Skip navigation
Locked out? We typically arrive in 15 to 30 minutes. Call (503) 766-5541
Home/Blog/Commercial key guide
Commercial key guide

Master Key Systems Seven Mistakes That Leave a Building Open

A master key system saves a ring full of keys. Set up badly, it also lets far more keys open each door than you think.

Call (503) 766-5541

Author Source EEAT Authors · Jack's Author Page

Tree diagram of a master key system for a three floor office. A great grand master opens every lock, two grand masters split the floors, three masters each open one floor, and nine change keys each open one door. A side panel says up to 64 keys can turn one six pin cylinder when every pin has two shear lines

Pick ABC Lock and Safe as a preferred source on Google

A lot of owners think a master key system is simply one handy key that opens every door, with no downside. That is not how the lock sees it. To let two keys turn the same cylinder, the locksmith adds a small extra pin in each chamber, and Wikipedia's entry on master keying shows the cost. A six pin cylinder built for one key can be turned by up to 64 keys when every chamber has two shear lines. We set up master key systems for Portland businesses, and this guide covers the seven mistakes that turn a good system into a weak one.

What Matters

  • Every master pin opens a door wider. Each one lets more key cuts turn the lock, so use them only where you need them.
  • Keep outside doors on their own keys. Or put them on a card or code system instead.
  • A copyable keyway undoes the whole plan. A restricted keyway keeps blanks out of the hardware store.
  • Records are part of the system. Write down who holds which key, and who can order more.
  • One lock and one change key can give up the master. A security researcher proved it in 2003 with a few blanks and a file.
  • A lost top master means a full rekey. A lost change key usually means one cylinder.

How a Master Key System Works

A normal pin lock has one line inside it where the pins must line up for the plug to turn. A master keyed lock has two lines in some chambers. One fits the door's own key. The other fits the master. Wikipedia notes that master keying in general lowers security, since the extra lines give a picker more ways in and let more keys work.

Keys come in levels. A 2008 Locksmith Ledger piece by Rod Oden calls the top one the TMK, or top master key, with sub masters and change keys below it. Each level opens everything under it.

Key levelWhat it opensWho usually holds it
Great grand masterEvery lock in the systemThe owner, kept locked away
Grand masterA whole group of masters, like a buildingProperty or facility manager
MasterOne floor, wing or departmentSupervisor or cleaning crew lead
Change keyOne door onlyThe person who works or lives there

Small shops often need only two levels, a master and change keys. Each extra level adds more master pins, so add levels only when a real person needs them.

There is plenty of room for change keys. Gale Johnson, editor emeritus of Locksmith Ledger, wrote in 2017 that one common layout gives 4,096 change keys on paper for a six pin lock. He adds that the real number runs about 10% lower once cut limits are applied.

Seven Mistakes That Weaken a Master Key System

1. Mastering Every Door, Even the Outside Ones

The front door, back door and loading door face the street. Every master pin in them gives an outsider more keys that could work. A 2003 Locksmith Ledger article, The Case Against Master Keying, says to put master pins only where they are needed. It also suggests keying outside doors differently or adding a second access system on them.

Keep the street doors simple. Give them their own key, or put them on a keypad or card reader you can change in a minute.

2. Using a Keyway Anyone Can Copy

A master key cut on a common blank can be copied at many key counters. That one copy can open every door in the building.

A restricted keyway closes that gap. Schlage says its Everest 29 R and T keyways are restricted. The blanks are tightly controlled, the key design is patent protected until 2029, and only authorized dealers and end users can get them. Its S keyways are not restricted. Ask which family you are buying before the system is built, not after.

3. Keeping No Records of Who Holds What

A master key system without records is a guess. Rod Oden lists what good records cover. Who can order keys and rekeying, who approves the plan, who keeps the records, how lost keys get replaced, and how returned keys are handled.

Start simple. Stamp a number on every key. Keep a sheet with the number, the person, the date out and the date back. Have each person sign for the key. When someone leaves, the sheet tells you which doors they could open.

4. Skipping the Planning Meeting

Builders and owners often settle the key plan on the day the doors are hung. That is late. The Builders Hardware Manufacturers Association describes its keying standard, ANSI/BHMA A156.28, as a guide for owners and security pros. It calls the keying conference essential and covers how to keep a system useful as needs grow.

Bring three things to that meeting. A floor plan with every door marked. A list of who needs to open what. A guess at how you will grow over the next five years. A system planned for growth can add doors later without starting over.

5. Forcing Old Keys Into the New System

Some systems grow by taking whatever key a lock already had and adding pins until the master also works. Rod Oden calls this the worst practice. A lock that opens for two different change keys may also have been cross keyed with no record of it.

Test it yourself. If one tenant's key opens a neighbor's door, the system has a hole in it. Do not wait for a break in to find out.

6. Thinking the Master Is Safe Because Nobody Has It

The master does not have to be stolen to be copied. In 2003, security researcher Matt Blaze published a method that needs only one master keyed lock and its change key. His paper's summary says the rest takes a few key blanks and a metal file, with no special skill. The Case Against Master Keying puts it at about one blank per pin, so five blanks for a five pin lock.

So any tenant or worker with one change key could, in theory, make a master. A restricted keyway makes the blanks hard to get, and splitting the system by floor limits what one master opens. That is why the first two mistakes matter so much.

7. Never Updating the System

Keys walk away. People quit. Masters wear down until the cuts are hard to read, which Rod Oden lists as a common problem. The Case Against Master Keying says to update systems from time to time and to keep key records accurate.

Plan a review whenever a master key holder leaves, after any break in, and every few years even when nothing seems wrong. In one case Oden describes, a campus lost its key records, had to work out the old cuts, then rekeyed to a new system over about six months. Good records would have saved most of that work.

What Happens When a Key Goes Missing

Jack Mathes working on the lock of a front door during an ABC Lock and Safe house call

The answer turns on which key was lost.

Key that went missingWhat usually needs to change
One change keyThat one cylinder, repinned to a new change key in the same system
A master keyEvery lock under that master
A grand master keyEvery lock under that grand master
The top master keyThe whole system

This is the real reason to keep levels split. A lost floor master means rekeying one floor, not the whole building. It is also why so few people should carry the top key.

Rental Buildings in Oregon

Apartment and duplex owners have a few extra rules to plan around. ORS 90.320 requires the landlord to provide working locks on every dwelling entrance door, plus keys for locks that need them.

ORS 90.459 covers a tenant who is a victim of domestic violence, sexual assault, bias crime or stalking. That tenant can ask for the locks to be changed, and the landlord has to act promptly. The tenant pays when the landlord makes the change. If the landlord does not act, the tenant may change the locks and must then give the landlord a key.

A master keyed building can handle this well. A locksmith repins that one unit's cylinder to a new change key, and the master still works. Plan for it ahead of time, so a quick change does not leave a lock outside your system.

Setting Up or Fixing a Master Key System?

ABC Lock and Safe has served Portland since 1985. We set up master key systems and rekey whole offices the same day, and we work with several major restricted keyway makers. See our commercial locksmith service for businesses, or our residential locksmith service for homes and rentals. Older buildings with mortise hardware can be part of a system too, and our guide on mortise and cylindrical locks shows how to tell which kind you have. You get the price on the phone first.

Planning a master key system or worried about a lost master? Call (503) 766-5541.

Pages Cited

Wikipedia, Master Keying, November 2026
Locksmith Ledger, The Case Against Master Keying, November 2026
Locksmith Ledger, Assessing Existing Master Key Systems, November 2026
Locksmith Ledger, Mastering the Art of Masterkeying, November 2026
Matt Blaze, Rights Amplification in Master Keyed Mechanical Locks, November 2026
Schlage, Everest 29 Keyways, November 2026
BHMA, ANSI/BHMA A156.28 Recommended Practices for Mechanical Keying Systems, November 2026
ORS 90.320, Landlord to Maintain Premises, November 2026
ORS 90.459, Change of Locks at Request of Victim, November 2026

Quick answers

Your Next Question

How does a master key system work?
Some chambers in each lock get a small extra pin, so the pins line up at two heights. One height fits the door's own key and the other fits the master. Each key level opens every lock below it.
Can a master key open any door?
No. A master key opens only the locks pinned for it in that one system. Locks outside the system, or doors kept on their own keys, will not open with it.
What are the disadvantages of master key locks?
Each master pin lets more key cuts turn the lock, which makes it easier to pick and easier to beat with a made key. A lost master also means rekeying every lock under it. Records and a restricted keyway cut those risks.
What happens if a master key is lost?
Every lock that key opens should be rekeyed. That is one floor for a floor master and the whole system for the top master. A lost change key usually means repinning just that one door.
Can a master key be copied?
On a common keyway, yes, at many key counters. On a restricted keyway the blanks are controlled by the maker and sold only to authorized dealers, which makes copies much harder to get.
Is a master key system worth it for a small business?
Often, yes, once you have more than a few doors and more than a few people. Keep it to two levels if you can, keep outside doors separate, and track every key.
Find Us

Where to Find ABC Lock & Safe

3255 NE Wygant St, Portland, OR 97211

Need us now?

Don't Panic. Just Call.

A real dispatcher answers, sets expectations on time and cost, and gets a technician en route. Open 24 hours, 7 days a week.

Direct line (503) 766-5541 Tap to Call
Call now (503) 766-5541