Of everything on this site, this is the one measure that blocks the worst outcome outright rather than merely detecting it. It is free by federal law. It takes maybe twenty minutes total. And most people have not done it, largely because of objections that stopped being true years ago. This guide covers the United States system; other countries handle credit differently.
What a freeze actually does
The most damaging form of identity theft is not someone using your existing card, which the bank usually catches and refunds. It is someone opening new credit in your name: a loan, a card, a financed phone, using your name, date of birth, and Social Security number, the permanent data that no password change ever fixes. You typically learn about it months later, when collection letters arrive for debts you never knew existed.
Every one of those account openings has a single chokepoint: the lender pulls your credit file before approving. A security freeze locks that file. Lender asks, bureau says no, application dies, regardless of how much of your data the applicant holds. The thief is left holding a perfect costume of you in front of a door that will not open for anyone.
What a freeze does not do is also worth a sentence: it does not touch your existing accounts, your credit score, or your ability to use the cards in your wallet. It only stops new files from being pulled.
The objections, revisited
"It costs money." It did once. Federal law made freezing and unfreezing free at all bureaus in 2018. Anyone charging you for a "freeze" is selling you something else.
"It is a hassle when I need credit." This was the fair objection in the era of certified mail and ten-day waits. Today you unfreeze online or in the bureau's app, in minutes, and you can lift the freeze temporarily, for a date range or for a specific lender, and it refreezes itself when the window closes. If you know Tuesday you are financing a car Saturday, the whole accommodation is a two-minute task.
"I will not remember I froze it." You will, because the failure mode is gentle: a lender says "we cannot pull your file," you remember, you unfreeze from your phone in the parking lot, and the application proceeds.
Freeze versus the sound-alikes
Three products share this shelf and only one is the real thing. A security freeze is your statutory right, free, with legal force. A credit lock is the bureaus' proprietary app-based product that does roughly the same thing, sometimes bundled into paid subscriptions with fewer legal guarantees; the polite reading is convenience packaging, the accurate reading is that it monetizes your not knowing the freeze exists. A fraud alert merely asks lenders to verify harder, and is the tool for temporary suspicion, not standing protection. When in doubt, the free statutory freeze is the one to want.
- Create an account at each of the three bureaus: Equifax, Experian, and TransUnion. A freeze at one does nothing about the other two; all three or it is not done.
- Freeze your file at each. Online, roughly five minutes apiece.
- Store the PINs or credentials in your password manager. The only real inconvenience a freeze can cause is losing access to your own bureau accounts.
- Parents: you can request that bureaus create and freeze files for your minor children. Child identity theft is slow-burning precisely because nobody checks a nine-year-old's credit for a decade. Same freeze, longer protection.
Who should actually do this
The honest answer is nearly everyone, with one carve-out: if you are actively shopping for credit right now, applying for mortgages or cards this month, wait until the applications settle. Everyone else, and especially anyone whose scan results show a Social Security number, date of birth, or home address in circulation, gets more protection from this one free action than from any subscription on the market. That comparison is the subject of the next guide.
Was your permanent data in a breach?
Our free scan shows which known breaches contain your email and whether birth dates, phone numbers, or addresses were taken alongside it.
Run the Free Breach Scan →