Three Tools, Often Confused
If you’re trying to protect yourself after a data breach or broker exposure, you’ll run into three similar-sounding options: credit freeze, credit lock, and fraud alert. They all restrict access to your credit file in some way, but they work differently, and knowing which one fits your situation matters.
Credit Freeze
A credit freeze is a free, federally guaranteed right under the Fair Credit Reporting Act. It restricts access to your credit report entirely, meaning lenders can’t view it to open new credit in your name, which is exactly why it’s the strongest tool against new-account identity theft. You freeze and unfreeze (temporarily or permanently) directly with each of the three bureaus, Equifax, Experian, and TransUnion, and by law they must lift a freeze within one hour of an online or phone request. Freezing your credit doesn’t affect your credit score and doesn’t stop you from using existing credit cards or accounts.
Credit Lock
A credit lock does functionally the same thing as a freeze, restricting access to your report, but it’s a proprietary product each bureau offers (often bundled into a paid monitoring service) rather than a federally mandated right. Locks are typically faster to toggle on and off via an app, which is the main convenience advantage, but they come with fewer legal guarantees than a freeze and are sometimes bundled with a subscription fee. For most people, a free freeze provides the same core protection without the cost.
Fraud Alert
A fraud alert doesn’t block access to your credit report the way a freeze or lock does. Instead, it requires lenders to take extra verification steps before approving new credit in your name. A standard fraud alert lasts one year and is free; you only need to place it with one bureau, which is required to notify the other two. An extended fraud alert (for confirmed identity theft victims, requires an FTC identity theft report) lasts seven years. Fraud alerts are a lighter-touch option, useful if you want lenders to double-check without fully blocking access.
Which One Should You Use?
- If you want maximum protection against new-account fraud: a credit freeze at all three bureaus. It’s free, federally guaranteed, and the strongest available option.
- If you frequently apply for credit and want faster toggling: a credit lock might be worth the convenience, but check whether it comes with a fee and understand it has fewer legal guarantees than a freeze.
- If you want a lighter-touch option, or you’re an active-duty service member (who can request a free extended alert specifically for deployment situations): a fraud alert.
- You can combine them. A freeze plus a fraud alert isn’t redundant, the alert adds an extra verification layer at the one bureau you place it with, on top of the freeze’s blanket restriction.
How This Connects to Data Broker Exposure
None of these three tools remove your information from people-search sites like Spokeo or Whitepages, they protect your credit file specifically, not your broader public exposure. If your goal is reducing the odds of both new-account fraud and having your home address publicly searchable, a credit freeze plus data broker opt-outs (or a removal service) covers both angles. See our identity theft vs. data broker exposure guide for how these two protection categories work together, and our comparison of Incogni, DeleteMe, Optery, and Aura for the broker-removal side.
The Bottom Line
A credit freeze is free, strong, and federally guaranteed, making it the right default for most people. A credit lock trades some legal protection for app-based convenience. A fraud alert is lighter and easier to set up if you don’t want to fully restrict access. None of them substitute for cleaning up your data broker exposure separately, they solve a related but different problem.
