Credit Lock vs. Security Freeze: Which One Actually Protects You? (2026) | UpTrendCredit
🗓 Updated July 2026

Credit Lock vs. Security Freeze: Which One Actually Protects You in 2026?

Short answer: A security freeze is free federal law at all three bureaus, with real legal remedies if a bureau gets it wrong. A credit lock is a company's own product, faster to toggle, but governed by its terms of service, not statute. TransUnion discontinued its own lock entirely in 2025. That should tell you something.
Advertiser Disclosure: This article contains an affiliate link to Aura. If you enroll through it, UpTrendCredit may earn a commission at no added cost to you.
Elizabeth C. Mitchell
Elizabeth C. Mitchell — Contributing Editor, UpTrendCredit
Credit bureau compliance & identity protection · Education only, not financial advice
📊 Sources: CFPB, FTC, TransUnion, USA.gov
✅ Verified July 2026

11:23 a.m., and a breach notification just landed in your inbox. Your first instinct is to lock everything down. But "lock" and "freeze" get used like they're the same word, and they're not.

One is a right guaranteed by federal law. The other is a feature a company built, controls, and can shut down whenever it wants. TransUnion actually did exactly that in 2025.

Here's what each one really does, what neither one covers, and which to reach for first.

⚡ Key Takeaways

  • A security freeze is federal law. Free at Equifax, Experian, and TransUnion, with legal remedies if a bureau mishandles it.
  • A credit lock is a company's own product. Faster to toggle, but governed by terms of service, sometimes with mandatory arbitration.
  • TransUnion discontinued its credit lock entirely in 2025. It now redirects everyone to a free freeze instead.
  • Neither one watches for dark web exposure or SSN misuse. They only block new accounts from opening.
  • The CFPB has stated locks are no more effective than freezes, which are free by law.

The Real Difference: Law vs. Company Policy

A security freeze exists because of federal law. The Economic Growth, Regulatory Relief, and Consumer Protection Act made freezes free nationwide in 2018, and the Fair Credit Reporting Act backs your rights if a bureau gets it wrong.

A credit lock is a product a bureau built on top of that same idea, governed by its own terms of service instead of a statute. The bureau can change the rules, add fees, or cancel the feature outright, and often does.

Why this matters in a real dispute: If a frozen file gets breached through bureau negligence, you can pursue statutory damages under the FCRA. If a locked file gets breached, your options are whatever the company's contract allows, which sometimes means arbitration only.

Both block lenders from pulling your report to open new credit. That part really is identical. Everything else, cost, speed, legal backing, is where they split.

Credit Lock vs. Security Freeze Compared

FeatureSecurity FreezeCredit Lock
Legal basisFederal law (FCRA)Company terms of service
CostFree at all 3 bureausFree (Equifax) to $24.99/mo (Experian)
Speed to liftWithin 1 hour online, by lawInstant app toggle
Legal remedy if mishandledFCRA statutory damagesContract terms, often arbitration only
Covers minors/incapacitated adultsYes, protected consumer freezeNot generally supported
TransUnion availabilityYes, freeDiscontinued in 2025

Terms vary by bureau and change often. Confirm current fees and features directly with each bureau before choosing.

A Freeze Blocks New Accounts — It Doesn't Watch Everything Else

  • ✔ Dark Web Monitoring:Get alerted if your SSN shows up where it shouldn't.
  • ✔ Real Insurance:Up to $1M per adult, AIG-backed, if fraud does happen.
  • ✔ One Dashboard:Freeze status, credit monitoring, and alerts together.
See Aura's Current Pricing →

Why TransUnion Killed Its Own Lock

In 2025, TransUnion discontinued its credit lock feature entirely, shutting down the legacy products that carried it, including TrueIdentity. It now points every user toward a free security freeze instead.

That's not a marketing decision dressed up as consumer-friendly. When the company selling a product stops selling it, that's information. A federal right can't be discontinued by a business decision. A company feature can.

The lesson here is structural, not personal. Nothing was wrong with TransUnion's lock specifically. The problem is that any lock, from any bureau, is subject to this same risk by design.

When a Lock Actually Makes Sense

A lock still earns its place for one real reason: speed. If you apply for credit often, rental applications, card churning, frequent auto loan shopping, toggling instantly beats waiting even an hour.

The smartest approach most consumer advocates recommend is a hybrid. Place a freeze as your permanent baseline, then add a lock only where the bureau still offers one, purely for convenience on top of it.

Practical setup: Freeze at all three bureaus first. Add Equifax's free Lock & Alert on top if you want instant toggling there specifically. Skip paying for a lock anywhere else.

What Neither One Covers

A freeze or lock only does one job: stop a lender from pulling your report to open new credit. Neither one watches the dark web for your Social Security number. Neither one flags synthetic identity theft, where a thief pairs your real SSN with a fake name.

That gap is exactly where identity monitoring services fit in. Aura tracks dark web exposure and SSN misuse continuously, the kind of activity a freeze was never designed to catch.

Identity theft insurance through Aura is underwritten by insurance company subsidiaries or affiliates of American International Group, Inc. and subject to policy terms. See halo.aura.com/insurance for full details.

How to Freeze Your Credit at All Three Bureaus

  1. Equifax: equifax.com/personal/credit-report-services/credit-freeze, or call 1-888-378-4329.
  2. Experian: experian.com/freeze, or call 1-888-397-3742.
  3. TransUnion: the TransUnion Service Center, or call 800-916-8800.
  4. Save your PIN or password for each bureau somewhere secure. You'll need it to lift the freeze later.
You must freeze all three separately. Freezing one bureau doesn't freeze the others. Lenders can and do check any of the three.
Skip the manual toggle: TransUnion lets you schedule a temporary lift up to 15 days in advance, for exactly as long as you need. Set it once for a mortgage closing and forget it.

Who Can Still See Your Report, Frozen or Not

A freeze or lock isn't an absolute wall. A few exceptions still get through, and most articles never mention them.

  • You. You can always pull your own report, frozen or not.
  • Your existing creditors. A card issuer you already have can still review your file, often to decide on a credit limit increase.
  • Insurance underwriters. Some insurers can still check your file for underwriting purposes even while it's frozen.
  • Prescreened credit offers. Those "you're pre-approved" mailers keep coming unless you opt out separately at optoutprescreen.com.
Two separate opt-outs, not one. Freezing your credit and opting out of prescreened offers are different actions. Do both if you want to stop the mailers too.

The Third Option Nobody Mentions: Fraud Alerts

A fraud alert is different from both a freeze and a lock, and most comparisons skip it entirely. It doesn't block access. It requires lenders to verify your identity before approving new credit.

A standard fraud alert lasts one year and is free at any single bureau, which then notifies the other two. Confirmed identity theft victims can request an extended seven-year alert with a police report.

Why this matters as a layer, not a replacement: A fraud alert is lighter than a freeze. It's a reasonable starting point if you're not ready to freeze everything, but it verifies rather than blocks, so it's weaker protection overall.

None of These Tools Watch the Dark Web for You

A freeze, lock, or fraud alert all stop new accounts. Aura watches for SSN leaks and dark web exposure around the clock, the gap none of them cover.

See Aura's Current Pricing →

Buying a House With a Frozen Credit File

This is where a freeze bites people who forgot they even had one. A mortgage lender needs a tri-merge report, all three bureaus pulled together, so a freeze at even one blocks the whole application.

Expect to unfreeze twice, not once. The first lift happens at application. The second happens days before closing, when your lender re-pulls your file to confirm nothing changed during underwriting.

The quiet period is the trap. Between your first pull and closing, usually 45 to 60 days, lenders watch for new debt. Re-freezing too early can force a second unfreeze request and delay closing by a week or more.

Shopping multiple lenders while thawed is safe for your score. Inquiries from the same loan type within a 14-day window count as a single hard pull, not several.

Timing that actually works: Unfreeze a few days before applying, stay unfrozen through the quiet period, then refreeze right after closing, when fraudsters specifically target new homeowners.

Common Mistakes

Mistake 1Freezing only one bureau. A lender can pull whichever bureau still has an open file.
Mistake 2Paying for a lock when a freeze does the same job for free. Save the subscription fee unless speed genuinely matters to you.
Mistake 3Losing your freeze PIN. Store it in a password manager. Losing it can delay lifting the freeze when you actually need credit.
Mistake 4Assuming a freeze watches for fraud elsewhere. It only blocks new accounts. It won't flag dark web exposure or existing account misuse.
Mistake 5Refreezing before closing fully completes. Lenders often need one more look right before funding. Wait until you have keys, not just a closing date.

Bottom Line

A security freeze is free, backed by federal law, and the strongest default protection available. A credit lock trades some of that legal backing for speed, and at least one major bureau has already walked away from offering it at all.

Freeze first. Add a lock only where it's free and speed genuinely matters. Layer on monitoring for everything a freeze was never built to catch.

Every Day Without a Freeze Is a Day Your File Sits Open

Placing a freeze takes minutes. Recovering from a fraudulent account opened while you waited takes months.

Add Monitoring for the Gap a Freeze Leaves →

Frequently Asked Questions

PAAWill a freeze stop the "you're pre-approved" mail I get?

No. A freeze and opting out of prescreened offers are two separate actions. Freeze your credit at all three bureaus, then opt out separately at optoutprescreen.com to stop the mailers too.

PAADoes a credit freeze hurt my credit score?

No. Placing or lifting a freeze has no effect on your credit score. It only restricts who can view your report.

PAACan I freeze my child's credit?

Yes, through a protected consumer freeze, available for minors and incapacitated adults. A credit lock generally doesn't support this option, which is one more reason a freeze is the stronger default for family protection.

PAAWhy did TransUnion get rid of its credit lock?

TransUnion discontinued its credit lock feature in 2025 and now directs users to a free security freeze instead. The company didn't publicly detail its reasoning, but it underscores that a lock is a business feature, not a guaranteed right.

PAADidn't credit freezes used to cost money?

Yes, before 2018. Some states charged $3 to $10 per freeze back then. Federal law made freezes free nationwide in 2018, so that cost no longer applies anywhere.

PAADo I need to unfreeze my credit for a mortgage?

Yes, at all three bureaus, since lenders pull a combined tri-merge report. Expect to unfreeze twice: once at application, and again days before closing for a final check.

PAAIs a credit lock ever worth paying for?

Rarely. Equifax's Lock & Alert is free and instant. Experian charges roughly $24.99 a month for the same basic function a freeze already provides for free.

PAADo I need to freeze my credit at all five agencies, not just three?

The three major bureaus, Equifax, Experian, and TransUnion, cover most lender checks. Some experts also recommend freezing at Innovis, NCTUE, and ChexSystems for more complete coverage against niche lenders and specialty reporting.

PAAWhat's the difference between a fraud alert and a security freeze?

A fraud alert requires lenders to verify your identity before approving credit; it doesn't block access. A freeze blocks access outright. A freeze is stronger protection, but a fraud alert is a lighter option if you're not ready to freeze everything.

PAAWill freezing my credit stop identity theft completely?

No. A freeze only blocks new account fraud. It won't catch dark web exposure, existing account takeover, or synthetic identity theft, which is why monitoring services fill a different gap.

Elizabeth C. Mitchell

Elizabeth C. Mitchell

Contributing Editor, UpTrendCredit.com
Credit Bureau Compliance Identity Protection 8 Yrs Experience

Eight years working directly with credit bureau dispute and security-freeze processes, including time on the consumer-data compliance side of a major credit reporting agency. Not a licensed attorney or financial advisor; this article is education, not legal, tax, or personalized financial advice.

Disclaimer: UpTrendCredit is not a law firm, financial advisory firm, or credit repair organization. This information is educational only, not legal, tax, or financial advice. Bureau policies and fees change frequently — verify current details directly with each bureau before acting. Some links on this page are affiliate links, including to Aura; we may earn a commission if you enroll through them, at no additional cost to you.