Your Credit Is Wide Open
Most of the security advice people get is small. Use a better password. Don’t click the link. Turn on two-factor. All fine, all worth doing, and none of it stops the thing that actually wrecks people.
Here’s what actually wrecks people: someone takes your name, date of birth, and Social Security number — all of which are already out there, and I’ll come back to that — and opens a credit card in your name. Or a car loan. Or a phone plan. You find out months later when a collections notice shows up for an account you’ve never heard of. Then you spend the next year proving a negative to people who have no incentive to believe you.
There is a free, federally protected tool that stops this almost completely. It’s called a security freeze. It takes about thirty minutes to set up, it never expires, and it doesn’t cost anything or touch your credit score.
Hardly anyone has done it. Let’s fix that.
What a freeze actually does
When a lender pulls your credit to decide whether to approve a new account, they query one of the credit bureaus. A freeze tells the bureau: don’t hand my file to anyone new. The lender gets a block signal instead of a report, and since no lender is going to extend credit against a file they can’t see, the application dies right there.
That’s the whole mechanism. It’s not monitoring, it’s not an alert, it’s not a service that emails you after something bad has already happened. It’s a locked door.
A few things worth being clear about:
- It’s free. Free to place, free to lift, free to place again, unlimited times. Congress made it that way nationwide back in 2018. Anyone charging you for a freeze is selling you something else.
- It doesn’t affect your credit score. Not a point. The freeze isn’t a factor in scoring models at all.
- It doesn’t touch your existing accounts. Your cards keep working. Your mortgage servicer still reports. You can still pull your own reports. Employers doing background checks can generally still get what they need.
- It doesn’t expire. Set it once and it stays until you lift it.
What a freeze does not do
I want to be honest about the limits, because the security industry is not.
A freeze stops new accounts from being opened. It does nothing about fraud on the accounts you already have. If someone gets your card number, a freeze doesn’t help — that’s what your card issuer’s fraud protection is for.
It doesn’t stop tax refund fraud, medical identity theft, or someone using your SSN for employment. It doesn’t clean up data that’s already been breached. And it won’t stop a determined thief from trying — it just makes the attempt fail.
It’s not everything. It’s the single highest-value thing on the list, which is why it goes first. (The rest of that list lives on the guide page .)
Freeze is not the same as lock
The bureaus have made this part deliberately confusing, so here it is straight.
Every major bureau offers a “credit lock” alongside the freeze. The lock is a product. It’s often bundled into a paid monitoring subscription, it’s governed by whatever terms of service the bureau wrote, and they can change those terms whenever they want.
The freeze is a legal right. It’s defined in federal statute, it’s free by law, and the bureau doesn’t get to negotiate it.
They will steer you toward the lock anyway. The lock button will be bigger, friendlier, and easier to find. The freeze will be further down the page in smaller text.
Use the freeze. If you want to run a lock on top of it, that’s your call, but don’t accept one as a substitute for the other.
Actually freezing it
You have to do these separately. There’s no master switch — they’re independent companies and none of them talk to each other for this. A freeze at Equifax means nothing at Experian.
Type those domains in yourself. Don’t search for “credit freeze” and click the top result — that entire search page is bought up by monitoring services that want to sell you a subscription, and phishing in this space is exactly what you’d expect.
Have your SSN, date of birth, current address, and your previous addresses from the last couple of years ready. You’ll answer some knowledge-based verification questions — old car loans, old street names, that kind of thing. Each one takes five to ten minutes online and takes effect immediately.
If online verification fails at one of them, phone and mail both work as fallbacks. Get the number from the bureau’s own site, not from a search result.
Freeze your kids
Your children have credit files the moment someone opens one in their name, and a child’s SSN is the most valuable thing on the market — clean history, and nobody’s going to check it for eighteen years. By the time they apply for their first car loan, the damage is a decade old and nearly impossible to untangle.
You can freeze a minor’s credit as their parent or guardian, free, at all three bureaus. It’s more paperwork than freezing your own — you’ll need to mail in a copy of the birth certificate, your own ID, and proof you’re the guardian — so set aside an evening.
Nobody thinks to do this. Do it.
Store the PINs properly
Some bureaus issue a PIN when you place the freeze. Some give you an online account instead. Either way, that credential is the only thing standing between you and a phone call to customer service when you need to thaw in a hurry.
Put them in your password manager, not a note on your desk, a text file called
credit.txt, or your email.
Thawing, which is easier than people fear
The objection I hear most is that a freeze will get in the way when you actually need credit. It barely does.
When you apply for a mortgage, a car loan, a card, an apartment, or new utility service, you lift the freeze temporarily. Log in, request a thaw, set a date range — three days is usually plenty — and it re-freezes itself automatically. Online thaws take effect within about an hour, often immediately.
The useful trick: ask the lender which bureau they pull from before you apply. Most will tell you. Then you only thaw that one, and the other two stay locked.
If you’re rate-shopping a mortgage or a car, thaw all three for the week and re-freeze after. It’s a mild inconvenience two or three times a decade against a permanent block on the most common form of identity theft. That math isn’t close.
Why this matters more than it used to
Your Social Security number is not a secret. It hasn’t been for years. Between the Equifax breach in 2017, every healthcare breach since, and the ongoing trade in public records, the assumption you should be operating under is that your full identity kit — name, DOB, SSN, address history, relatives — is already sitting in a database somewhere with a price on it.
Once that data is out, it doesn’t expire. There’s no rotating it like a password. The only thing you can change is what someone is able to do with it.
That’s what a freeze is. You can’t make the data private again. You can make it useless.
Do it this week
Half an hour, three websites, no cost, no subscription, nothing to maintain afterward.
- Equifax, Experian, TransUnion.
- PINs and logins into your password manager.
- Kids, if you have them.
Then forget about it until you buy a car.