What Is a Credit Lock and What Does It Do?
A credit lock is a consumer control that restricts access to a credit file held by a credit reporting agency, usually through that company's app or website. It works like a switch the consumer turns on and off, and it is governed by the terms of the company offering it rather than by federal statute.
This guide is general educational information for U.S. readers. It is not financial advice and does not describe your individual credit file. Figures such as score ranges and timeline estimates are typical examples, not promises.
Key takeaways
- A credit lock is a provider-controlled restriction on access to a credit file, administered by the company that offers it.
- A security freeze is a right created by the Fair Credit Reporting Act and is free to place, temporarily lift, or remove under federal law, while lock pricing and terms come from the provider.
- A lock placed at one credit reporting agency does not affect the file held by another agency.
- A lock does not add, remove, or rewrite any information in a credit file, so it is not an input to FICO or VantageScore calculations.
- Fraud alerts and identity theft report blocking are separate tools covered by FCRA sections 605A and 605B at 15 U.S.C. sections 1681c-1 and 1681c-2.
A credit lock is a service that restricts access to a consumer's credit file at a credit reporting agency until the consumer releases the lock. It is provided by credit reporting agencies and by some independent companies, and it is controlled through an online account, a mobile app, or a customer service line. The credit lock meaning overlaps heavily with the term security freeze, but the two rest on different foundations: a lock is a contractual product, while a freeze is a right set out in federal law.
Knowing what a credit lock does — and what it does not do — separates it from a dispute, a fraud alert, or a monitoring subscription. A lock is an access gate, not a correction tool.
Credit Lock Definition
A credit lock places a barrier between a credit file and anyone who wants to read it. While the lock is active, most businesses that would ordinarily pull a credit report — a card issuer reviewing a new application, a lender pricing a loan, or a landlord screening a tenant — cannot retrieve the file until the lock is released.
The barrier is administered by the company that provides the lock. That single fact explains most of the practical differences between locks and freezes: the scope of the lock, the tools used to turn it on and off, the release process, and any price charged for it all come from the provider's own terms rather than from a statute. The Federal Trade Commission publishes consumer-facing explanations of freezes and fraud alerts that are useful for comparison.
What Does a Credit Lock Do?
In everyday use, a credit lock behaves like a switch on a file. Its common characteristics include:
- It blocks most new third-party pulls of a credit report while the lock is active.
- It is usually toggled instantly through a provider's app or website, which is the feature most often marketed.
- It applies to one file at a time. Placing a lock at one credit reporting agency has no effect on the file held by another agency.
- It does not alter file contents. A lock does not remove, rewrite, or hide any account, balance, or inquiry.
- It does not stop existing creditors from viewing accounts a consumer already holds, and it does not stop a consumer from reading their own report.
- It does not cover non-credit screening that does not involve a credit reporting agency, such as a criminal background check or a verification handled directly with an employer.
Because the word "lock" is not defined in federal credit law, any company may attach the label to an access-restriction feature. The governing document is the provider's agreement, not a statute.
Credit Lock vs. Security Freeze
Both controls restrict access to a credit file, but they are created and governed differently. The table below compares the two on the points that most often come up.
| Feature | Credit lock | Security freeze |
|---|---|---|
| Legal basis | Contract with the company providing the lock | Right established in the Fair Credit Reporting Act |
| Cost | Set by the provider; sometimes bundled with a paid service | Free to place, temporarily lift, or remove under federal law |
| Who administers it | The company offering the lock | Each credit reporting agency, at the consumer's request |
| How it is released | Through the provider's account tools or support channel | Through the agency's designated process, including a temporary lift |
| Coverage | Generally the file at the agency or service offering the lock | The file at each agency where a freeze is placed |
| Effect on file data | None; the underlying records are unchanged | None; the underlying records are unchanged |
Where Credit Locks Are Offered
The three nationwide credit reporting agencies are Equifax, Experian, and TransUnion, and each has offered some form of locking or file-restriction tool. Independent identity companies also bundle lock features into paid subscriptions, sometimes alongside credit monitoring. A lock from one company generally covers only the data that company holds or can manage, which is why coverage differs from a freeze placed directly with each agency.
Federal consumer protection work in this area sits largely with the Consumer Financial Protection Bureau, which was created by the Dodd-Frank Act in 2010 and began operating in 2011. The bureau publishes guidance on credit reports and scores at its credit reports and scores resource page.
Locks, Fraud Alerts, and Identity Theft Blocks
A credit lock is one of several tools that limit how a credit file is used. They are not interchangeable:
- Fraud alert. A notice that asks businesses to take extra steps to verify identity before extending credit. An initial fraud alert lasts 1 year; an extended fraud alert lasts 7 years. Fraud alerts fall under FCRA section 605A, 15 U.S.C. section 1681c-1.
- Identity theft report block. Under FCRA section 605B, 15 U.S.C. section 1681c-2, a consumer who submits an identity theft report can ask that information resulting from identity theft be blocked from the file.
- Security freeze. A statutory restriction on access that is free to place, temporarily lift, or remove.
- Credit lock. A provider-controlled restriction with terms set by contract.
When identity theft is involved, federal resources include IdentityTheft.gov for reporting and IRS Form 14039 for tax-related identity theft. More detail on the recovery process appears in the guide to identity theft.
Do Locks and Freezes Change a Credit Score?
Scores are calculated from the contents of a credit file, not from whether an access gate is open. Most credit scores, including FICO and VantageScore, use a range of 300 to 850. FICO's published factors and their approximate weights are payment history 35%, amounts owed 30%, length of credit history 15%, new credit 10%, and credit mix 10%. VantageScore uses its own factor weighting and does not publish fixed percentages. A lock or a freeze adds nothing to and removes nothing from those inputs.
The mechanics behind each factor are covered in the guides to how credit scores are calculated, payment history, credit utilization, and length of credit history, with model differences explained in FICO vs. VantageScore and score bands in credit score ranges explained.
Where a lock can have an indirect effect is on an application that depends on a report pull. If a lender cannot retrieve the file because access is restricted, the application may be delayed or declined until the restriction is released. Hard inquiries typically remain on a credit report for 2 years, and the credit check overview explains how application-related pulls are recorded.
What a Lock Does Not Do
A credit lock does not correct inaccurate information. Errors in a credit file are handled through the dispute process, which is described alongside the free report entitlement on the credit reports hub. A lock also does not prevent a data breach at a business, does not remove legitimate negative information, and does not take the place of reviewing a file for errors.
Likewise, a lock is not the same as monitoring. Monitoring observes changes to a file and sends alerts; a lock restricts access. The two are often packaged together, and the credit monitoring guide covers what monitoring does and does not detect.
The Legal Framework Around Credit Files
The Fair Credit Reporting Act, 15 U.S.C. section 1681, was enacted in 1970 and amended by the Fair and Accurate Credit Transactions Act in 2003. It sets the ground rules that locks and freezes both operate within. Among other provisions, it gives consumers the right to a free credit report from each nationwide agency every 12 months, and the three agencies currently provide free reports weekly through AnnualCreditReport.com.
The Act also sets dispute timelines: a credit reporting agency generally must investigate a dispute within 30 days, and that period can extend to 45 days if the consumer provides additional information during the initial 30-day window. Retention rules limit how long negative items stay in a file — most negative information, including late payments, stays for 7 years, a Chapter 7 bankruptcy stays for 10 years, and a Chapter 13 bankruptcy stays for 7 years. The full statutory text is available through the Legal Information Institute's copy of 15 U.S.C. section 1681.
Aggregate consumer borrowing, which provides context for how credit files are used across the economy, is tracked by the Federal Reserve in its G.19 release on total outstanding consumer credit.
How the Controls Compare at a Glance
Four controls commonly appear in the same conversation, and each does something different:
- Credit lock — provider-controlled access restriction, governed by contract terms.
- Security freeze — statutory access restriction, free to place, temporarily lift, or remove.
- Fraud alert — verification prompt to businesses, lasting 1 year as an initial alert or 7 years as an extended alert.
- Credit monitoring — observation and alerting, with no effect on who can pull a file.
The credit lock and credit freeze hubs cover each tool in more depth, and the credit score hub explains how the underlying data is scored.
This page is published for education only and is not financial advice.
Compare three-bureau credit scores and reports from a single place. Educational links, disclosed below.
Three Bureau Credit Scores and ReportsCreditMonitored.com may earn a commission from partner links at no additional cost to you.
Frequently asked questions
What is a credit lock in simple terms?
A credit lock is a provider-controlled restriction on access to a credit file. While it is active, most businesses that would normally pull a credit report cannot retrieve it. The lock is switched on and off through the company that offers it, and its terms come from that company's agreement rather than from federal statute.
Is a credit lock the same as a security freeze?
No. Both restrict access to a credit file, but a security freeze is a right under the Fair Credit Reporting Act and is free to place, temporarily lift, or remove under federal law, while a credit lock is a product governed by the provider's contract.
Does a credit lock change a credit score?
No. Most credit scores, including FICO and VantageScore, use a range of 300 to 850 and are calculated from the contents of a credit file. A lock does not add, remove, or change any data in the file, so it is not an input to those models.
How long does a credit lock last?
Duration is set by the provider. Many locks stay in place until the consumer turns them off, while others follow a subscription term. There is no federal duration rule for locks. A security freeze lasts until the consumer removes it or requests a temporary lift.
Can a lender still see a credit file when a lock is active?
In most cases it cannot, which is the purpose of the lock. The exact exceptions depend on the provider's terms. Creditors servicing an account the consumer already holds generally retain access to the account information they already report.
Does a credit lock stop identity theft?
A lock restricts one pathway — pulling a credit report to open new credit. It does not stop a thief from misusing an existing account, filing a fraudulent tax return, or using stolen data outside the credit system. Fraud alerts and identity theft report blocking under FCRA section 605B are separate tools, and IdentityTheft.gov is the federal reporting site.