A credit freeze (security freeze) blocks most new creditors from pulling your Equifax, Experian, or TransUnion file until you lift it. Freezes are free under federal rules. They are one of the highest-leverage habits after a breach or whenever you are not shopping for credit.
This guide is the calm how-to: place, thaw for a real application, re-freeze. For freeze vs fraud-alert tradeoffs, see Credit freezes and fraud alerts.
What a freeze does
| Freeze on | Typical effect |
|---|---|
| New credit cards, loans, many store plans | Hard pulls that need a full file are blocked until you thaw |
| You pulling your own reports / many soft checks | Usually still allowed |
| Existing creditors managing your accounts | Generally still see what they need |
| Employers or landlords (varies) | Some use different products; ask which bureau and whether a freeze blocks them |
A freeze does not cancel cards, stop charges on accounts someone already opened, or replace passwords and SSN hygiene. After a breach, pair it with account-takeover steps.
Place freezes at all three (one sitting)
Use each bureau’s official freeze page or phone channel (bookmark from the bureau site, not a random ad):
- Equifax security freeze
- Experian security freeze
- TransUnion security freeze
Save PINs or login credentials in a password manager. If you lose a PIN later, recover access without a permanent lift: Lost credit freeze PIN. Freezing only one bureau leaves a path open at the other two. Confirm success messages and dates.
While you are in the file mindset, pull free reports via AnnualCreditReport.com on a schedule so you catch accounts you did not open.
Worked example
After a retailer password dump, Omar freezes Equifax, Experian, and TransUnion the same evening. Two weeks later he wants a local credit-union auto loan. He asks the loan officer which bureaus they pull (they use Experian + Equifax). The morning of the appointment he thaws those two for three days via the bureau portals, applies once (hard vs soft checks), then re-freezes that night. TransUnion stayed frozen the whole time because the credit union did not need it.
Unfreeze without chaos
- Ask the lender which bureaus and which day they will pull.
- Thaw only those bureaus, preferably with a short time-boxed lift (many portals allow a date range).
- Apply once you confirm the thaw is active—not three days early with extra shopping apps.
- Re-freeze the same day the pull completes.
- If an online store plan fails with “cannot access credit file,” thaw, retry once, re-freeze—do not leave everything open for a week of browsing.
Mobile apps from Equifax, Experian, and TransUnion can make lifts faster than mail. Avoid third-party “lock” upsells that duplicate a free freeze.
Panic mistakes to skip
- Paying for monthly monitoring as a substitute for a freeze you never placed
- Thawing all three indefinitely “just in case”
- Texting a PIN to a stranger who claims to be fraud support
- Assuming a freeze stops Internal Revenue Service, existing card fraud, or payday lenders that do not always use the big three the same way
If identity theft is already underway, follow Rebuild after identity theft and official FTC recovery steps alongside freezes. After travel with lost ID or documents, use the same-day sequence in Credit freeze after travel. Same-day card cancels and police-report steps when the wallet itself is gone: Stolen wallet financial checklist. For a child with an SSN at risk, use the bureau minor/protected-consumer process in Freeze credit for a minor.
If a card or loan you never opened already appears, pair the freeze with creditor fraud claims and bureau disputes: Fraudulent new accounts.
Checklist
- Freeze Equifax, Experian, and TransUnion; store PINs/logins.
- Pull free reports and note every open account.
- Before a real application, ask which bureaus the lender uses.
- Time-box the thaw; apply; re-freeze.
- Keep freezes on by default when you are not shopping.
- Pair with strong passwords, MFA, and SSN caution—not freeze alone.
Educational only. Not legal or fraud-resolution advice. Bureau procedures and lender pull practices change; use official channels.