The idea
What a master key system actually is
Two keys open one lock, and that is the whole trick.
Every lock takes two keys
A cylinder in a master system is pinned so that two different keys will turn it: the key for that specific door, and the master key above it. The individual key opens one door. The master opens all of them. Extend that idea through a building and you get a hierarchy, where each person carries exactly one key that opens exactly the doors they should reach.
It replaces a bunch of keys with one
The alternative is what most growing businesses actually have, which is a manager carrying eleven keys on a ring and guessing which is which in the dark. That is not just inconvenient, it is a security problem, because a lost ring of eleven keys is a lost building.
The design is the job
Cutting the keys is straightforward. Deciding the structure is not, and it is where the value is. Who needs to open what, what happens when someone is promoted, what happens when a department moves floors, how the building expands. Those decisions get baked into the pinning, and changing them later means repinning everything.
Which is why bad ones get torn out
A system assembled one door at a time, by whoever was available, with no plan written down, works until the third change. Then it stops accommodating anything and the only fix is to start over.
The structure
A typical hierarchy
Most buildings need three levels. A few need four. Almost none need five.
Grand master
Opens everything in the building, including things nobody else reaches. Usually one or two keys, held by the owner and possibly a manager.
Master
Opens a department, a floor, or a function. Front of house, back of house, offices. Held by supervisors.
Sub master
Where a department is large enough to need internal divisions. Most small businesses skip this level entirely.
Change key
The individual door key. Opens one door and nothing else. This is what most staff carry.
Keyed alike groups
Several doors sharing one key without being part of the hierarchy. Useful for things like a run of identical storage rooms.
Excluded doors
Some doors should be outside the system entirely. Cash rooms, server rooms, personnel files. Deciding these early matters.
Getting it right
The decisions that determine whether it lasts
Map the people, not the doors
The instinct is to start with a floor plan. The better starting point is a list of roles, because roles are what persist. Doors get repurposed and walls move, but a business still has a manager, a shift lead and staff five years from now. A system built around roles absorbs change. A system built around the current room layout does not.
Leave room to expand
A master system has a finite number of usable key combinations, and using all of them at the start means the next door added cannot be accommodated without breaking something. A properly designed system reserves capacity deliberately. This is invisible on day one and it is the single biggest difference between a system that grows and one that gets replaced.
Decide what is outside it
Not every door belongs in the hierarchy. A room holding cash, personal data or controlled stock is often better on its own key held by two named people, precisely so it is not reachable by a master that circulates widely. Deciding this at design time is easy. Retrofitting it means replacing cylinders.
Write it down and keep it
A key schedule recording which key opens which door, how many were cut and who holds each one. Almost nobody keeps this, and rebuilding it later costs far more than maintaining it did. Without it, the first departure of a keyholder becomes a guessing game.
Plan for the lost master
A change key going missing is a small problem affecting one door. A master going missing is a building-wide problem, and it is worth deciding in advance what happens. Usually that means repinning the level below the loss, and knowing the cost of that in advance changes how carefully masters are handed out.
What we need from you
Before a system can be designed
- A list of doors, including cupboards, plant rooms, roof access and anything else that locks. The forgotten ones are always the awkward ones.
- A list of roles rather than names. Manager, shift lead, kitchen staff, cleaner, contractor.
- Which doors each role should open. Where you are unsure, say so, because those are the interesting cases.
- Anything that should be excluded from the system entirely.
- Whether the building is likely to expand, take another unit, or subdivide.
- Whether a landlord needs access, and to which doors. This is frequently forgotten and frequently contractual.
- What hardware is already on the doors. Some can be repinned into a system, some cannot.
- Whether you want restricted key blanks, which cannot be copied at a hardware counter.
Restricted keys
The upgrade that usually matters more than the hardware
A master system with freely copyable keys has a hole in the middle of it.
The problem with ordinary blanks
A standard key can be copied at any hardware counter for pocket change, without permission and without a record. In a master system that matters more than usual, because the key being copied might be a master. The hierarchy is only as controlled as the ability to duplicate the keys in it.
What restricted means
A key blank that is not sold openly and can only be cut through a controlled channel, usually with a record of who authorised it. Copying stops being casual and starts being a decision with a name attached.
Where it earns its cost
Any business with staff turnover, contractors, or a master system with more than a couple of levels. If the actual risk you are managing is copies in circulation rather than forced entry, this addresses the real risk and a heavier lock does not.
Where it does not
A two-door business where the same two people have worked for a decade. Restricted keys solve a problem that setup does not have.
Living with it
What happens after installation
Someone leaves
If they held a change key, that door gets repinned and the rest of the system is untouched. If they held a master, everything under that master needs attention. This is the moment the design pays for itself or does not, because a well-structured system contains the damage and a flat one does not.
Someone is promoted
They hand back a change key and receive a master. No hardware changes at all. This is the everyday case and it should be free.
You add a door
If capacity was reserved at design time, the new cylinder is pinned into the existing system and issued a change key. If it was not, the choices are a door outside the system or a rebuild.
You lose the schedule
This is the one that hurts. Without a record of which key opens what, the system still works but nobody can safely change anything, because no one knows what a given key reaches. Keep a copy somewhere that is not the building.
Years pass
Cylinders wear, particularly on exterior and high traffic doors. A system is not permanent hardware, it is a structure imposed on hardware that will eventually need replacing piece by piece. Replacing into an existing system is straightforward when the schedule exists.
Questions
Frequently asked
How many levels do we need?
Most businesses need two or three. Grand master, master, change key. Adding levels adds complexity and consumes capacity, so extra levels should earn their place rather than being added because they are possible.
Can our existing locks be used?
Often yes, if they are a type that can be repinned into a system. Some cannot, and mixing incompatible hardware is a common reason a system ends up with exceptions that undermine it. We check what is on the doors before designing anything.
What happens if a master key is lost?
Everything that master opens needs repinning, and new keys are cut for those doors. It is a real cost, which is why masters should be issued sparingly and recorded carefully.
Can we add doors later?
Yes, if capacity was reserved at design time. This is the main reason a system should be designed rather than assembled, and it costs nothing extra to do properly at the start.
Is a master key less secure than a normal key?
The cylinder is pinned to accept two keys instead of one, which is a real consideration and one reason high-value doors are sometimes kept outside the system. For ordinary commercial doors the convenience and control gained outweighs it comfortably.
Do we have to do the whole building at once?
No, and staging it is often sensible. But the design should cover the whole building from the start even if the installation is phased, otherwise the later phases cannot be accommodated.
Common mistakes
What we are usually called in to unpick
Everyone was given a master
It starts reasonably. The manager needs one, then the assistant manager, then the person who opens on Sundays, then the cleaner because it is easier than meeting them. Within two years a dozen people carry a key that opens the entire building, and the system provides no more control than a single key on every door would. The fix is a proper middle level, and it should have existed from the start.
The system was built door by door
A cylinder here, another there, each pinned by whoever was on site, none of it recorded. It appears to work because every key opens what it should today. It fails on the first change, because nobody can add a door or remove a person without knowing the whole structure, and the whole structure was never written down.
Capacity was spent immediately
Every combination used on day one, nothing held back. The business takes the unit next door and there is no way to bring those doors into the system. What should have been an afternoon becomes a rebuild.
High-value doors were left inside
A stockroom, a cash office or a records room sitting under a master that a dozen people carry. Nobody decided that, it simply followed from the structure. Those doors usually belong outside the hierarchy on their own key.
Hardware was mixed without checking
Three brands of cylinder across a building, two of which cannot be pinned into the same system. The result is a system with exceptions, and exceptions are what people forget about at exactly the wrong moment.
Value
Where the money actually goes
Design is the expensive part, and it is the part worth paying for.
The cylinders are the cheap bit
Pinning a cylinder into a system costs very little more than pinning it normally. The cost sits in the design, the key schedule and the thinking about how the business changes. That is the correct place for it to sit, because the design is what determines whether you are doing this once or twice.
Phasing is fine, designing in phases is not
Installing across several months to spread the cost is sensible and common. Designing across several months is how you end up with a structure that does not join up. Design the whole building first, install it in whatever order suits the budget.
What it saves
A promotion becomes a key handover instead of a hardware visit. A departure becomes one door repinned instead of a building. A new unit becomes a cylinder instead of a rebuild. Those are ordinary events and a good system absorbs them.
When it is not worth it
Under about five doors, with stable staff, a master system is usually solving a problem you do not have. Keyed-alike cylinders and a written record of who holds what will serve you better and cost far less.
Delaware specifics
What we see in local commercial buildings
Older Wilmington and Newark stock
Buildings that have been subdivided, joined, and subdivided again over decades, frequently with hardware from each era still in place. Designing a system for one of these starts with a survey rather than a plan, because the drawings almost never match what is on the doors.
Multi-tenant units
Common along the commercial corridors in both counties. The recurring issue is the boundary between landlord access and tenant access, which is a contractual question as much as a hardware one. Getting it wrong creates a dispute that hardware cannot settle.
Newer south county premises
Around Dover, Smyrna and Middletown the buildings are newer and the hardware more consistent, which makes system design considerably more straightforward. The common gap there is that a system was installed at handover and never documented afterwards.
Seasonal trade
Businesses that scale staff up and down through the year have a key control problem that a master system either solves or badly worsens, depending on whether temporary staff receive change keys or masters. Worth deciding before the season rather than during it.
Before you commit
Questions worth asking whoever designs it
How much capacity are you reserving, and for how many doors?
If the answer is vague or the question is treated as unusual, that is a signal. A designer who has thought about growth will have a number and a reason for it. This single question separates a designed system from an assembled one more reliably than anything else you can ask.
What happens if the grand master is lost?
You want a specific answer: which cylinders get repinned, how many keys get recut, roughly how long it takes. If the answer is that it would be a disaster, the structure is too flat and too much sits under one key.
Who holds the key schedule, and where?
It should be you, and a copy should live somewhere that is not the building it describes. A schedule held only by the locksmith is a dependency you did not agree to.
Can this hardware be extended in three years?
Some cylinder types are widely available for decades. Others are discontinued quickly, and a system built on one of those becomes unextendable the moment the line ends. Ask what happens if the manufacturer stops making it.
What is outside the system, and why?
A designer who has not proposed excluding anything has probably not asked what is behind each door. Cash, data and controlled stock usually warrant sitting outside a widely-held master.
Coverage
Where we work
Commercial premises, offices and multi-unit buildings across both counties.
More than a few doors?
Describe the building and who needs to open what, and you will get a structure rather than a quote for cylinders.
Keeping records that outlast the people who made them
A master key system is only as good as the records behind it. When the person who designed the plan leaves, the building often loses its memory: which key opens which door, how many copies exist, and who holds them. We encourage a simple key schedule that lists each key, its level, who was issued it, and when. It can be a spreadsheet or a page in a binder. What matters is that it is updated every time a key is issued, returned, or lost, not just once at installation.
Physical control matters as much as paper. Keys stamped with a number rather than a description of the door make a lost key less dangerous. Restricted blanks help prevent casual copying, but only if the duplicate request process is clear: who may authorize, who keeps the records, and what happens to unreturned keys. Without that, even the best hardware drifts into a tangle. We explain these choices openly, including the limits, because a system that is too complicated for the people using it tends to be ignored.
Preparing for a review is straightforward. Collect the keys you can find, list the doors and who needs access to each, and note any areas that have had lock changes in the past. Tell us about staff changes, tenants, and shared spaces. For buildings across New Castle, Kent, and Sussex Counties, the mix of old and new hardware is common, and we take it in stride. Call us to describe the building and to confirm availability. The scope and any quote are explained before work begins.