How to Lock Credit at Each Bureau: Equifax, Experian, and TransUnion

Last updated October 7, 2026 · 1,216 words · Credit Locks

Credit locks are bureau-specific tools: you set one up separately with Equifax, Experian, and TransUnion. There is no single national lock. Each lock restricts access to your file at that agency only, and its terms come from the company's own service rather than federal law.

This guide is general educational information for U.S. readers. It is not financial advice and does not describe your individual credit file. Figures such as score ranges and timeline estimates are typical examples, not promises.

Key takeaways

Locking credit at each bureau means setting up a separate lock with Equifax, Experian, and TransUnion, because no single lock covers all three files.
The three nationwide credit reporting agencies are Equifax, Experian, and TransUnion.
A security freeze is free to place, temporarily lift, or remove under federal law, while a credit lock is a service offered by the agency under its own terms.
Fraud alerts are covered by FCRA section 605A: an initial fraud alert lasts 1 year and an extended fraud alert lasts 7 years.
A lock restricts who may access a credit file but does not add, remove, or change any information inside it.

Credit locks are bureau-specific. Each of the three nationwide credit reporting agencies — Equifax, Experian, and TransUnion — offers its own lock, and each lock is set up separately. There is no single product that locks all three files at once, so locking credit at each bureau means creating an account with each agency and switching on that agency's lock.

Why there is no single credit lock for all three bureaus

Equifax, Experian, and TransUnion each maintain a separate file on the same consumer, and each company builds its own consumer-facing products around its own file. A lock is one of those products: a feature inside an agency's account dashboard, governed by that company's terms of use rather than by a shared national system. That is why unlocking at one agency has no effect on the other two files, and why the phrase "lock my credit all three bureaus" translates into three separate logins and three separate settings.

The three files can also contain different information, because creditors do not all report to all three agencies. The credit reports hub on this site describes how file contents and reporting patterns differ. A consumer who locks only one file still leaves the other two open to new-account inquiries, which is the practical reason the three-bureau approach comes up so often.

How to lock credit at each bureau

The mechanics differ slightly from company to company, but the sequence is consistent.

Reach the agency directly through its own website or app rather than through a link in an email or text message.
Create an account with that agency, or sign in to an existing one.
Complete identity verification. Agencies generally confirm identity with questions drawn from the credit file, a one-time code sent to a phone or email on record, or both.
Open the security, freeze, or lock section of the account dashboard and select the lock option offered there.
Confirm the lock and note the date it took effect, along with the process for temporarily lifting it.
Repeat the same process with the other two agencies, since a lock placed with one company does not touch the other two files.

Because a lock is a commercial product rather than a statutory right, availability, features, and any fee are set by the company offering it. The Consumer Financial Protection Bureau publishes consumer-facing material on credit files at CFPB, which is a useful reference point when comparing what a given provider includes.

Lock, freeze, and fraud alert compared

These tools overlap in effect but differ in legal footing. A security freeze is a right created by federal law. A credit lock is a service, so its terms come from the provider. Fraud alerts sit alongside both.

Tool	Legal footing	Duration	Cost
Security freeze	Consumer right under the FCRA	Remains in place until temporarily lifted or removed	Free to place, temporarily lift, or remove under federal law
Credit lock	Service offered by each credit reporting agency; provider terms apply	Set by the provider	Set by the provider
Initial fraud alert	FCRA section 605A (15 U.S.C. section 1681c-1)	1 year	Free, per the FTC
Extended fraud alert	FCRA section 605A (15 U.S.C. section 1681c-1)	7 years	Free, per the FTC

The Federal Trade Commission describes credit freezes and fraud alerts in detail, including the difference between placing a freeze and lifting it for a specific lender. The credit freeze page on this site covers the statutory route, and the credit lock hub covers the product route.

What a lock restricts, and what it does not

A lock restricts who can pull the credit file at that agency. It does not remove anything from the file, and it does not stop activity on accounts that already exist. According to the FTC, a freeze or lock blocks most access but not all: existing creditors, debt collectors, and certain government agencies may still obtain a report, and a consumer can authorize access for a specific application.

Neither tool changes the underlying data. Payment history, balances, account age, and inquiry records stay where they were. Only the door to the file changes.

Monitoring while a lock is in place

A lock is a door; monitoring is the camera. Credit monitoring reviews report data for changes such as new accounts, new inquiries, or address updates, and flags activity that appears on a file. It is a detection tool, not a barrier, so it works alongside a lock rather than replacing one.

Reviewing a file directly is a separate activity. The credit check page explains how a consumer's own review differs from a lender's inquiry, and why soft inquiries from self-review do not appear the way hard inquiries do.

If identity theft has already happened

Locking three bureaus does not undo fraud that has already occurred. Identity theft can be reported at IdentityTheft.gov, which produces a recovery plan, and to the IRS using Form 14039 when a tax return may be affected. Two mechanisms are tied specifically to documented identity theft: an extended fraud alert, which lasts 7 years under FCRA section 605A, and an identity theft report block under FCRA section 605B (15 U.S.C. section 1681c-2). The identity theft section covers how those reports are filed and what documentation agencies ask for.

How locks relate to credit scores and reports

Credit scores are calculated from the contents of a credit file. In the FICO model, payment history carries roughly 35% of the weight, amounts owed about 30%, length of credit history 15%, new credit 10%, and credit mix 10%. VantageScore uses its own factor weighting and does not publish fixed percentages. Most scores, including FICO and VantageScore, use a range of 300 to 850. A lock does not alter any of these inputs; it changes who may look at the file.

For detail on the inputs, see how credit scores are calculated, the credit utilization guide, and the credit score hub. Hard inquiries typically remain on a credit report for 2 years. Most negative information, including late payments, stays for 7 years; a Chapter 7 bankruptcy stays for 10 years and a Chapter 13 bankruptcy for 7 years.

Checking accuracy before locking all three files

A lock limits access; it does not verify accuracy. The FCRA gives consumers the right to a free credit report from each nationwide agency every 12 months, and the three agencies currently provide free reports weekly through AnnualCreditReport.com. Under the FCRA, a credit reporting agency generally must investigate a dispute within 30 days, and that period can extend to 45 days if the consumer provides additional information during the initial 30-day window. The credit profile page explains how disputed and verified items are recorded once an investigation closes.

Terms worth reviewing before locking credit per bureau

Whether the lock can be turned off immediately or only on a stated schedule.
Whether a temporary lift is available for a specific lender or only for a set time window.
What identity verification is required to remove the lock, and what happens if account access is lost.
Whether the lock covers credit inquiries only or extends to other data products the agency sells.
Whether the provider's terms include arbitration provisions, and how much notice is given before terms change.

This page is published for education only and is not financial advice.

Compare three-bureau credit scores and reports from a single place. Educational links, disclosed below.

Three Bureau Credit Scores and Reports

CreditMonitored.com may earn a commission from partner links at no additional cost to you.

Frequently asked questions

Can one credit lock cover all three bureaus?

No. Locks are offered separately by Equifax, Experian, and TransUnion, and a lock placed with one company does not affect the other two files. Locking all three means three separate accounts and three separate settings.

Is a credit lock the same as a security freeze?

They are different tools with different footing. A security freeze is a right under the FCRA and is free to place, temporarily lift, or remove under federal law. A credit lock is a service offered by a credit reporting agency, so its features, terms, and any fee are set by that provider.

How long does a fraud alert last?

An initial fraud alert lasts 1 year. An extended fraud alert, which requires an identity theft report, lasts 7 years. Both are covered by FCRA section 605A (15 U.S.C. section 1681c-1).

Does placing a lock change a credit score?

No. A lock restricts access to the credit file but does not add, remove, or change any information inside it. Scores are calculated from file data — in the FICO model, payment history carries about 35% of the weight and amounts owed about 30% — so a lock leaves those inputs untouched.

What if identity theft has already happened?

A lock limits future access but does not resolve existing fraud. Identity theft can be reported at IdentityTheft.gov and to the IRS using Form 14039, and consumers can request an extended fraud alert or an identity theft report block under FCRA section 605B (15 U.S.C. section 1681c-2).

Where can I see what each credit file contains?

Under the FCRA, each nationwide agency must provide a free report every 12 months, and the three agencies currently provide free reports weekly through AnnualCreditReport.com. Reviewing all three files is the only way to see what each agency holds.