How to Lock Your Credit at the Three Nationwide Credit Reporting Agencies

Last updated October 7, 2026 · 1,301 words · Credit Locks

Locking your credit generally means placing a security freeze or a credit lock at Equifax, Experian, and TransUnion. Both restrict access to your credit file for most new lenders. You request each one from the credit reporting agency itself, or, for a security freeze, by phone, mail, or online under federal law.

This guide is general educational information for U.S. readers. It is not financial advice and does not describe your individual credit file. Figures such as score ranges and timeline estimates are typical examples, not promises.

Key takeaways

A security freeze is free to place, temporarily lift, or remove under federal law, while a credit lock is a product offered under an agency's own contract terms.
Freezes and locks are placed one agency at a time, so Equifax, Experian, and TransUnion each require a separate request.
A freeze or lock does not block existing creditors, debt collectors acting for them, or government agencies acting under a court order or subpoena.
Neither tool changes the information stored in a credit file, and placing one is not a factor in FICO or VantageScore calculations.
An initial fraud alert lasts 1 year and an extended fraud alert lasts 7 years under the Fair Credit Reporting Act.

Locking credit generally means placing a security freeze or a credit lock on a credit file at the three nationwide credit reporting agencies — Equifax, Experian, and TransUnion. A consumer requests the restriction directly from each agency, one at a time, and the file then becomes unavailable to most new lenders. A security freeze is free to place, temporarily lift, or remove under federal law; a credit lock is a product an agency offers under its own contract terms.

Why there is no single national credit lock

Each nationwide agency maintains its own file and decides independently whether to release it. Because the files are separate, a restriction placed at one agency does not carry over to the other two. A lender generally requests a file from the agency it does business with, so a freeze at one agency leaves the other two files open to inquiry unless restrictions are placed there as well.

Two mechanisms are commonly described as locking credit. The security freeze is a right created by federal statute. The credit lock is a commercial feature that an agency may offer, governed by the agreement a consumer accepts when enrolling.

Security freeze compared with credit lock

The distinction matters because the protections attached to each are different. A security freeze is covered by the Fair Credit Reporting Act (FCRA, 15 U.S.C. § 1681), which also makes it free to place, temporarily lift, or remove. A credit lock is covered by the terms the agency writes into its own product.

Feature	Security freeze	Credit lock
Legal basis	Federal statute (FCRA)	Contract between the consumer and the agency
Cost	Free to place, temporarily lift, or remove under federal law	Set by the agency offering the product
Where it applies	Only the file held by the agency that received the request	Only the file held by the agency offering the product
How it is controlled	PIN, password, or written request; online, by phone, or by mail	Account login or mobile app
How long it lasts	Remains until the consumer removes it	Set by the product's terms
Effect on new lender access	Blocks most lenders that do not already hold an account	Blocks the access the agency agrees to restrict

The Federal Trade Commission describes freezes and fraud alerts as the statutory tools available to consumers, and the Consumer Financial Protection Bureau publishes guidance on credit reports and scores. Neither a freeze nor a lock changes the underlying information stored in a credit file.

How a freeze or lock is placed

The sequence is similar at each of the three agencies, and it repeats for each one.

Identify the agencies to contact. A freeze or lock is placed one agency at a time; there is no shared application across Equifax, Experian, and TransUnion.
Open or sign in to an account. Each agency runs its own account system. A security freeze can also be requested by phone or by mail, while a lock is managed through the agency's account tools.
Verify identity. Agencies ask for identifying details such as name, current and prior addresses, date of birth, and a government identification number.
Complete placement. The agency confirms the restriction and issues a PIN, password, or account credential used later to manage or remove it.
Keep the credential. The PIN or password is the key to thawing the file, and replacing a lost credential requires going through identity verification again.

Placing restrictions at more than one agency

Because each agency acts only on its own file, coverage across all three means completing the process three times. Verification questions, account tools, and processing times for mailed requests differ from one agency to the next, and each agency sets its own procedures for confirming identity before releasing a file.

What a freeze or lock does not do

A restriction is a gate on new access, not a shield over the whole file. As the Federal Trade Commission explains, a freeze does not stop a company from seeing a credit file when the consumer already has an account or policy with that company, and it does not block government agencies acting under legal authority such as a court order or subpoena. Other limits follow from the same principle:

It does not remove or correct information in the file. Accuracy questions follow the dispute process described in the FCRA.
It does not block existing creditors, debt collectors acting on their behalf, or government agencies acting under a court order or subpoena.
It does not prevent identity theft on its own. It limits one path — the opening of new accounts — while other forms of misuse continue to exist.
It does not apply retroactively. Accounts opened before placement remain visible and continue to report activity.

Fraud alerts and identity theft blocks

Freezes and locks sit alongside two other FCRA tools. Section 605A of the FCRA (15 U.S.C. § 1681c-1) covers fraud alerts, which ask businesses to take reasonable steps to verify identity before extending credit. An initial fraud alert lasts 1 year, and an extended fraud alert lasts 7 years. Section 605B (15 U.S.C. § 1681c-2) covers the blocking of information that resulted from identity theft.

These tools work differently from a freeze. A fraud alert does not close the file, but it adds a verification step; a freeze closes the file to most new inquiries; a lock restricts access according to a product's terms. Where identity theft has occurred, a report can be filed at IdentityTheft.gov and with the Internal Revenue Service using Form 14039. The identity theft section covers the reporting sequence in more detail.

How freezes and locks relate to credit scores

Most credit scores, including FICO and VantageScore, use a range of 300 to 850. FICO's scoring factors carry approximate weights: payment history 35%, amounts owed 30%, length of credit history 15%, new credit 10%, and credit mix 10%. VantageScore uses its own weighting and does not publish fixed percentages. None of those factors involves whether a freeze or a lock is in place, because placing one is not reported as a credit event and does not change the data in the file. The credit score hub and the guide to how credit scores are calculated describe the inputs in more detail, and FICO compared with VantageScore explains where the two models differ.

A restriction affects the application process rather than a score. If a lender cannot retrieve a frozen file, the application usually cannot be completed in the ordinary way. If the file is available and a lender pulls it, the resulting hard inquiry typically remains on a credit report for 2 years.

Checking the file and managing access over time

The FCRA gives consumers the right to a free credit report from each nationwide agency every 12 months, and the three agencies currently provide free reports weekly through AnnualCreditReport.com. Reviewing a credit report before and after placing a restriction helps confirm which accounts and inquiries appear on the file.

Accuracy issues follow a separate path. Under the FCRA, an agency generally must investigate a dispute within 30 days, and the period can extend to 45 days if the consumer provides additional information during the initial 30-day window. Most negative information, including late payments, stays on a report for 7 years. A Chapter 7 bankruptcy stays for 10 years, while a Chapter 13 bankruptcy stays for 7 years.

For short-term access, a security freeze is free to lift temporarily, and agencies commonly allow a lift for a defined window so a single application can proceed. A lock is typically toggled on and off through the agency's account or app. Restrictions are often used alongside the reporting tools described in the credit monitoring section and the overview of a credit check.

This page is published for education only and is not financial advice.

Compare three-bureau credit scores and reports from a single place. Educational links, disclosed below.

Three Bureau Credit Scores and Reports

CreditMonitored.com may earn a commission from partner links at no additional cost to you.

Frequently asked questions

How do you lock your credit at all three credit bureaus?

A request has to be made separately to Equifax, Experian, and TransUnion, because each agency maintains its own file and acts on it independently. A security freeze is free to place, temporarily lift, or remove under federal law and can be requested online, by phone, or by mail. Where an agency offers a credit lock, that restriction is set up through the agency's own account tools and governed by its product terms.

Is a credit lock the same thing as a security freeze?

No. A security freeze is a right created by the Fair Credit Reporting Act, and federal law makes it free to place, temporarily lift, or remove. A credit lock is a commercial feature offered by a credit reporting agency, and the cost, duration, and scope of what it blocks are set by the terms a consumer accepts when enrolling rather than by statute.

Does locking your credit affect your credit score?

Placing a freeze or a lock is not itself a credit event and does not change the information in a credit file. Most credit scores, including FICO and VantageScore, use a range of 300 to 850, and the FICO factors are payment history 35%, amounts owed 30%, length of credit history 15%, new credit 10%, and credit mix 10%. Whether a restriction is in place is not one of those factors.

How long does a credit lock or freeze last?

A security freeze remains in place until the consumer removes it, although it can be temporarily lifted for a set period. A credit lock lasts according to the product's terms as written by the agency offering it. Fraud alerts run on their own schedule: an initial fraud alert lasts 1 year, and an extended fraud alert lasts 7 years.

Can a lender still pull your credit file after it is locked or frozen?

A freeze blocks most lenders that do not already hold an account, so an application generally cannot be processed in the ordinary way until the file is accessible again. Federal law lists exceptions, including existing creditors, debt collectors acting for them, and government agencies acting under a court order or subpoena. A security freeze is free to lift temporarily so a single application can proceed.

Does locking your credit prevent identity theft?

It restricts one route — the opening of new accounts using a credit file — but it does not stop every use of a file and does not remove information already reported. If identity theft has occurred, a report can be filed at IdentityTheft.gov and with the Internal Revenue Service using Form 14039, and FCRA section 605B (15 U.S.C. § 1681c-2) covers blocking information that resulted from identity theft.