How to Freeze Your Credit for Free in 2026
A credit freeze is one of the simplest no-cost steps a U.S. consumer can take to make new-account identity theft harder. You place a separate freeze with Equifax, Experian, and TransUnion. The freeze stays until you lift it, does not lower your credit score, and can be lifted temporarily when you legitimately apply for credit.
This guide shows exactly what to do, what a freeze does not protect, how to handle an application while your files are frozen, and what to do if fraud has already happened. These are U.S.-only credit and legal steps. Rules and procedures can differ in other countries.
Important: A freeze is a defensive barrier, not a complete identity-theft solution. It does not close existing accounts, stop takeover of an account you already own, prevent every type of fraud, or replace a response through IdentityTheft.gov when misuse has occurred.
TL;DR
- Go directly to the official freeze pages for Equifax, Experian, and TransUnion, and request a freeze from each bureau. Freezes are free to place, lift, and remove.
- Save each confirmation, login, PIN, or other recovery information in a secure password manager. Do not pay a third party to “activate” a freeze.
- Before applying for credit, ask the lender which bureau it will check. Temporarily lift only the needed freeze, for the needed period, then confirm that it is back on.
- If you see an account or inquiry you did not make, freeze your files and start the FTC’s recovery process at IdentityTheft.gov. A freeze alone will not repair existing fraud.
Table of contents
- What a credit freeze does
- Before you start
- How to freeze all three credit reports
- How to use credit while frozen
- What a freeze does not stop
- Freezes for children and other protected consumers
- If identity theft already happened
- Mistakes to avoid
- Frequently asked questions
- A simple maintenance routine
What a credit freeze does
A credit freeze, also called a security freeze, restricts prospective creditors from accessing your credit file. That makes it harder for an identity thief to open a new credit card, loan, or other account that depends on a credit check. The CFPB explains that a freeze can also block you from opening an account until you lift it, because a creditor typically will not approve new credit without access to the relevant file. See the CFPB explanation of security freezes.
A freeze is free under U.S. federal law at the three nationwide credit reporting companies. It does not affect your credit score. It also does not prevent you from requesting or reviewing your own credit reports. The FTC says you can place a freeze at any time, even if you have no reason to believe your information was exposed or misused; you do not have to wait for a data-breach notice. Read the FTC’s guide to credit freezes and fraud alerts.
The word “freeze” can be confusing because your current accounts continue to work. A freeze is about access to your credit file for new credit decisions. It is not a lock on your bank account, debit card, tax account, or existing credit-card login. Keep using ordinary account-security measures alongside it.
A freeze is also different from a fraud alert. A fraud alert asks businesses to verify your identity before opening new credit but does not block access to your file. An initial fraud alert normally lasts one year and can be placed through one bureau, which must notify the other two. A freeze is usually the more direct choice when your goal is to block new-credit access, while an alert can be useful after suspected identity theft or when you want an extra verification signal.
A neutral next step: If you are building a broader protection plan, browse the Identity Theft Protection category or take the SecureThreats privacy and security quiz. Both are educational starting points, not substitutes for an official bureau or government action.
Before you start
Set aside enough time to complete three separate requests. You may be asked to verify personal information, create an account, or answer identity-verification questions. Use a private connection and type each bureau’s address yourself or use the official links above. Search ads and lookalike websites can lead to paid monitoring pages instead of the free freeze request.
Have a safe place ready for confirmation details. Depending on the bureau and the channel you use, you may receive an account credential, PIN, or instructions for managing the freeze. Save the details immediately. A freeze is useful only if you can later lift it when a legitimate lender needs to see your file.
You do not need to buy credit monitoring before freezing your files. You do not need a paid identity-protection subscription to request the freeze. If a page asks for payment to place, temporarily lift, or remove a freeze at one of the three nationwide bureaus, stop and verify that you are on the official site.
Quick preparation checklist
| Before requesting a freeze | What to do |
|---|---|
| Use official channels | Start from the bureau links in this guide or IdentityTheft.gov’s credit bureau contacts. |
| Protect account access | Use a unique password and turn on multifactor authentication if the bureau offers it. |
| Save recovery details | Store confirmations, usernames, PINs, and the date of the request securely. |
| Expect three requests | A freeze with one bureau does not automatically freeze the other two. |
| Keep your records | Note which bureau was frozen and how you would request a temporary lift. |
How to freeze all three credit reports
1. Freeze Equifax
Open Equifax’s official credit freeze page, follow the identity-verification prompts, and complete the request. Review the confirmation before closing the page. Save any credentials or reference information it provides.
2. Freeze Experian
Use Experian’s official freeze center. Choose the option to place a security freeze, complete the requested verification, and save the confirmation. Be alert for offers for paid monitoring during or after the process; those offers are separate from the free freeze.
3. Freeze TransUnion
Use TransUnion’s official credit-freeze page. Complete the request and save the instructions for managing the freeze. If you prefer a different channel, IdentityTheft.gov lists the nationwide bureaus and explains that consumers can contact all three for free freezes.
The FTC’s process summary is simple: contact all three bureaus. Do not assume that freezing one report protects the other two. A lender may use a different bureau, and a thief may try several applications.
What success looks like
You should have three distinct confirmations or account records. Make a private note of the date, the bureau, and the way to manage each freeze. If a confirmation is missing, do not repeatedly submit requests without checking your account first. Look for the bureau’s support or status option and keep screenshots only in a secure location that does not expose sensitive information.
Under federal timing rules summarized by the CFPB, a nationwide credit reporting company generally must place a freeze within one business day when the request is made by telephone or secure electronic means, and within three business days after receiving a mailed request. It must send written confirmation no later than five business days after the freeze is placed. Electronic requests are usually the practical choice, but keep the confirmation rather than relying on memory.
Example: Jordan receives a breach notice and freezes only TransUnion because the first search result seems convenient. Two weeks later, a fraudster applies with a lender that checks Equifax. Jordan’s partial step was not useless, but it left two files open. The safer routine is to treat the three bureaus as three required checkboxes.
How to use credit while frozen
A freeze does not mean you can never get a mortgage, apartment, car loan, credit card, or job-related screening. It means you must plan access to the relevant report. Before submitting an application, ask the business which credit reporting company it expects to use. The answer may vary by lender and product, so do not guess.
Request a temporary lift from the bureau the lender will use. You can specify a period for the lift or, where available, remove the freeze and replace it after the application. The FTC recommends lifting only the freeze that the lender needs when you can identify it. The CFPB says a telephone or secure-electronic request to temporarily lift a freeze must generally be completed within one hour; a mailed request can take up to three business days.
Keep the window as narrow as practical. If the lender says it needs access on Tuesday, a Tuesday-only lift may be preferable to leaving the file open for weeks. Ask the lender whether it needs to check more than one bureau, and restore every lifted freeze as soon as the credit-check need has passed.
A frozen file can also affect applications that are not ordinary credit-card applications. The CFPB notes that federal free-freeze rules do not apply in the same way to requests for employment, tenant screening, or insurance purposes. That does not mean every application will fail, but it does mean you should ask the organization what report it needs and whether your freeze must be lifted.
Lift decision table
| Situation | Safer action |
|---|---|
| You are not applying for anything | Keep all three freezes in place. |
| A lender names one bureau | Temporarily lift that bureau only, for a defined period if possible. |
| A lender will check multiple bureaus | Ask which ones and lift only those; record the end date. |
| A lender cannot tell you which bureau it uses | Ask for the application team or credit department before lifting all three. |
| The application is complete | Confirm the check is finished and restore every freeze you lifted. |
| You receive an unexpected “lift now” request | Verify independently with the lender; do not use a link in an unsolicited message. |
Example: Priya is shopping for a car loan. The dealership says it may pull Experian and TransUnion. Priya asks whether both are required, lifts those two for a short period, keeps Equifax frozen, and restores the two freezes after the lender confirms the application is complete. She does not send a freeze PIN to the salesperson by text; she manages the lift herself through the bureau’s official site.
What a freeze does not stop
A freeze mainly addresses new-account fraud that depends on access to a credit file. It does not stop every kind of identity crime. Someone may still try to take over an existing email, bank, phone, or credit-card account. A thief may use stolen information for tax fraud, benefits fraud, medical identity theft, employment fraud, scams, or purchases that do not require a traditional credit check.
A freeze does not automatically reveal fraud that already happened. Review your credit reports and existing account statements. Look for unfamiliar accounts, hard inquiries, collection notices, address changes, or payment activity. Contact the business through a verified number, not one supplied in a suspicious message.
A freeze does not block legitimate access by every possible party. The CFPB notes that some existing creditors, certain government entities, and companies you hired to monitor your file may still have limited access. It also does not erase accurate information or repair a damaged report. If information is inaccurate, use the dispute process described by the relevant bureau and the business that supplied the information.
A freeze is not a promise that you are anonymous online. It will not stop phishing, malware, social engineering, or a scammer who convinces you to hand over a one-time code. A VPN can have privacy uses, but it does not stop phishing or make you anonymous. Treat unexpected calls, texts, and login prompts as separate security problems.
For a practical companion on account warning signs, see Identity Theft Warning Signs. If your concern began with a known breach, After a Data Breach can help you organize the next steps. Those links are educational; the official bureaus and IdentityTheft.gov remain the places to take action.
Freezes for children and other protected consumers
A child can have an identity-theft risk even when they have never applied for credit. The FTC says parents or authorized representatives can request a free freeze for a child under 16, and the process is different from an adult request. Start with the official instructions from each bureau and be prepared to provide documents that establish your identity, your authority, and the child’s identity.
The CFPB describes “protected consumers” as including people under 16 and certain incapacitated people or people for whom a guardian has been appointed. If a bureau has no file for a protected consumer, it may create a record solely to freeze it; that record is not meant to be used for credit purposes.
Protecting a child should not become secret surveillance of every device or message. Use the minimum information and permissions needed for the freeze, explain age-appropriate privacy expectations, and consider the child’s device limitations. A credit freeze addresses the child’s credit file, not online safety, school systems, gaming accounts, or social-media impersonation.
If identity theft already happened
If you find an account, inquiry, bill, or other activity you did not authorize, freeze all three credit files first. Then go to IdentityTheft.gov, the FTC’s recovery service. It asks questions about the situation and can create a personal recovery plan. It can also help track steps and pre-fill forms and letters if you create an account.
Contact the affected company using contact information from its official website or your statement. Ask what its fraud department needs, request that the account be secured or closed as appropriate, and keep a dated record of each call, message, and document. Change passwords for affected accounts from a clean device and turn on multifactor authentication where available. If a phone account may be involved, contact your carrier through its official support channel.
Review all three credit reports for unfamiliar accounts and inquiries. You can request your reports through the official process at AnnualCreditReport.com. Dispute inaccurate information with the credit bureau and the business that furnished it. Keep copies of your dispute, supporting documents, and delivery confirmation.
An identity-theft report is not a sales lead. IdentityTheft.gov is the appropriate starting point for the FTC recovery plan. Depending on the facts, you may also need to contact your bank, card issuer, tax agency, insurer, employer, local police, or another government program. If money is at immediate risk, call the institution’s verified fraud number promptly.
Do not let a caller pressure you into removing your freeze “to investigate” a fraud alert. Legitimate investigators and financial institutions should not need you to hand over a password or one-time code. End the call and contact the organization independently.
Mistakes to avoid
Freezing only one bureau
A freeze is not a shared switch. Complete all three requests and keep three confirmations.
Using a sponsored search result without checking the address
Lookalike pages can lead to paid monitoring, phishing, or unnecessary disclosures. Use the bureau links in this guide or the official IdentityTheft.gov contact page.
Paying for a free action
Credit freezes and lifts are free. Paid monitoring may be an optional service, but it is not a prerequisite. Freeze first; consider any paid service separately and only if it matches a need you understand.
Losing the management details
A freeze that you cannot manage can delay a legitimate application. Store each bureau’s recovery information securely, and keep your contact information current.
Lifting every freeze indefinitely
Ask which bureau the lender will use. Use the smallest practical window, then put the freeze back.
Treating a freeze as a complete response
A freeze will not close an existing fraudulent account or remove a bad record. Use IdentityTheft.gov and contact affected businesses when misuse has occurred.
Sharing credentials with a supposed helper
No lender, bureau representative, or government agent should need your password, PIN, or one-time authentication code sent through an unsolicited message. Manage the freeze yourself through an official channel.
Assuming a freeze stops phishing
A thief can still trick you into revealing credentials or codes. Keep using unique passwords, multifactor authentication, software updates, and careful verification of unexpected requests.
Frequently asked questions
What is a credit freeze?
A credit freeze, or security freeze, limits prospective creditors’ access to your credit file. It makes new-account identity theft harder, but it does not lock your existing bank or credit accounts. See What a credit freeze does.
How much does it cost to freeze your credit?
It costs nothing to freeze, temporarily lift, or remove your files at Equifax, Experian, and TransUnion. A paid monitoring offer is separate and is not required.
Do I need to freeze my credit with all three bureaus?
Yes. Submit a separate request to each nationwide bureau. Freezing one does not automatically freeze the others.
Does a credit freeze lower my credit score?
No. A freeze does not change your score. It can, however, prevent a new-credit application from being completed until the relevant freeze is lifted.
How long does a credit freeze last?
For an adult, it generally stays in place until you ask the bureau to lift it temporarily or remove it. Keep the management details so you can change it when needed.
How do I apply for credit while my credit is frozen?
Ask the lender which bureau it will check. Temporarily lift that bureau for a defined period if possible, then restore the freeze after the lender confirms its check is complete.
Can I freeze my child’s credit?
Yes. A parent or authorized representative can request a free freeze for a child under 16. The bureau will use a protected-consumer process and may require documents proving identity and authority.
What should I do if someone already used my identity?
Freeze all three files, review your reports, contact affected businesses, and use IdentityTheft.gov for a tailored recovery plan. A freeze helps prevent some new-account misuse but does not undo existing fraud.
A simple maintenance routine
Once the three freezes are in place, maintenance should be occasional. Store the confirmations securely. Review your reports and account statements periodically, and check for unexpected inquiries, accounts, addresses, or collection activity. Consider putting a calendar reminder on your own device to review your records, but do not leave sensitive freeze credentials in an exposed calendar note.
Before a planned loan, rental application, insurance application, or other screening, ask the organization what it needs and which bureau it will use. Lift only what is necessary, for only as long as necessary, and restore the freeze afterward. If you do not recognize an application or request to lift a freeze, verify it independently.
Credit freezing is a strong free baseline for U.S. consumers. It works best as one layer in a larger routine that includes account security, report review, scam awareness, and a government recovery plan when identity theft is suspected.
Keep going at your pace: Visit the identity-theft protection category, take the security quiz, or read After a Data Breach for adjacent steps. SecureThreats provides general education, not legal, financial, or identity-restoration advice.