Commercial

Key Control: The Cheapest Security Upgrade Most Businesses Skip

5 min read

HomeSecurity Advice › Commercial

A master key system being set up

Ask a business owner how many keys exist to their back door and you will usually get a pause, then a guess. That pause is the whole problem. Key control is not a product you buy — it is knowing, at any moment, who can open what.

How it goes wrong

Nobody sets out to lose track. It happens one reasonable decision at a time. A manager needs after-hours access, so they get a key. A cleaner needs to get in on Sundays, so they get a key. Somebody loses theirs and a spare gets cut. Two years later there are eleven keys in circulation, four of them held by people who no longer work there, and the only way to be certain is to rekey everything.

The cost of a rekey is small. The cost of not knowing, and finding out the hard way, is not.

What a master key system does

A master key system is a hierarchy. Each lock is pinned so that it accepts more than one key: the individual key for that door, and a master key that opens a group of doors above it.

In practice, for a typical building, that means:

  • A cleaner carries one key that opens the front door and the utility room, and nothing else.
  • A department manager carries one key that opens their own floor.
  • The owner carries one key that opens everything.

Nobody carries a ring of twelve keys, and nobody has access to a room they have no reason to enter. When somebody leaves, you rekey the doors their key reached — not the whole building.

Restricted keys, and why they matter

A standard key can be copied at any hardware counter for a few dollars, by anybody holding it, without your knowledge. A restricted keyway cannot: the blanks are controlled, and duplicates are only cut on your authorisation.

This is the part most businesses do not know is available to them. It costs more per key. It also means the key you handed to a temporary contractor last spring did not quietly become three keys.

Getting the paperwork right

The system only works if somebody keeps a record. It does not need to be complicated — a spreadsheet is fine — but it needs to exist and it needs to be current:

  • Every key issued, its stamped number, and who holds it.
  • The date it was issued and signed for.
  • The date it came back.

Make key return part of the exit process, alongside the laptop and the fuel card. That single habit prevents most of the situations that end with a locksmith rekeying a building on a Saturday.

When to consider going electronic

Mechanical key control is excellent value and it has one limitation: it cannot tell you when somebody used a door. If you need that — for a stock room, a server room, a pharmacy cabinet — access control with card readers or keypads gives you a log and lets you revoke one person's access in seconds without touching the hardware. Plenty of buildings sensibly run both: mechanical keys for most doors, electronic on the few that need an audit trail.

The Short Version

  • If you cannot say who holds a key to each door, you do not have key control.
  • A master key system gives each person one key that opens only what they need.
  • Restricted keyways stop keys being copied at a kiosk without your say-so.