Key Takeaways
- Map your doors, users, and required access levels before buying hardware.
- Choose the right hierarchy (sub-master, master, grand master) and restricted keyways for security.
- Document everything: key charts, serials, and a strict key-control policy.
- Test thoroughly and schedule regular audits; call a locksmith for complex or restricted key systems.
Tools Needed
- Tape measure and notepad or tablet
- Screwdrivers (flat and Phillips)
- Cylinder follower and plug follower (for rekeying)
- Pinning kit and key decoding tools (if rekeying yourself)
- Key cutting machine or access to a key-cutting service
- Drill with assorted bits (minor drilling only if required)
- Label maker or permanent marker
Materials Needed
- New cylinders or keyed-alike locksets compatible with your chosen keyway
- Master pins and standard pin sets for the cylinders
- Blank keys for cutting master and change keys
- Key tags and tamper-evident key rings
- Materials for labeling doors and cabinets (stickers or plates)
- Secure storage box or cabinet for master keys
⚠️ Safety Warnings
- Never attempt to drill or force cylinders unless you are trained—this can damage locks and void warranties.
- Keep master key blanks and finished master keys securely stored and limit access to prevent unauthorized duplication.
- Follow local laws about restricted keyways and employee privacy when establishing access.
- When working on doors, support heavy fixtures to avoid injury. Wear safety glasses when using tools.
Step-by-Step Instructions
Step 1: Audit Doors, Users, and Access Needs
Begin by walking the property and listing every door, gate, cabinet, and secure area. For each entry, note who needs access (roles, not names), the hours of access, and any special constraints like after-hours-only doors or contractor-only areas. Group similar doors that can share the same access. This inventory becomes the foundation of your key chart and prevents costly mistakes like giving broad access to sensitive areas. Include stairwells, mechanical rooms, server rooms, and exterior gates. Also review existing lock types and serial numbers to determine whether you can rekey existing cylinders or must replace hardware.
Step 2: Choose the Right Keying Architecture
Decide on the hierarchy your business requires. Common architectures include single-level master key (one master + change keys), multi-level (sub-masters and a master), and grand master systems for multi-building campuses. Think ahead: if you may expand or add departments, design for scalability. Also choose between standard or restricted keyways. Restricted keyways reduce unauthorized duplication but typically require working with a licensed locksmith or manufacturer. Consider whether you want keyed-alike locks for multiple doors or keyed-different locks with master control. The architecture decision impacts pinning complexity and future maintenance.
Step 3: Create a Detailed Key Chart and Numbering System
Produce a clear key chart listing every lock, door location, cylinder serial, and which keys operate each. Assign unique ID numbers to doors and keys (e.g., A-101 door = Key D-101). Record which staff role receives each key and track serial numbers for blank keys and finished keys. Include columns for issuance date, holder name, and return status. Keep an electronic copy and a sealed master copy stored securely. The key chart prevents confusion during installation and helps when a key is lost or an employee leaves.
Step 4: Select Cylinders, Keyways, and Hardware
Choose lock cylinders and hardware compatible with your security goals and budget. For higher security, choose cylinders that accept restricted or patented keyways to prevent unauthorized duplication. Confirm the cylinder length, backset, and trim compatibility with existing doors. If you plan to rekey, ensure you have compatible pinning kits and that the cylinders are removable without damage. If replacing hardware, opt for ANSI/BHMA grade 1 or 2 for commercial applications. Order a few spare cylinders and blank keys for future needs.
Step 5: Rekey or Install Cylinders and Cut Keys
If rekeying existing locks, remove the cylinder carefully using the maker’s recommended method and use a plug follower to retain driver pins. Follow your pinning schedule derived from the key chart to install master and change keys. If you’re not comfortable pinning, use a locksmith or a reputable hardware supplier that offers master key services. After pinning, cut the master key and required change keys to match your code. For protected keyways, cutting and sourcing blanks may require an authorized dealer. Always test keys on a bench before reinstalling cylinders.
Step 6: Reinstall, Test, and Validate Every Lock
Reinstall cylinders and operate each lock multiple times with its change key, sub-master (if applicable), and top master key. Test during different conditions—cold start, after door settling, and with individuals using the key as they would in daily operations. Verify that restricted doors only open with their designated keys and that masters open intended groups. Make adjustments if you experience binding or sticking. Document test results on your key chart, noting any issues and corrective actions. This validation step prevents lockouts and security oversights after deployment.
Step 7: Implement Key Control and Distribution Policies
Establish strict policies for issuing, returning, and duplicating keys. Only authorized personnel should approve key requests and record issuance on the key chart. Use tamper-evident tags and maintain a secure key cabinet for master keys and spares. Create forms for lost-key reports and require immediate reporting. If you use restricted keyways, keep vendor contacts for replacement keys and clarify who can order duplicates. Train staff on the policy and include consequences for policy violations. Regularly reconcile physical keys against your chart to detect unauthorized copies or missing keys.
Step 8: Schedule Maintenance, Audits, and Updating Procedures
Create a maintenance calendar with periodic audits—every 6–12 months for most businesses. During audits, verify that keys match the chart, check cylinder wear, and confirm adherence to key-control policies. When employees leave or after a security breach, rekey affected cylinders or replace them if keys are unaccounted for. Maintain a log of all changes and keep spare keys in secure, access-controlled storage. If you anticipate expansion, design your system to add new cylinders and levels without redoing the entire master scheme.
When to Call a Professional
Call a licensed locksmith or security professional if you plan to use restricted/patented keyways, require complex multi-level master systems, or lack experience with cylinder pinning and key cutting. Professionals ensure proper pinning charts, supply restricted blanks, and provide liability protections and documentation that many businesses require. Also contact a pro if you manage critical areas such as server rooms, medical storage, or hazardous equipment rooms where mistakes could lead to downtime or regulatory issues. If you suspect a security breach, lost master key, or need rapid rekeying for many doors, a locksmith can rekey, replace cylinders, and advise on upgrades like electronic access control.
Frequently Asked Questions
Can I set up a master key system myself?
Yes, small and simple master systems (single-level or small multi-level) can be set up by someone comfortable with basic tools and pinning practices. However, you must understand pinning charts and obtain correct blank keys. For restricted keyways, complex hierarchies, or high-security needs, hire a licensed locksmith to avoid costly errors.
What is a restricted keyway and do I need one?
A restricted keyway uses patented blanks and controlled distribution so that unauthorized duplication is much harder. It’s recommended for businesses that require stronger key control—medical facilities, schools, or facilities with sensitive assets. Restricted systems often require working with an authorized dealer or locksmith.
How do I handle a lost master key?
Treat a lost master key as a high-priority security incident. Immediately locate backup copies, audit access logs if available, and rekey or replace affected cylinders. For large systems, a locksmith can perform staged rekeying and advise on whether a full system reset is necessary.
How often should I audit my master key system?
Conduct a full audit at least annually, with partial checks every 3–6 months. Audits should verify key inventory, ensure keys are returned by departing employees, inspect cylinder wear, and confirm compliance with key-control policies.