Access control is usually sold as an upgrade to keys. It is more accurate to call it a different answer to a different question. A key answers “does this person have a key.” An access control system answers “is this person allowed through this door, at this time, today” — and it can change its mind without anyone touching the hardware. That distinction is why the technology exists, and also why it is sometimes the wrong purchase. This page covers what the parts are, which decisions matter, and where a mechanical system still wins; our access control systems page covers what we install and support.
What It Replaces, and When Keys Are Still the Better Answer
The problem access control solves is not locking doors; keys do that perfectly well. It solves churn — people arriving, leaving, changing roles, losing things — and the fact that a key, once issued, cannot be recalled with any certainty. If your building has steady turnover, contractors who need access on some days and not others, or doors different groups should reach at different hours, that churn is expensive to manage with metal.
Where there is little churn, the calculation reverses. A small office with settled staff, a warehouse with one entrance, a professional suite where the same handful of people have held keys for years — these are well served by a designed master key hierarchy. A mechanical system has no software to license, no controller to fail and no power supply to age out, and with interchangeable cores a departing employee is a core swap rather than a rekey of the building. Anyone who tells you keys are obsolete is selling something. Mixed buildings are normal: readers on the perimeter and shared entrances, cylinders on interior doors where traffic is stable.
Standalone, Networked, Cloud or On-Premise
A standalone device — a keypad lock or a battery-powered reader lock — holds its own list of who may enter and knows nothing about any other door. It needs no cabling, which is why it appears on storerooms, gates and interior offices. Its limits are obvious: to change a code or revoke a credential you go to the door, and the audit record lives in the lock rather than anywhere useful.
A networked system puts readers on doors, wires them back to controllers, and runs the whole set from one place, so every permission change happens once and applies everywhere. That is the real product, and it is why networked systems earn their extra cost in any building with more than a couple of controlled doors.
The next decision is where the management software lives. On-premise means a server in the building that you own and that keeps working when the internet does not; it also means you handle backups, updates and eventually replacing it. Cloud-managed means the software runs off site and you administer through a browser, which suits property managers and multi-site operators who do not want a server closet, and which usually arrives as a subscription. Worth knowing: in a well-built cloud system the controllers hold permissions locally, so doors keep deciding correctly during an internet outage — you simply cannot make changes until the link returns. Ask that question specifically, because the answer varies by manufacturer.
Credentials: Cards, Fobs, PINs, Phones and Fingerprints
Every credential type trades one weakness for another, and vendor comparison charts rarely say so plainly.
- Cards and fobs. Cheap, familiar, easy to issue and easy to void. They are also shareable and losable, and older low-frequency proximity formats can be cloned with equipment anyone can buy. If you are staying with cards, encrypted smart credentials are the ones worth having.
- PIN codes. No hardware to issue, which is useful for occasional access. But codes get shared, written down and remembered by people who no longer work for you, and a keypad in the open can be watched. PIN is at its best as a second factor rather than the only one.
- Mobile credentials. The phone is already in the user’s hand and already protected by their own biometrics, and issuing or revoking access takes no physical delivery. The failure modes are a flat battery, a new handset, a user who declines the app, and a visitor whose phone you do not control. Our card access versus mobile credentials comparison goes through this properly.
- Biometrics. A fingerprint cannot be handed to a colleague, which is why it appears on high-value doors. It also fails on wet, dusty or damaged fingers, slows a busy entrance at shift change, and raises questions about storing biometric data that a small business should settle before collecting any. It suits a few doors, not every door.
Readers, Controllers and What Sits Behind the Door
A reader is only an input device. It reads a credential and passes the data to a controller, which holds the permission list and decides whether to release. That division matters when you are quoted a system: the controller and software are what you are really buying, and readers can usually be swapped later without disturbing them, provided the reader-to-controller link follows an open standard rather than a proprietary one. Prefer supervised, encrypted communication over the older unencrypted scheme still common on retrofits.
Controllers are sized by door count, so a system that fits your building exactly today needs another board before it can grow. If you expect to add doors, buy capacity now — expansion is cheap at installation and expensive as a return visit.
Electric Strikes, Maglocks and the Fail-Safe Decision
Something has to physically release the door, and the two common answers behave differently. An electric strike replaces the keeper in the frame and lets the latch pull free when energised; the door keeps its mechanical lock, so it can stay secured without power. A magnetic lock is a plate and an electromagnet holding the door shut by force alone, so it is unlocked whenever power is absent, without exception. The electric strikes versus maglocks comparison covers the trade-offs in detail.
The choice is bound up with fail-safe and fail-secure. Fail-safe hardware unlocks on power loss; fail-secure stays locked. This is not a preference but a code question, and the fire code cares because doors in an egress path must let people out during exactly the event most likely to cut the power. A maglock is inherently fail-safe and requires a compliant means of release on the egress side. A fail-secure strike on a stairwell door may be entirely correct, because the mechanical lever still retracts the latch from inside. Getting this backwards produces either a door that traps people or a building that unlocks itself in a power cut, and an inspector will find it.
Two consequences follow. First, any electrically locked egress door must release on fire alarm — the tie-in is not optional and not something to defer to a later phase. Second, delayed egress, where a door holds briefly after being pushed while an alarm sounds, is a permitted arrangement with conditions on signage, occupancy and alarm interface. It is not a way to stop people using a door you would rather they did not use.
Exit Requests, Door Monitoring and Power
People need to get out without presenting a credential, and the system needs to know what the door is doing. Two small devices handle that. A request-to-exit sensor, or a switch in the exit device, tells the controller an exit is legitimate so it releases the lock or suppresses the alarm. A door position switch reports whether the leaf is actually closed, which is the only way anyone learns a service door has been standing open since the delivery. Together they turn “someone badged in” into “someone badged in and the door closed behind them” — our page on door position switches and REX sensors explains where they go wrong.
Power is the part that gets shortchanged. Locking hardware, readers, controllers and the release devices all draw current, and they need a supply sized for the load with battery backup behind it. Batteries age quietly, so they need testing rather than trusting. Where a fire alarm interface is involved, the release must interrupt power to the lock directly rather than relying on the software to notice — a relay in the power path, not a message on a network.
Retrofitting Storefront and Multi-Tenant Doors
Most access control in South Florida goes onto doors that already exist, and aluminium storefront is the hardest of them. The stile is narrow, the glass leaves little metal to work with, and the frame is often part of an impact-rated assembly. Cutting into a tested assembly can void its rating, so the honest approach is to work with hardware designed for narrow stile, prepare the frame properly, and route wiring through a transfer hinge or an armoured door loop rather than draping cable across the opening. Our page on electric strike installation on aluminium storefront covers the preparation involved.
Multi-tenant buildings add their own layer. Intercom and video entry at the lobby lets residents or a receptionist see and admit visitors, and modern units route the call to a phone rather than a handset on a wall. Elevator floor control restricts which buttons a credential enables, which is how residential towers keep visitors off upper floors. Vehicle gates and parking use the same controllers with different readers — long-range credentials, plate recognition, or a call box — while the gate operator’s safety devices remain the operator’s responsibility. Where cameras are present, tying a door event to an image is worth doing, and our security camera installation page explains that integration.
Audit Trails, Administration and Ownership
The audit trail is what property managers actually buy. A record of which credential opened which door and when settles disputes about deliveries, cleaning crews and who was in the building when something went missing. It is also evidence, and only as good as the credential discipline behind it: if three people share one card, the log is fiction. That discipline belongs in a written key control policy covering both credentials and any keys still in circulation, with a named person responsible for issuing and revoking.
This is the moment access control earns its keep. When an employee leaves, their credential is disabled in software and their access ends at every door at once, with a record of the change. There is no key to chase and no lock to rekey — provided someone actually does it, as part of the offboarding routine rather than whenever it is next remembered.
Ownership takes two shapes. Buying outright means a larger initial cost, a smaller ongoing one, and hardware you own. Leasing or subscribing spreads the cost and usually bundles support and updates, but the system stops if you stop paying — read what happens to your controllers and your data at the end of the term. Either way there is administration: adding and removing people, adjusting schedules, keeping firmware current, testing batteries, and walking the doors periodically to confirm strikes, closers and position switches still do their jobs. Systems fail less from dramatic breakdowns than from nobody being responsible for them, and if you would rather that responsibility sat with a contractor, it is part of what our commercial locksmith service covers.
Pro Locksmith Fort Lauderdale is licensed and insured, and designs, installs and maintains access control for commercial and multi-tenant properties across Broward, Miami-Dade and Palm Beach counties. Call (954) 406-8266.