Master Key Systems: A Complete Guide for Property Managers

Published 2026-10-06

If you manage a building with more than a handful of doors, you already live with the trade-off a master key system is designed to solve: tenants and staff need to get into their own spaces, and only their own spaces, while a few people — you, maintenance, security, the fire department — need to get into almost everything. Carrying forty keys does not work. Giving everyone the same key does not work either.

A master key system is the standard answer, and it works well when it is planned and managed. When it is not, it quietly turns into a building where nobody knows who can open what. This guide explains how these systems work in plain terms, what decisions you should make before a locksmith starts cutting keys, and how to keep the system under control as people come and go.

You do not need to understand pin math to manage a master key system. You do need to understand the structure, because almost every expensive keying problem starts with a decision nobody realized they were making.

What a master key system actually is

A master key system is a set of locks and keys arranged so that each lock can be opened by more than one key — usually its own individual key plus one or more higher-level keys — while each key opens only the locks it is meant to.

In a building without one, every lock is keyed differently and every key opens exactly one lock. In a building where everything is keyed alike, one key opens every door. A master key system sits between those two extremes and lets you decide, door by door, who has access.

The important idea is that access is designed, not accidental. Someone — ideally you, with your locksmith — decides which groups of doors belong together, which people need which groups, and how many levels of access the building needs. The locksmith then translates that plan into the physical pins inside each lock. If the plan is vague, the locks will faithfully reproduce the vagueness.

The levels: change keys, master keys, grand master keys

Master key systems are described in levels. The names are standard across the industry, which is useful when you talk to different locksmiths.

Change key

A change key operates one lock, or a small set of locks keyed alike — for example, a single apartment, an office, or one tenant’s suite. This is the key you hand to the person who uses the space. It is the lowest level and by far the most numerous.

Master key

A master key operates a group of change-key locks. A typical example is a floor master that opens every unit on the third floor, or a department master that opens every office in accounting. The person holding it can go anywhere within that group, but not into other groups.

Grand master key

A grand master key operates several master-key groups — for example, every floor of one building. In many buildings this is the key held by the property manager and senior maintenance staff.

Great grand master and beyond

Large campuses add another level above the grand master, often called a great grand master, which might open every building on a site. Some systems go further. Each extra level is useful for very large or complex properties, and each one has a cost, which the next sections explain.

A simple example

Picture a three-story office building with ten suites per floor:

Each suite gets its own change key.
Each floor has a master key that opens its ten suites.
The building has a grand master key that opens all thirty suites.
Mechanical rooms and the roof are on a separate group that only maintenance’s master key opens.

That last point matters. Not every door has to sit neatly under the hierarchy. Shared spaces, utility rooms and high-security rooms are often placed in their own groups so that ordinary keys never reach them.

Cross keying

Cross keying means letting a change key open a lock outside its normal group — for example, letting every tenant’s key open the front entrance and the mail room. It is common and convenient. It is also one of the most frequent sources of trouble when it is done casually, because every cross-keyed lock accepts more keys than a normal lock does. Treat each cross-keying request as a security decision, not a favor, and write it down.

How one lock accepts more than one key

You do not need the details, but a basic picture helps you understand why some requests are easy and others are not.

A standard pin tumbler lock contains a row of small spring-loaded pin stacks. A key lifts each stack to a precise height. When every stack is at the right height, the plug inside the lock can turn and the door opens. A different key lifts the stacks to different heights and the plug stays locked.

To make a lock accept two keys, the locksmith adds extra small pins, called master pins, to some of the stacks. Each master pin creates a second correct height in that position. With the right combination of master pins, the lock opens for the change key’s heights and for the master key’s heights.

Interchangeable core locks add one more layer: a separate control key that removes the whole core from the lock housing. Inside each pin stack, an additional pin creates a third height used only by the control key. If you want to see what that looks like in practice, our SFIC pinning calculator shows the full pin stack for every chamber of a small format interchangeable core.

The practical takeaway: every additional key a lock must accept means more master pins in that lock. That is the mechanism behind the next section.

Why more levels means less security

Every master pin you add to a lock creates additional heights at which that position will turn. When you combine those extra heights across all the positions in a lock, the number of different key combinations that can open it grows — and it includes combinations that nobody intended to issue. Locksmiths sometimes call these unintended working keys “phantom” or “incidental” keys.

This is not a reason to avoid master keying. A well-designed system keeps the effect small and controlled. It is a reason to be deliberate about three things:

Number of levels. Each level you add above the change key generally requires more master pins in every lock. Ask for the levels your building actually needs, not the levels it might need someday.
Cross keying. A lock that must accept an extra change key needs extra master pins. A few cross-keyed doors are normal; a building where many locks accept many keys has a much weaker system than its key schedule suggests.
System size. A key system has a finite number of usable combinations. Stretching one system across too many doors, too many levels and too many cross-keyed exceptions uses those combinations up and makes it harder to keep keys from overlapping.

The physical security of the locks is only half the story, though. In practice, most master key systems are compromised by keys, not by locks: a grand master that was never returned, a key copied at a hardware store, a key schedule left in an unlocked drawer. That is why key control gets its own section below.

Planning a system: what to decide before you call a locksmith

Locksmiths and the industry’s own guidance call the planning meeting a keying conference. The Builders Hardware Manufacturers Association publishes a recommended practice for owners and security staff on exactly this topic — ANSI/BHMA A156.28, Recommended Practices for Mechanical Keying Systems — which covers system planning, development, key management and maintenance. You do not need to read it to run a good conference, but it is the reference to point to if anyone asks why you are asking for so much detail.

Before the conference, work through these questions. Writing the answers down is most of the value.

Who needs access to what?

List the groups of people — tenants, cleaning staff, maintenance, security, management, contractors, emergency services — and, for each group, the doors they need. Start from roles, not names. “Night cleaning crew” is a role; the people in it will change.

How do doors group together?

Look for natural groups: floors, buildings, departments, tenant suites, mechanical and utility spaces, high-security rooms. Each group is a candidate for one master key. Rooms that do not fit any group, or that should be reachable by very few people, belong in their own group.

How many levels do you really need?

Many buildings need only change keys, one level of masters, and a grand master. Add a level only if you can name the people who will carry it.

What will change in the next five to ten years?

Planned expansions, tenant turnover, renovations and new buildings all affect the system. A system designed with room to grow can absorb new doors without re-keying everything. Tell the locksmith what you know, even if it is uncertain.

Which doors need extra protection?

Server rooms, pharmacies, cash rooms, records storage and similar spaces may warrant a separate key system, a restricted keyway, or electronic access instead of a master key. Decide this now rather than adding exceptions later.

Who owns the system records?

A master key system is documented in a key schedule (who holds which key) and a bitting list (the cut depths for each key). The bitting list is the most sensitive document in the system: with it, a person could reproduce keys. Decide who keeps these records, where, and who else may see them.

What to ask for in a quote

When you compare locksmiths, ask each one to answer the same questions in writing. The answers tell you as much about the locksmith as about the price.

Keyway and key control. What keyway will the system use? Is it a restricted or patented keyway that ordinary key shops cannot copy, or an open keyway that anyone can duplicate? For example, Schlage’s Everest 29 small format cores use a patented key blank that only Schlage may manufacture, and their restricted keyways are registered to the building owner — blanks, cut keys and cores are supplied only through authorized distributors with the owner’s letter of authorization (Schlage service manual, p. 6). Restricted keyways like this are one of the most effective protections you can buy.
Levels and cross keying. How many levels does the proposed design use, and which doors are cross keyed? Ask the locksmith to explain any level or cross-keyed door you did not request.
Expansion capacity. How many more change keys and master groups can the system add before it needs to be redesigned?
Records. Will you receive a key schedule and a copy of the system’s records? Who else keeps a copy, and how is it secured?
Key stamping. How will keys be identified? A stamped code that refers to your key schedule is useful. A key stamped with its own cut depths is a security problem.
Duplicate keys. How do you order additional keys, who is authorized to order them, and how does the locksmith verify the request?
Hardware. Will the system use conventional cylinders or interchangeable cores, and why? (See the last section.)
Future changes. What does it cost and how long does it take to re-key one door, one master group, or the whole building after a lost key?

Be wary of a quote that does not mention key control or records at all. A system that is cheap to install and impossible to control is not cheap.

Key control: who holds what, and what happens when someone leaves

The locks are installed once. Key control is the part you do every week, and it is where most systems succeed or fail.

Keep an issue log

For every key issued, record the key code, the person, the date, and their signature. Record returns the same way. A shared spreadsheet is fine for a small building; larger properties often use dedicated key-management software. The format matters less than the habit.

Issue the lowest key that works

Give each person the lowest-level key that lets them do their job. A contractor who needs one mechanical room for a week does not need a master key. A tenant does not need a key to the roof. Every high-level key in circulation is a key you will have to worry about if it is lost.

Make returns part of offboarding

Tie key returns to departure checklists for staff and to move-out procedures for tenants. Do not release a final paycheck, deposit or contract payment until keys are returned or formally reported lost — check with your HR and legal advisors on what you can require in your jurisdiction.

Treat “Do Not Duplicate” as a request, not a control

Keys stamped “Do Not Duplicate” are a polite request to key cutters. They are not a technical barrier. Real protection against unauthorized copies comes from restricted or patented keyways, where blanks are only supplied to authorized dealers under agreement.

Audit regularly

Once or twice a year, compare your log against reality: ask key holders to show their keys, and follow up on anything that does not match. Audits are tedious, and they are the only way to find out that a key is missing before it matters.

Protect the records

Keep the bitting list somewhere locked, with a short list of people who can access it. Do not email it around. If the system is changed, update the records the same day.

When to rekey and when to start over

Rekeying after a lost key

What you do after a lost key depends on its level. A lost change key usually means re-keying one lock or one small group. A lost master key means re-keying every lock that key opened. A lost grand master can mean re-keying most of the building. This is the strongest practical argument for issuing high-level keys sparingly: the cost of losing one scales with how much it opens.

Before re-keying, ask your locksmith which locks the lost key actually operates according to the system records. Without accurate records, the safe answer is often “more locks than you hoped.”

Signs the system needs to be redesigned

Sometimes re-keying individual locks is no longer enough. Consider starting over when:

Nobody can produce an accurate key schedule or bitting list.
Several master or grand master keys are unaccounted for.
The system has been extended so many times that new keys keep conflicting with old ones.
Cross keying has spread to the point that you cannot say which keys open which doors.
The keyway is an open one and keys have been copied freely for years.

A redesigned system can often reuse the existing lock hardware — only the keying changes — but that is a question for your locksmith, and the answer depends on the hardware you have.

Interchangeable cores: why large properties use them

In a conventional lock, the part that holds the pins — the cylinder — stays in the door. Re-keying it means a locksmith takes it apart and repins it, door by door.

An interchangeable core (IC) lock separates the two. The pinned core slides into a housing in the lock and is held there by a mechanism that only a special control key releases. With the control key, a trained staff member can remove a core and insert a different one in seconds, without taking the lock apart.

That changes how re-keying works:

Fast response. After a lost key or a tenant move-out, you swap the affected cores with spares that are already pinned to new combinations, and re-pin the removed cores later.
Less downtime. A door does not have to wait for a locksmith visit to be secured.
Standard formats. Small format interchangeable cores (SFIC) — the figure-8 shaped cores originally introduced by Best — are made by several manufacturers, including Schlage and Sargent, to the same pinning systems, so cores from different makers can often be used in the same housings. Large format interchangeable cores (LFIC) are manufacturer-specific.

The trade-off is that the control key becomes the most powerful key in the system. Whoever holds it can remove any core and install their own. Control keys should be held by very few people, logged like any other key, and never used as everyday keys.

If your locksmith proposes interchangeable cores, ask who will hold control keys, how many spare cores they recommend keeping on hand, and how core changes will be recorded.

LockSpecs is a reference site, not a locksmith service. This guide is general information. Your locksmith and the manufacturer documentation for your hardware are the authority on your specific system. The SFIC details above are drawn from the Schlage small format core service manual and the Sargent SFIC keying manual. See About for how we source information.