Keypad Entry and Code Management

Why codes need managing

A keypad removes the need to carry a key, and it lets you give access to many people without cutting copies. The cost is that a code is easy to share and hard to take back. A code that has been told to a cleaner, a dog walker, a relative and a former roommate is no longer a secret in any meaningful sense. Good keypad entry depends less on the hardware than on how codes are handed out and retired.

This article covers codes for door keypads. The same ideas apply to alarm panel codes, which are discussed further in articles on entry delay and duress codes.

Choosing a good code

• Avoid obvious numbers. Birth years, addresses, phone number digits, repeated digits such as 1111 and runs like 1234 are commonly guessed first.
• Use as many digits as the device allows. More digits means more possible combinations. Some devices allow codes of different lengths, and a longer one is usually harder to guess.
• Do not reuse codes. A door code should not match a bank PIN or a phone passcode.
• Pick something you can remember without writing it near the door. A note taped inside a cupboard defeats the purpose.

No code is guessproof, but a thoughtfully chosen one is much less likely to be guessed than a predictable one. Some keypads limit repeated wrong attempts with a lockout delay; a feature like this is worth looking for.

One code per person

Where the device supports multiple user codes, give each person their own. The reasons are practical:

1. If someone leaves or loses trust, you can delete just their code without changing everyone else’s.
2. Many systems keep an access log showing which user code was used and when. That only helps if codes are individual. The same log idea is part of the trade-offs of smart locks.
3. People are less likely to pass on a code that is tied to them by name.

If your keypad supports only one shared code, you will need to change it more often and think carefully about who is told.

Temporary and scheduled codes

Some locks support codes that work only on certain days or hours, or that expire on a date. These suit cleaners, trade workers, guests and short-term rental visitors. Where available, use them instead of handing out the permanent code. Set an end date at the moment you create the code, so the expiry does not depend on your memory. Short-term hosts should also review the points raised in the article on vacation rentals.

Rotating codes

How often to change a code depends on the situation. Reasonable triggers include:

• Someone with the code moves out, leaves a job or ends a service arrangement.
• A phone, wallet or note containing the code is lost.
• You suspect the code has been seen, for example someone watched you type it.
• A set period has passed, with something like several months being common for shared codes. The right interval is a judgment call, and more frequent changes are only worthwhile if you actually keep up with them.

For households, build the change into moves and life events, like new occupants or after a break-up of a household; the article on occupant changes talks through this. For businesses, tie code changes to staff departures and to the processes described in the article on employee credentials.

Retiring codes properly

When someone no longer needs access:

• Delete their individual code, or change the shared one, the same day where possible.
• Check that the change has actually been saved on the device. Some keypads need you to confirm the change, and a mistake can leave the old code active.
• Check for other ways in that the person may still have: spare keys, remote app access, or a stored fob. The article on key control covers keys, and a key holder list helps for after-hours alarms.
• Update any list of who holds codes.

If a lock or panel is second-hand or came with a new property, clear all stored codes and start fresh. Master or installer codes set at the factory should be changed from their defaults.

Protecting the keypad itself

• Watch for worn buttons or smudges that reveal which digits are used, and clean the keypad. Some keypads randomize the layout, which can help; others do not.
• Keep the keypad shielded from view where possible, though this is not always practical at an outdoor door.
• Keep batteries fresh. A dead keypad can lock you out, so know the manual backup, such as a physical key override or an external power contact, and keep that key somewhere safe but not hidden under a mat.
• For networked locks, secure the app and account with a strong password and two-factor authentication where offered, and keep firmware updated.

Keypads in businesses

In a small business, the main challenge is knowing who has what. A written register of who holds which code, when it was issued and when it ends helps. Shared codes are a common weakness because nobody is accountable for them. Where you can, give individual codes, review the list on a schedule, and remove inactive ones. Alarm and door codes for opening and closing duties relate to closing procedures and should be handled with the same discipline.

Limits

A keypad lock is only one layer. A code does not help if the door or frame can be forced, which is covered in the article on door deadbolts. Some keypad models can also be defeated by physical attack on the lock body, and no product is immune. Treat codes as one part of a wider approach to who can enter and when, and consider that logs and notifications, where available, are only useful if someone reads them.