Access Control - Restricted Keys Guide

Author: Brian Rhodes, Published on Mar 15, 2018

Not all doors, even in larger facilities, can justify using electronic access control. And even for doors that do have electronic access control, many often need to work with mechanical locks.

However, most keys can be easily copied. How do you improve their security?

Restricted or proprietary keys are often overlooked but can be effective in improving security and access control.

Keyways are the part of the lock a key is inserted for use, and the shape of the keyway and the key must match. (For a general guide, see our: Lock Keyways For Access Control Guide.) Restricted keyways are locks and keys fabricated with profiles that are uncommon or proprietary, controlled by the manufacturer and not available for general use.

So for substantial mechanical key systems, like Master Keyed facilities, Restricted Keyways is a complimentary safeguard to electronic access to protect those doors against unauthorized entry from easily duplicated keys or by Bump Keys.

Inside, we explain:

  • Keyway profile variations
  • Why 'Do Not Duplicate' statements are useless
  • Differences between Unrestricted vs Restricted vs Proprietary
  • Strengths and Weaknesses of these approaches
  • Common providers and pricing

*** *** *****, **** ** ****** **********, *** ******* ***** electronic ****** *******. *** **** *** ***** **** ** **** electronic ****** *******, **** ***** **** ** **** **** ********** locks.

*******, **** **** *** ** ****** ******. *** ** *** improve ***** ********?

********** ** *********** **** *** ***** ********** *** *** ** effective ** ********* ******** *** ****** *******.

******* *** *** **** ** *** **** * *** ** inserted *** ***, *** *** ***** ** *** ****** *** the *** **** *****. (*** * ******* *****, *** ***:**** ******* *** ****** ******* *****.) ********** ******* *** ***** *** **** ********** **** ******** that *** ******** ** ***********, ********** ** *** ************ *** not ********* *** ******* ***.

** *** *********** ********** *** *******, ********** ***************, ********** ******* ** * ************* ********* ** ********** ****** to ******* ***** ***** ******* ************ ***** **** ****** ********** keys ** ****** ****.

******, ** *******:

  • ****** ******* **********
  • *** '** *** *********' ********** *** *******
  • *********** ******* ************ ** ********** ** ***********
  • ********* *** ********** ** ***** **********
  • ****** ********* *** *******

[***************]

Keyway ********

********* ***** *** ****** ** ********* *** *********** ******** *** control ** *****. ** *** **** *** *** ****, **** the ********* ****** ** ****** ************ ** ****** **** ***** be ******* *********, *** ******* **** **** ************ **** **** than *** **** ***** ** ******.

** ******* ********, **** ****** *********** ** ********* ****** ******** for ***** ***** *** ****. *** ***** ** *** *** varies ******** ** **** ** **** **** * ******* ***** or **** ** ****. **** *** *****, *** ****** ** profiles *** ***** ** ********* ** ********* ********.

** *** **, **** ** *** **** ****** ******** *** shown *****:

*** *******, *** '*******' (***) ****** ** **** ****** ** the ** *********** ******, *** **** ***-******* ***** ***** **** widespread *** ** *** ****. ******* * **** **** ** a*** ***** ******* * *********** **** ** ** **** ********* **** stopping ** * ******** ***** *** ******** * *** *******.

**** ******** * ****** ** ********: ** ********* ********* **** or ***** ** ** ****, ****** - **** ********* - can *** **** ** ****** ****, ****** *** *********** *** of **** *** ***** *** *********** ****** ******* **** *********.

Restricted ** *********** *******

********** *** **** ** *** *********, ******** ** **** ***** to ** **** *********. ** ******** '**********' ** **** '***********' keyways, ***** *** ************ ***** *** *********** ** ********** *** misuse.

*** ********** ******* *** *******:

  • ************:*** *** *** ************ ** ****** ******** *** *** *******, and ********** ********** ******** *** ************ ** ******.
  • **********: *** *** *** ************ ** ****** ******** *** ******* to * ***, ************** *** ******** ******* ******** *** ***** keys *** ******* ********** ** *** ************. *******, ***** ****** are ******* ** ******* ******* *** **** *** * **** manufacturer, *** ******* ** ******* *** *** ** *** ******* to **** * *** ***** *** *** *** ******* ******* and ****** *********** ******* *** ******** ** * ***** ****** of ******* *********. ** ****, *********** ****** *** **** ******** if ******** *********** **** ***.
  • ***********: ****** **** *********** ********* ***** ** * *** *********, there ** **** *** ****** ****. *********** * ************ ***** up *** ******** **** *** **** *** **** *** ********.

** *******, '*********** **********' ******* *** *** **** ****** *** not ****** *********, *** *** *** **** *********. '**********' ******* are ********* ******* ** **** * *** ********, *** *** manufacturer ***** ****** ***** **** *** *** *** *** *** access ** ***** ****. '************' *** *********** *** ********* ** all, *** *** *** **** ****** *** ****** **** ******* used.

*** ***** ***** ****** **** *** **** ** **** ** these *******:

Common *******

** ******** ** ********** *******, **** ** ****** **** **** one ** * ******* ****** ** ***** *********, **** ***** use ******* **** ****** *** ***** ****.

***** *** **** ****** ******** *** ***** **** ** **** the *********** *** ********** *******. ** ******* **** ****** ****** ******* *** ****** ******* *****, *** *** '*** *' ** *** ****** ** ***** using ************ ******* ***:

***** ******** ******** *** ****, *** ******* ***** *** ********* found ** *****-****** ********** *** *********** *****, ******** ***** *** in ****-******** ***** ** *** ********.

**** ***** ******** ** *** ******, ***** ******* **** ********** by *******, *** *********** ***** *** **** *** **** ** use *** ******** ******* (**+ *****), ****** ********** *** ****** and *** ******* *** ****** ***********. ******* ***** ******* ******* brand ***** **** '****', '*******', *** '*******', ***** ******* *** essentially **** ** ********* ****** *** *** *********** ************ *** blanks **** ** ******.

***** **** *** ****** ***** ************ ******* ***** ********. *** example, *** **** *** ****** *** *******, *** **** *** open *** ****. **** ** *** ** *** *-*** *********** of *** ***** ****** *** *-*** ******** ** ***. ** while *** ******** ***** ** *** ******* ** *** ****, they ***** ******* ********* *** ***** *** *********** *** ********** as ********* *******.

DND ********** ****

** * *********** ******** *******, **** ************* ** ***** ******* to ********** *** *********** ** ****** ******* ** ******** ** embossing *** ****** **** '** *** *********' ** '** ************ Copies' ** *** ***** * ************* ********* ** ******** ***** will ****** ** **** * **** ******* ******** ******** **** a ******** *******.

*******, *** ******* ******* **** **** ********: *** '*******' ** frequently *******.

********, *** ********* ** ******* ** ************* ******,*** *** ******* ***** ******(**** ******** ****** **** **********) *** ********* ** ************ *** retail ******.

Common *********

** *** ******, ********** ***/** *********** **** *** ********* **** certain *************:

  • ******:***** ******** ***** *** ** ** ******* ******, ********** **** and ***** *** ********* *** * ********** ******* ** $*** - $*,***.
  • *******:*** *******'* ******* *** ****** ******* *** **********, ******* ** negotiated **** ******* $*** - $*** ***** ** *******.
  • ****: *** ***** ****** ****** ****** ******* *** ***** *******, but ** * ****** ******* **** ********* ** *** **** than $*,*** *** ******.

** *******, ***** *** *** ****** ********** *****, *** *** service ** ******** **** ** *********** **** * ******* ****** of *********.

*********

** *******, ******** ****** ********** ** *********** ******* ***** ** unauthorized ****** ** ***** ** **** *** ********. *** **** does **** ******** *** **** ** ******* *********** ******* *** credentials, ** ****** *** **** ** ******* ***** ******** ********* **** ****** ** *** **** ** ********* * ************ available ********.

**********

*******, *** ***** ******* *** *********. *********, *** ******* ****** of ******** ***** *** ********** ** ****** **** *** *********** keyways ** ******. ******* ** ******* $* ** **** *** a *** *** ** * ***** *****, ** *** **** 10X **** ****** *** **** ****.

********* ** *** **** ** ******* *** ************* ***** *** a ***** ****** ** ********* ********* **** *** ********* ***** to ******** ********** ********** **** * *********** **** **** *** range **** ******* ******* ** ******* ******** *******. ** *******, the ******* *** ********** ** **** *** ***** ***** *** keyway, *** ****** **** *** ** *** ********* ** **** volumes ******* *** ******** *** ***** ********** *****.

** *******, *** ****** ** ********** ** ******** ******* ********* is ******* ** ****. ******* ** ** ***-**** ******** *** service ***** ** ***** ** ******* *****, ***** * ********** keyway ****** *** ******** ********* ** *** ** * ***, and ******** *********** ***** **** ****** *** ****** *** **** days ** *****.

******* ******** * ********** ****** ******* ** **** **** *** maintained *** *******, *** ** *** ******** *********** *** ******** of *** **** *** ***** ** ** *** ****'* ******.

[**** **** *** ********** ******* ** **** *** ************* ******* in ****.]

Comments (8)

Electronic access control uses a similar concept to this one: "Facility Codes"

In general, the credential must have the right facility code in order to be approved for scanning by the reader.

In the same way as a key may not fit into a lock because of keyway mismatch, the credential cannot be read because the code doesn't match.

Considering the uselessness of DND warnings, is there any value in using high tech to manage the low? By restricting or at least tracking token usage by using devices like these?

Yes, if you are using keys which are not possible to copy (restricted or proprietary).

Seems like more trouble than it's worth since all but the most expensive locks can be picked relatively quickly. And the existence of this guy: http://www.qtactical.com/easy-entrie-key-machine/

Important doors simply shouldn't be left unmonitored.

Apparently now you can make bump keys for proprietery locks just by taking a picture of the keyhole.

Many lock makers carefully trademark or patent their key blank designs and prevent them from being sold to anyone outside a small group of verified customers. But with the advent of 3D printing, those restrictions can’t stop lockpickers from 3D printing their own blanks and filing them into bump keys

Most "high security" Kennedy's have a 3D element that is not seen from the 2D profile. For Schlage there is a unique side bar profile. With Medeco it's cut angles per pin.

We are a large Medeco dealer and you can buy cylinders for a fraction of what you descirbe (I/C core, mortise, etc.) and you can retrofit the cylinders into most 3rd party hardware. I don't see how you came up with those dollar amounts? We can install cylinders in an entire office with a lot of keys for that. Of course if you want the best lock you can get in a truly restricted & patented keyway then it is going to cost more but not by a large margin. Each dealer has their own keyway which matches their locks. You have to go to your dealer to get any keys. It's not like you are locking the customer into coming to you and only you so you can gouge them all along the way. They buy into the system knowing their keys are secure and that is why they do it.

As for the time it takes for a key, anybody can walk in our store who has permissions to have keys cut and have them cut on the spot OR pay a delivery fee and have them dropped off within 24 hours or so. Others may have longer lead times but it doesn't take any longer than cutting a regular key. Obviously you cant walk into Home Depot and have it cut. The key machines are specialized for the patented keyway.

Also there is a difference between a restricted keyway and a restricted high security cylinder. Restricted is just that it doesn't say anything about being pick or drill resistant. High security add another level. They may have angled cuts and specially constructed pins to prevent this. I personally have never seen anybody pick a high security Medeco or Mul-T-lock cylinder. Hardware like this is just in a different class than anything else and you are paying a premium for the technology and advanced construction of this hardware. If you took apart your regular Schlage lock/cylinder vs. a high security one there is no comparison.

Physical security will never go away. Cameras and access control don't matter if I can pick a lock or physically defeat a lock in seconds. The alarm goes off and the cameras record my mask and then you are on your way with what you came for.

Many times there is no damage or break in whatsoever since the person came right in with a key that may have been duplicated or stolen since there are so many copies around.

Do yourself a favor and invest in a high security restricted system.

My budget for locks jumped a ton once I showed in hand how quick it is to zip a lock, with that, so did my budget for lock bypass tools and tooling to make prototypes for bypasses. I cant tell you how many cores I took a part that had master wafers in locks that shouldn't of ever had them.

And the locksmith who likes to keep the code cuts on hand incase "you lose your keys" while driving their branded trucks to your office.

All it takes is their truck to get broken in till your key is out there with you address attached to it.

Login to read this IPVM report.
Why do I need to log in?
IPVM conducts unique testing and research funded by member's payments enabling us to offer the most independent, accurate and in-depth information.

Related Reports

Favorite Request-to-Exit (RTE) Manufacturers 2018 on Sep 19, 2018
Request To Exit devices like motion sensors and lock releasing push-buttons are a part of almost every access install, but who makes the equipment...
IP Camera Cable Labeling Guide on Sep 14, 2018
Labeling cables can save a lot of money and headaches. While it is easy to overlook, taking time to label runs during installation significantly...
VMS Export Shootout - Avigilon, Dahua, Exacq, Genetec, Hikvision, Milestone on Sep 13, 2018
When crimes, accidents or problems occur, exporting video from one's video surveillance system is critical to proving incidents. But who does it...
Door Fundamentals For Access Control Guide on Sep 12, 2018
Assuming every door can be secured with either a maglock or an electric strike can be a painful assumption in the field. While those items can be...
Milestone Co-Founder Invests In Anti Theft Spray SelectaDNA on Sep 06, 2018
Milestone's Co-Founder Henrik Friborg has invested in CSI Protect, exclusive US dealer of forensic marking startup SelectaDNA, a company that...
IP Camera Cable Termination Guide on Sep 06, 2018
Terminating cables properly is critical to network performance, but it can be a tricky task with multiple steps. Fortunately, this task is easy to...
Access Control Course Fall 2018 on Sep 06, 2018
Registration IS CLOSED ends this Thursday. Register now. If you are looking to strengthen your ability to design and deploy access systems or...
Drain Wire For Access Control Reader Tutorial on Sep 04, 2018
An easy-to-miss cabling specification plays a key role in access control, yet it is commonly ignored. The drain wire offers protection for readers...
Directory Of 110+ Video Management Software (VMS) Suppliers on Aug 30, 2018
This directory provides a list of Video Management Software providers to help you see and research what options are available. Listing...
IP Camera Cabling Installation Guide on Aug 29, 2018
IPVM is preparing the industry's first Video Surveillance Installation book and our upcoming Video Surveillance Installation Course. We have...

Most Recent Industry Reports

25% China Tariffs Finalized For 2019, 10% Start Now, Includes Select Video Surveillance on Sep 18, 2018
A surprise move: In July, when the most recent tariff round was first announced, the tariffs were only scheduled for 10%. However, now, the US...
Central Stations Face Off Against NFPA On Fire Monitoring on Sep 18, 2018
Central stations are facing off against the NFPA over what they call anti-competitive language in NFPA 72, the standard that covers fire alarms....
Hikvision USA Starts Layoffs on Sep 18, 2018
Hikvision USA has started layoffs, just weeks after the US government ban was passed into law. Inside this note, we examine: The important...
Chinese Government Praises Hikvision Following Xi Jinping on Sep 17, 2018
The Chinese government council responsible for managing China's state-owned companies praised Hikvision’s obedience to China’s authoritarian leader...
Amazon Ring Spotlight Cam Tested on Sep 17, 2018
Amazon's Ring has released their latest camera entry, the Spotlight Cam, which we bought and tested in our Consumer IP Camera Analytics...
European Mega Security Firm Verisure Pushing Security Fog on Sep 17, 2018
The European mega security firm Verisure (Securitas Direct), with a reported 2 million customers, is pushing security fog, as shown in this BBC...
IP Camera Cable Labeling Guide on Sep 14, 2018
Labeling cables can save a lot of money and headaches. While it is easy to overlook, taking time to label runs during installation significantly...
Favorite Intercom Manufacturers 2018 on Sep 14, 2018
Intercoms are certainly increasing in popularity, driven by the integration of video and IP networking. But who is the favorite? On the one side,...
Vivotek 4MP Camera Tested (FD8379-HV) on Sep 13, 2018
Next in our series of updated 4MP testing, we bought and tested Vivotek's FD8379-HV, and entry level 4MP model claiming "top-notch quality video in...
Ascent / MONI Faces Lender Lawsuit and Debt Crisis on Sep 13, 2018
ASCMA, aka Ascent, aka Brinks Home Security, aka MONI, aka Monitronics is being sued by a group of their lenders who allege: As of June 30,...

The world's leading video surveillance information source, IPVM provides the best reporting, testing and training for 10,000+ members globally. Dedicated to independent and objective information, we uniquely refuse any and all advertisements, sponsorship and consulting from manufacturers.

About | FAQ | Contact