Setting up a master key system without losing control of it

A master key system lets one key open many doors while each door keeps a key of its own. On commercial property it is the difference between a maintenance technician carrying one key and carrying forty, and between a fire panel being reachable at two in the morning and not.

It is also the system most likely to be quietly dead. Most of the properties we survey have something that was a master key system once.

How the hierarchy works

Cylinders in a master system carry extra pins, so more than one key height can reach the shear line on the same cylinder. A door can then accept both its own key and a key above it.

The usual arrangement has three levels. A change key opens one door. A master key opens a defined group, such as a floor, a tenant suite or all electrical rooms. A grand master opens everything in the system. Larger properties add a level between, so a building master sits under a portfolio grand master.

The levels are a design decision and they are hard to change later, so it is worth an hour with a floor plan before any cylinder is pinned. Group by who needs access rather than by geography. Cleaning, maintenance, security and tenant staff move through a building differently, and a system grouped by corridor rather than by role ends up issuing more keys than it saves.

The trade off nobody mentions

Every level of masterage adds pins to the cylinder, and every added pin creates additional key cuts that will operate that lock. On a deep hierarchy with a shallow keyway, the number of unintended working combinations climbs, and cylinders become easier to manipulate.

This is a practical argument for keeping the hierarchy as flat as the building allows. Three levels covers most commercial properties. Five levels on a two storey building is a system designed for an organisation chart rather than for a set of doors.

Restricted keyways

Standard keyways can be duplicated at any counter that cuts keys. A master system on a standard keyway is a convenience feature with no key control behind it, because anyone holding a master can produce more masters for the price of a blank.

A restricted keyway solves that. Blanks are supplied only to the registered holder of the system, so duplication requires your written authorisation. It costs more to establish and it is the single decision that determines whether the system still means anything in three years.

If key control is the reason you want a master system, the keyway is not the place to save money.

The register

A master key system without a register is a set of locks that happen to share pins. The register is what makes it a system.

It records, for every key issued: the key stamp, the level it sits at, the doors or group it operates, the person holding it, the date issued, and the date returned. It is updated at the moment a key changes hands rather than at an annual audit, because the value is in being current.

Two habits keep it honest. Stamp every key with a code that identifies it in the register, and never with the door name, so a lost key does not tell the finder what it opens. And require the physical key back before releasing a deposit or closing out a departure, since a key marked returned in a spreadsheet nobody looked at is worse than no record.

How these systems die

The failure is always gradual. A contractor needs access for a fit out and gets a master on a Friday. A cylinder gets replaced after a break in and is pinned to a different combination, so it sits outside the system. A tenant loses a key and nobody records it. Somebody has spare blanks cut because the register was in a drawer.

Two years of that and nobody can say how many masters exist. At that point the register is fiction and the only honest answer is to repin the system, which costs what the original installation cost.

The preventable version of each of those is small. Issue contractor keys at change level and take them back. Record every cylinder replacement against the system. Log losses on the day.

Rebuild or patch

Patch when the system is intact and a small number of doors have drifted out of it. Repinning a handful of cylinders back into the hierarchy is straightforward work.

Rebuild when you cannot account for the masters in circulation, when the keyway is standard and key control now matters, or when the hierarchy no longer matches how the building is occupied. A rebuild means new pinning across the system and a fresh key issue against a new register, and it is disruptive enough to be worth doing once and properly.

What a system delivery should include

• A keying schedule showing every cylinder, its level, and the keys that operate it.
• Keys stamped to a code, with the code recorded against the door in your register and not on the key.
• The register itself, issued to you rather than kept only by the contractor.
• Written confirmation of who holds authorisation to order further blanks on a restricted system.
• Photographs of the cylinders fitted, with the hardware recorded for future replacement.

We perform this work with our own technicians, and no Florida contractor licence is required for it. The register goes to you on the day the system is delivered, and we update it on every visit afterwards that issues, returns or repins a key.