts 7 years.
- Neither a freeze nor a lock changes the factors a scoring model uses, such as FICO's 35% weight on payment history and 30% on amounts owed.
A credit lock and a credit freeze both restrict access to the credit file that Equifax, Experian, and TransUnion maintain, but they come from different sources. A security freeze is a right created by federal law and is free to place, temporarily lift, or remove. A credit lock is a feature a provider sells or bundles under a contract that the provider writes. That statute-versus-contract difference explains nearly every practical distinction between the two.
What a security freeze does
A security freeze — often called a credit freeze — instructs a credit reporting agency not to release a consumer's credit report to a business that is screening a new credit application. The freeze remains in effect until the consumer lifts or removes it. Federal law makes placing, temporarily lifting, and removing a freeze free, and the Federal Trade Commission describes how the process works at each of the three nationwide agencies.
Each nationwide agency keeps its own file, so a freeze has to be requested separately from Equifax, Experian, and TransUnion to cover all three. A freeze does not stop a consumer from retrieving their own reports, and it generally does not close accounts that are already open. Its effect is to restrict release of the file when a new creditor asks for it.
What a credit lock does
A credit lock is a switch inside a product — typically an account dashboard or app operated by a credit reporting agency or by a third-party service. The provider decides how the lock is engaged, how quickly a change takes effect, whether the feature sits inside a paid subscription, and what happens if that subscription ends. None of that is fixed by statute; it is fixed by the agreement the consumer accepts.
Locks are usually presented as convenience: the control sits in the same place as monitoring alerts and credit reports. The trade-off is that the terms travel with the contract. If a provider changes its agreement or discontinues a feature, the lock's terms change with it. A credit freeze rests on a statutory right that a provider's contract update cannot rewrite.
Credit lock vs. credit freeze: side-by-side
| Point of comparison | Security freeze | Credit lock |
|---|---|---|
| Source of the right | Federal statute (Fair Credit Reporting Act) | Contract and terms of service with a provider |
| Cost | Free to place, temporarily lift, or remove under federal law | Terms, including any cost, are set by the provider |
| Who turns it on and off | The consumer, using the credentials or PIN the agency issues | The consumer, through the provider's app or account tools |
| Duration | Continues until the consumer lifts or removes it | Continues while the account and service remain active |
| Effect on new credit applications | Restricts release of the credit file to most credit-granting businesses | Similar restriction, defined by the provider's terms |
| If the provider changes its terms | Statutory rights are not rewritten by a contract update | Terms can change when the provider updates its agreement |
Read the table as a map of where control sits rather than a ranking. Both tools restrict access; the question is who sets the rules for turning the restriction on and off.
Who holds the switch
With a freeze, the consumer authenticates using a PIN or credentials the agency issues, then places, lifts, or removes the freeze. The agency's obligation comes from the FCRA, which was enacted in 1970 and amended by the Fair and Accurate Credit Transactions Act in 2003. With a lock, the consumer authenticates inside the provider's system, and the provider's own procedures govern what happens next. Both routes depend on keeping login details secure. The credit lock hub covers how providers structure those accounts.
Fraud alerts and identity theft blocking
Two additional statutory tools sit alongside freezes. Under FCRA section 605A (15 U.S.C. section 1681c-1), a consumer can request a fraud alert: an initial fraud alert lasts 1 year and an extended fraud alert lasts 7 years. Under FCRA section 605B (15 U.S.C. section 1681c-2), a consumer who files an identity theft report can ask that information resulting from that theft be blocked from the file.
Alerts and freezes differ in what they ask of a business. An alert asks creditors to take extra steps to verify identity before extending credit, while a freeze restricts release of the report itself. If identity theft occurs, it can be reported at IdentityTheft.gov and to the IRS using Form 14039. The identity theft guide covers the reports involved and the documentation agencies request.
What neither tool changes
Neither a freeze nor a lock edits the information in a credit file, and neither changes the formulas used to calculate a credit score. FICO weighs its factors approximately as follows.
- Payment history — 35%
- Amounts owed — 30%
- Length of credit history — 15%
- New credit — 10%
- Credit mix — 10%
VantageScore uses its own weighting and does not publish fixed percentages. Most credit scores, including FICO and VantageScore, use a range of 300 to 850. The how credit scores are calculated guide covers each factor, and FICO vs. VantageScore compares the two models.
Reports, disputes, and monitoring
Freezes and locks sit inside a wider set of rights and records. Under the FCRA (15 U.S.C. section 1681), consumers are entitled to a free credit report from each nationwide agency every 12 months, and the three agencies currently provide free reports weekly through AnnualCreditReport.com. When a consumer disputes an item, the agency generally must investigate within 30 days, and the period can extend to 45 days if the consumer supplies additional information during the initial 30-day window. The Legal Information Institute publishes the statutory text.
Record retention follows its own timelines. Most negative information, including late payments, remains on a credit report for 7 years. A Chapter 7 bankruptcy remains for 10 years, and a Chapter 13 bankruptcy remains for 7 years. Hard inquiries typically remain for 2 years. Because the underlying records persist whether or not a freeze or lock is in place, reviewing reports and monitoring alerts is a separate task from restricting access. See credit reports, credit checks, and credit monitoring for how those pieces fit together.
How the difference plays out
The practical difference between a freeze and a lock shows up in three places. First, cost: federal law makes a freeze free to place, lift, or remove, while a lock's terms are set by the provider. Second, duration and control: a freeze persists until the consumer acts, while a lock persists only while the account or service remains in place. Third, recourse: a freeze is backed by a statutory right, with oversight from agencies such as the Consumer Financial Protection Bureau, which was created by the Dodd-Frank Act in 2010 and began operating in 2011, whereas a lock is backed by the provider's agreement and its cancellation terms.
One more variable is access. Lifting a freeze typically requires the PIN or credentials the agency issued, and the same credentials restore it afterward. Lifting a lock usually requires access to the provider's app or account. Neither route removes the need to keep a record of when the restriction was set, when it was lifted, and which agencies were involved.
This page is published for education only and is not financial advice.
Compare three-bureau credit scores and reports from a single place. Educational links, disclosed below.
Three Bureau Credit Scores and ReportsCreditMonitored.com may earn a commission from partner links at no additional cost to you.
Frequently asked questions
Is a credit lock the same as a credit freeze?
No. A security freeze is a right established by the Fair Credit Reporting Act and is free to place, temporarily lift, or remove. A credit lock is a feature offered under a provider's contract, so its controls, duration, and any cost come from that provider's terms.
Does a security freeze cost anything?
Under federal law, a security freeze is free to place, temporarily lift, or remove. Any cost connected to a credit lock comes from the provider's own agreement rather than from the statute.
How long does a freeze last?
A freeze continues until the consumer lifts or removes it. That differs from a fraud alert, where an initial alert lasts 1 year and an extended fraud alert lasts 7 years.
Does a freeze or a lock change a credit score?
Neither tool edits the information in a credit file or alters the formulas a scoring model uses. FICO weights payment history at 35% and amounts owed at 30%, among other factors, while VantageScore uses its own weighting and does not publish fixed percentages.
Does a freeze have to be requested from all three credit reporting agencies?
Each of the three nationwide agencies — Equifax, Experian, and TransUnion — maintains its own file, so a freeze placed with one does not restrict release of the others. Covering all three requires a separate request to each.
What is the difference between a fraud alert and a freeze?
A fraud alert asks creditors to take extra steps to verify identity before extending credit, and it runs for 1 year initially or 7 years when extended. A freeze restricts release of the credit file to most credit-granting businesses and is free to place, lift, or remove under federal law.