How do you freeze your credit?

A credit freeze (security freeze) locks your credit file at each bureau so new creditors can't pull your report — which prevents fraudsters from opening accounts in your name. Under federal law it's free and permanent until you lift it. You must freeze separately at Equifax, Experian, and TransUnion — it takes about 15 minutes online at each bureau.

What a credit freeze does — and doesn't do

A security freeze tells Equifax, Experian, and TransUnion not to release your credit report to new creditors. Because most lenders require a credit pull to open an account, a freeze effectively blocks new credit accounts from being opened in your name without your explicit permission. The Economic Growth, Regulatory Relief, and Consumer Protection Act of 2018 made credit freezes free for all consumers and permanent until removed — per the CFPB. A freeze does not affect your existing credit accounts, your credit score, your ability to use existing cards, or your existing lenders' ability to review your account. It also does not prevent employers, landlords, or insurance companies from pulling your report (they use different inquiry types).

How to place a freeze at each bureau

You must freeze your file separately at all three bureaus — a freeze at one does not extend to the others. Online is the fastest method:

How to temporarily lift a freeze when you need to apply for credit

When you're ready to apply for a loan, credit card, or apartment, you lift (thaw) your freeze through the same portal where you set it up. You can lift it permanently or for a specific time window (e.g., 7 days while you're rate-shopping for a mortgage). The bureau must lift the freeze within 1 hour for online or phone requests under federal law. Once the application is complete, re-freeze. Keep your PIN or login credentials for each bureau — you'll need them to manage the freeze.

Freeze vs. fraud alert — which one to use

A fraud alert is a less restrictive option: it doesn't block credit pulls, but it requires lenders to take extra verification steps before opening an account. An initial fraud alert lasts 1 year (free); an extended fraud alert (for confirmed identity theft victims) lasts 7 years and requires a copy of an FTC identity theft report. Per the FTC, placing a fraud alert at one bureau requires that bureau to notify the other two — so you only need to contact one bureau for a fraud alert, unlike a freeze which requires all three. For maximum protection, a freeze at all three bureaus is stronger than a fraud alert alone.

Sources

Key takeaways

Related