Levels of access across one set of locks

The problem a master key system solves

Picture a medical suite with a reception door, six exam rooms, a supply closet, a records room and a back entrance. The owner wants to open everything. The front desk should open reception and the supply closet but not the records room. A cleaner should open the common rooms but not the records room or the office. A physician should open their own room and the shared areas. Without a plan, the business ends up with a ring of eight keys for the owner, a ring of five for the front desk, and a drawer full of copies nobody can account for.

A master key system solves this by letting a single lock accept more than one key. Each lock still has its own individual key, called a change key. In addition, a higher level key, called a master key, is cut so that it also operates every lock in a defined group. The result is that staff carry fewer keys, the owner or manager carries one key that opens everything, and the structure of who can go where is built into the hardware.

That is the benefit. The cost is complexity. A master key system is harder to design, harder to expand and more demanding to record than a set of individually keyed locks. Done with care it is a clean way to organize access. Done carelessly it can create gaps, confusion and security weaknesses. For that reason a locksmith should discuss the plan with you before any cylinder is touched, and the plan should be written down.

This page explains how the levels work, what a plan should include, and what to think about before deciding. If you are looking at a smaller question, such as simply cutting off an old key, a plain commercial rekey may be all you need.

Change keys, sub-master keys, master keys and grand master keys

The vocabulary is easier than it first looks. A change key opens one lock, or one group of locks that share the same cut. Think of the key to a single office. A sub-master key opens a defined group of those locks, such as every office on one floor or every room in one department. A master key opens all the locks in a larger group, such as every door in a building or tenant space. A grand master key sits above several master key groups, for example the key a property owner holds that opens every building on a campus.

Some large systems add a great grand master level, but most small and medium businesses never need more than two or three levels. Each additional level adds complexity and reduces the independence of the lower levels, so the right number of levels is the smallest number that meets the business's needs.

How does a single cylinder accept more than one key? Inside a master keyed cylinder, some pin stacks have an additional thin pin, sometimes called a master wafer or master pin. This creates two possible shear lines in the pin stacks, one for the change key and one for the master key. Either key lifts the pins to a valid height and the cylinder turns. The cylinder cannot tell which key is which. It simply recognizes more than one valid arrangement.

That is why pinning a master system is a skilled task. Each cylinder must be pinned to its own change key and to the master key, and mistakes show up as keys that do not work, or worse, keys that work where they should not. A careful technician tests every cylinder with every key that is supposed to work, and every key that is supposed not to work, before leaving.

Planning comes before cutting

The most important step is not at the lock. It is at a table with a floor plan. A good master key plan starts with a list of every door and every person or role. Who needs to open which door? Which doors must be closed to almost everyone? Which doors should be closed even to the owner's staff, such as a records room or a cash office?

Next, group the doors. Doors that the same people need can share a key. Doors with a different set of people need a different key. The groups form the structure of the system: which doors are keyed alike, which are keyed differently, and which master and sub-master keys sit above them. Writing this as a table or a matrix, with doors down one side and key levels across the top, makes gaps and overlaps obvious.

Then think about growth. A business that will add a second suite next year should leave room in the system. Master systems are built on a numbering scheme for the pin heights, and a plan that uses up all the possible combinations for the first set of doors can make later expansion difficult or force a complete redo. A technician with experience will talk with you about how many doors you have now and how many you might have in a few years.

Finally, decide who holds each key and how it will be issued and returned. The best system on paper fails if nobody tracks the keys. The page on retail key control policy and the guide on key control for property owners both give practical ways to do that.

• A list of every door and every role that needs access
• A grouping of doors into keyed-alike sets
• A matrix showing which key level opens which group
• Room for growth in the numbering scheme
• A written plan for who holds, issues and returns each key

Security tradeoffs a business should understand

Master keying has drawbacks, and an honest locksmith will tell you so. Every extra valid arrangement in a cylinder increases the number of keys that could, in theory, operate it. A master keyed cylinder is slightly easier to defeat with improper methods than a single keyed cylinder of the same design, because the extra pin positions give more opportunities. For most small businesses this is an acceptable tradeoff against the convenience. For a door that protects something of high value, such as a safe room or a controlled storage area, it may not be.

A related problem is the loss of a master key. If a change key is lost, one door or one group is affected. If a master key is lost, every lock in its group may need to be rekeyed. That is a serious event, and it is why master keys should be held by very few people, stored carefully and never lent. Some businesses keep a master key in a locked cabinet or safe and issue it only when needed.

Another risk is cross keying. This happens when a lock accidentally accepts a key from another group because of the pin arrangement. Good design avoids it. A careless plan can create it, and cross keyed locks are hard to detect without testing each key in each lock. It is one of the reasons to insist on a documented plan and a testing step at the end of the job.

Finally, a master system relies on key control. If staff copy keys on their own, or if keys are left in vehicles or on desks, the hierarchy collapses. Some businesses combine master keying with restricted key blanks so that copying needs authorization. See restricted keyways to control key copying for how that works.

Keying charts, bitting lists and the paperwork that matters

Behind every master key system sits a set of records. The first is the keying chart, sometimes called a keying schedule. It lists each lock, the key that opens it, and the higher level keys that also open it. The second is the bitting list, which records the cut depths of each key. The depths are what define the pin heights, and they are the sensitive part of the record.

These records matter for two reasons. First, they let a technician add a lock, replace a lost key or expand the system years later without starting over. Second, they are a security concern in their own right. A bitting list is effectively a recipe for every key in the system, so it should be stored securely and shared only with people who need it.

Ask your locksmith what records will be kept, who holds them, and how you can get a copy. A reputable provider can explain how the records are stored and how requests for new keys are verified. A provider who says nothing is recorded, or who cannot say where the chart is kept, leaves you dependent on memory.

Keep your own copy of the keying plan, at least the part that shows which doors open with which key level, even if you do not hold the bitting details. If the business changes ownership or moves to a new locksmith, the plan is a valuable asset. Keep it in a locked place and update it whenever the system changes. The guide on commercial authorization and key records explains how authority and records connect.

Retrofitting an existing building versus starting fresh

A new build or a full renovation is the ideal time to install a master key system, because every cylinder is being chosen anyway. In most real situations the business already has a mix of locks: some old, some new, some from different manufacturers. Converting that mix into a master key system means deciding which locks can be rekeyed into the system and which must be replaced.

Locks of the same brand and keyway can usually be rekeyed into a common system. Locks of different brands or keyways cannot share keys, so a mixed building may end up with two or three parallel systems unless some locks are replaced. A technician can survey the doors, identify the brands and keyways, and tell you how many can join the system.

Cylinder quality matters as well. A cylinder that is badly worn may not hold a master pin arrangement reliably, since the extra pin position demands tight tolerances. In that case the honest advice is to replace the cylinder rather than rekey it, which affects the plan and the quote.

Retrofits often reveal other issues: doors that do not latch, frames that are loose, strikes that are misaligned. A survey is a good time to note them, though they are separate from the key system. A master key system on a door that does not latch properly is of little use, and the survey should flag that.

Because retrofits depend on what is actually in the building, a quote begins with a conversation by phone and often an on-site visit. A service call charge applies to dispatch and is explained before anyone is sent. Prices are never published here, because they depend on the number of doors and the state of the hardware.

Examples from different kinds of Miami businesses

A small office building in Coral Gables with eight suites might use a sub-master for each tenant suite, a master key for the property manager and a separate key for the shared restrooms and utility room. Tenants rekey inside their suites without affecting the building master, provided the plan allows for it. See office building suite rekey for the tenant side.

A restaurant group with three locations might use a different master system at each location, with a grand master for the owner. Staff at each site carry only the change keys they need. If an employee at one site leaves, only that site needs attention.

A school or daycare has a different set of concerns, with classrooms, offices, storage and exterior doors, plus safety requirements discussed in school and daycare lock considerations. A master system can serve the staff well but must not impede emergency exits.

A condo or multifamily property often uses a system with a unit key for each resident and a master for maintenance, with careful controls. See multifamily key systems and the related page for associations.

A warehouse might key offices and the shop floor differently, so that drivers can reach the loading area without reaching the offices. In each case the plan reflects people and places, not just locks.

If you are thinking about a master key system for your business, call and describe the number of doors, the people who need access, and any concerns about security. We will explain how it would be set up and how pricing works by phone.

Questions to settle before you commit

Before moving forward, a handful of decisions help a business get what it needs. First, how many levels are really required? Many businesses find that two levels, a change key per person or room and one master for the owner, covers everything. Adding sub-masters is useful only when there is a clear group that needs shared access.

Second, who will hold the master keys, and what happens if one is lost? A plan for loss is part of the plan. It can be as simple as writing down who to call and what the steps are.

Third, how will new keys be requested? A business that allows anyone to order copies has no control. Define who can authorize a new key and how that authorization is shown. If the system uses restricted blanks, this is built in.

Fourth, how often will the system be reviewed? A yearly check of the key record against the keys actually in circulation catches drift. People move, doors change, and keys accumulate. Reviewing and tidying avoids the slow decay that makes systems unreliable.

Fifth, are there doors where a master key should not work at all? Some businesses deliberately keep certain doors outside the system, such as a safe room, so that the master does not open them. That is a legitimate design choice.

Sixth, how do life safety and egress apply? Locks must not trap people inside, and doors on exit routes need to open from inside without a key. This is covered on pages such as panic bar and exit device repair. Check local requirements before changing hardware on exit doors.

When these questions are answered, the work is straightforward. A call is the quickest way to start, and a technician can talk through your layout and recommend a structure.

Questions people ask

Related pages

Written by Claude (AI) (AI) for 24 Hour Locksmith Miami.