What's the Actual Difference Between a Credit Freeze and a Credit Lock?
After hearing about a data breach somewhere, the advice to “freeze your credit” starts showing up everywhere, but so does a similarly named option to “lock” it through an app. They sound like the same thing, and functionally they’re close, but the fine print between them is worth understanding before choosing one.
The short answer
A credit freeze is a right established under federal law that restricts new access to a credit report, is free to place and remove at any of the three major credit bureaus, and generally takes effect quickly but sometimes requires a short waiting period to lift. A credit lock is a similar concept offered as a product feature, often through a bureau’s app or a paid credit monitoring service, and while it’s usually faster and more convenient to toggle, it isn’t backed by the same statutory guarantees a freeze carries.
What a credit freeze actually does
A freeze restricts a credit bureau from releasing a credit report to a new lender or creditor without the individual’s explicit permission, which makes it much harder for someone to open new credit in that person’s name. Because federal law guarantees the right to freeze and unfreeze credit for free, every consumer can place one directly with each of the three major bureaus without paying anything, regardless of what other services they do or don’t subscribe to. Removing a freeze temporarily, sometimes called a thaw, is also a protected right, though the exact process and timing depend on the bureau.
What a credit lock typically offers
A lock generally does something similar in practice — restricting third-party access to a credit report — but it’s offered as a feature of a bureau’s own consumer product rather than as a legally mandated right. Locks are often marketed as more convenient, frequently toggled instantly through a mobile app rather than requiring a formal request. That convenience is real, but it comes from a business relationship with the bureau rather than from the same legal framework backing a freeze, which is an important distinction if a dispute or access issue ever comes up.
Key differences worth knowing
- Cost structure. A freeze is free at every major bureau, by law. A lock may be free at some bureaus and bundled into a paid subscription tier at others, depending on the specific service.
- Legal backing. A freeze exists as a statutory right; a lock exists as a contractual feature governed by that service’s terms of use, which can change.
- Speed to toggle. Locks are often designed for faster app-based toggling, while freezes can sometimes take longer to lift, particularly if done by mail or phone rather than online.
- What’s actually restricted. Both generally block new-credit-related access, but the specific terms of what a lock does and doesn’t cover can vary between providers in ways a freeze’s legal standard doesn’t.
How this fits into broader credit protection
A freeze or lock is one layer of protection, but it doesn’t replace other credit monitoring habits, like periodically checking the difference between a credit score and a credit report to understand what’s actually being restricted. Neither tool prevents someone from misusing an already-open account, which is a separate risk from opening new accounts in someone’s name — that’s part of why freezing credit is often recommended alongside other steps after something like a fake cashier’s check scam or any situation where personal information may have been exposed.
Worth remembering
Both tools aim at the same underlying goal, but a freeze carries a legal guarantee of being free and reversible that a lock doesn’t automatically carry. Anyone deciding between the two is generally weighing convenience against knowing exactly which legal protections apply, and reading the specific bureau’s terms before choosing is worth the few extra minutes it takes. It’s a separate question from why a hard inquiry might appear without any new account ever opening, which involves a different kind of credit report activity entirely, but the two are easy to conflate when someone is first reviewing their report for unfamiliar entries.