Commercial locksmith work designed backwards from the day a key comes back

A shift lead resigns, a contractor closes out a fit-out, a tenant moves out of a shared entry. All three end at the same question, and it is not a question about trust: was the key that came back the only one? A sign-out sheet cannot answer it. An ordinary key gets copied at a hardware counter with no record of who copied it, so the number of keys issued and the number of keys in existence are two separate figures that drift apart quietly.

That moment is where we start the design, then work outward. Before any hardware gets specified, what we want to know is which doors have to change hands when one person is removed, and whether removing that person means touching one cylinder or forty.

Not every building needs a system. A two-unit place with an owner upstairs, a tenant downstairs and a shared back door is fully served by a straight lock rekey at each change of tenancy: same cylinders, fresh pins, old keys dead. Keying systems earn their keep at the point where that honest answer starts costing a full day of labor every time somebody hands in a badge.

Master keying is drawn on paper first. The doors, the people who use them, the levels of access between them, all of it written down before a pin kit comes off the shelf. That document is the keying schedule, and it is the real deliverable, because everything mechanical that follows is only the schedule expressed in brass.

Two things go into it that are easy to skip. One is grouping: doors that should go dead on the same day belong under the same change key, which is exactly why the schedule gets built from the offboarding side rather than off a floor plan. The other is deliberate empty space. Combinations left unused in the original design are what let a door join the system three years from now without repinning the whole building around it.

Sloppy planning here costs more than paperwork. Pinning a cylinder so that both its own change key and a higher-level master will turn it adds shear lines inside the plug, and enough of those in a badly structured system will produce keys that open doors nobody ever intended them to open. Mill conversions raise the difficulty. Granite mill buildings got steel doors set into masonry openings, often with commercial-grade hardware still hanging on units that are residential now, so one schedule can end up covering a leasing office, a service corridor and somebody's apartment.

Counting keys is meaningless if a key can be duplicated on the way home. A restricted keyway is the mechanical form of that rule: the blanks are controlled, so a copy can only be cut by an authorized holder against a signed authority. Your policy binder does not stop a duplicate. The blank does.

What this buys at offboarding is an actual number rather than an estimate. Issue four keys against a supervisor role, take four back, and the count closes cleanly; without controlled blanks, four returned keys tell you nothing about a fifth sitting in a glovebox. It also changes who gets called for a routine spare, which is a tradeoff worth weighing before the system goes in.

One lock in the building sits outside all of it. No master key reaches a safe, so the safe needs a succession plan of its own, and that is usually the piece nobody writes down until the person who knew the combination has already left. Recovering from that means safe opening and a fresh combination rather than a rekey. Scheduling the change while somebody still holds the numbers is the cheaper version of the same job.

Plenty of obvious answers to a security problem are not legal on an exit door. Under the adopted codes, an egress door in most commercial occupancies must open from the inside without a key, without special knowledge, and in one motion, with exceptions the authority having jurisdiction rules on. Panic hardware satisfies that where the occupancy and occupant load call for it; many exit doors meet it with a plain lever.

The most common way it gets broken is also the best-intentioned: a deadbolt added above the panic device after a break-in. The device still works. Where the rule applies the door still fails: a thumbturn plus a push bar is two motions. On a fire-rated opening the added deadbolt also puts the listing in question. Where an exit really is being misused, delayed-egress and alarmed exit devices are the code-recognized route, permitted under specific conditions rather than as a general substitute for locking the door.

A fire door is listed as a complete assembly, so hanging hardware that is not rated for it, or drilling outside what the listing allows, can void the rating of the entire door. Beyond that, two ordinary field conditions undo good hardware just as thoroughly. Panic hardware left dogged holds its latch retracted, so the door reads as shut from across the lot while it is not locked at all. A closer cranked down too hard gets the door propped open with a bucket, and a propped door defeats whatever is fitted to it. We check both of those before recommending that anyone spend money on cylinders.

Storefront doors are a separate class of hardware. An aluminum storefront takes narrow-stile devices and a cylinder sized for that stile — mortise on a deadlatch, rim on a rim exit device — and a van stocked for residential work will not carry it. Retail rows run on this material, which is why storefront lock work in Seekonk looks nothing like a house call two streets over.

Outdoors, salt air makes the decision for you. A padlock or gate lock left in the open near the water is the shortest-lived hardware on any property, and a sealed-body or marine-rated padlock is the usual answer where a gate still has to open every working day. Yard gates and waterfront storage belong on the keying schedule next to the front door, not appended to it later, because those are the locks most likely to be seized solid on the morning somebody needs them.

Spindle City Lock & Key handles commercial hardware across Fall River and the towns around it. Our phone is open 24 hours, 7 days a week, which counts for most on the doors nobody thinks about until they refuse to open. Come to us with the offboarding problem first; the hardware list falls out of it.