A master key system isn’t a single key that opens every door. It’s a hierarchy, a structured set of keys where each level opens a specific group of doors. The hierarchy is defined by a pinning chart, which is the document that specifies exactly which pin combination goes in every cylinder in the system. The chart is the system. Without it, the system is just a collection of locks that someone has lost track of.
The Levels of a Master Key System
Change Key (Tenant Key)
The change key is the lowest level in the hierarchy. It operates one cylinder, one door. A tenant’s key that opens their unit and nothing else is a change key. Every cylinder in the system has a unique change key.
Sub-Master Key
A sub-master key operates a group of cylinders within the system, for example, all the doors on one floor of a building, or all the doors in one wing. A maintenance worker might carry a sub-master key that opens every door on Floor 3 but not on Floor 4. The sub-master is above the change key in the hierarchy: it operates multiple cylinders, but not all of them.
Master Key
The master key operates all the cylinders that the sub-masters operate, and typically every cylinder in the system. The property manager carries the master key. It opens every door on the property that’s part of the master key system.
Grand Master Key
The grand master key is used when a system spans multiple buildings or multiple properties. It operates every cylinder across all buildings in the system. A facilities director who oversees multiple properties might carry the grand master. Not every system needs a grand master level, a single-building system typically has only change keys, a sub-master, and a master.
How the Pinning Makes It Work
A standard pin tumbler cylinder uses a single set of pin stacks. Each stack has a driver pin and a key pin. When the correct key is inserted, the key pins lift the driver pins to the shear line, and the cylinder turns. One key, one cylinder.
A master key system adds master pins to each stack. The master pin is an additional pin that creates a second shear line. Now the cylinder can be operated by two different keys: the change key (which lifts the pins to the original shear line) and the master key (which lifts the pins to the master shear line).
At each level of the hierarchy, additional master pins are added. A system with change keys and a master key has two shear lines per stack. A system with change keys, sub-masters, a master, and a grand master has four shear lines per stack.
The Problem With Over-Pinning
Every additional master pin added to a stack creates an additional shear line, which means an additional combination that will operate the cylinder. The more levels in the hierarchy, the more master pins in each stack, and the more likely it becomes that a key from one part of the system will unintentionally operate a cylinder in another part.
This is called cross-keying, and it’s the most common failure mode in a master key system that’s been added to over the years without documentation. Each time a new tenant key is added, more master pins are stacked. After enough additions, the pinning chart no longer matches what’s in the cylinders, and keys start opening doors they shouldn’t.
The signs of an over-pinned system: a tenant key that opens a neighboring unit, a master key that works in some cylinders but not others, cylinders that feel gritty or resistant when the key is turned, and keys that work when inserted partway but not fully.
Designing a System Correctly
A well-designed master key system starts with a door schedule, a complete list of every opening in the building, its location, its function, and who needs access. From the door schedule, the pinning chart is built:
- Assign change keys. Each cylinder gets a unique change key combination.
- Assign sub-masters. Cylinders are grouped by floor, wing, or function. Each group shares a sub-master combination.
- Assign the master. All cylinders share a master combination.
- Assign the grand master (if needed). All cylinders share a grand master combination.
- Calculate the total pin stacks. Each stack’s total height has to add up correctly for every key that operates it. This is where a system that’s been expanded ad hoc starts to break down, the math has to work at every level.
The chart is then used to pin every cylinder, cut every key, and document the system. The property manager receives a copy of the chart and the key log.
Restricted Keyway Systems
A master key system on a restricted keyway, Medeco or Mul-T-Lock, adds patent protection and serialized key tracking to the hierarchy. The key blanks aren’t available to unauthorized dealers, so a tenant can’t get a copy made at a hardware store. Every blank is serialized and tracked from the factory to the dealer to the building.
Pro Locksmith LLC is an authorized dealer for both Medeco and Mul-T-Lock. Both systems support full master key hierarchies, change keys, sub-masters, masters, and grand masters, with the added security of patent-protected blanks and factory-tracked distribution.
When to Rebuild vs. Expand
A master key system that’s been expanded without documentation needs to be rebuilt. Adding more master pins to an undocumented system doesn’t fix it, it makes the cross-keying worse. Rebuilding means:
- Cutting new keys at every level to a new pinning chart
- Re-pinning every cylinder to the new chart
- Verifying that no cross-keying exists
- Documenting the new system and delivering the chart to the property manager
This is more work than adding another key, but it’s the only way to restore a system that’s lost its integrity. A rebuilt system, properly documented, can be expanded safely for years.
What Pro Locksmith Does
Pro Locksmith LLC designs, installs, and rebuilds master key systems for commercial and multi-tenant residential buildings throughout Broward County and Miami-Dade, including Fort Lauderdale, Hollywood, Pembroke Pines, Davie, Pompano Beach, Coral Springs, and Miami. We build pinning charts from door schedules, pin cylinders to spec, cut keys, and deliver full documentation. For buildings that need key control beyond a standard system, we install Medeco and Mul-T-Lock restricted keyway systems. Licensed and insured. Flat-rate pricing quoted up front. COI provided. Employees, not subcontractors.
For a master key system evaluation or rebuild, call Pro Locksmith LLC at (954) 406-8266.
Sources
- ANSI/BHMA A156.2, Bored and Preassembled Locks & Latches
- ANSI/BHMA A156.13, Mortise Locks
- Medeco Security Locks Product Catalog
- Mul-T-Lock 2016 Product Catalog
How Keys Are Named in a Well-Run System
A master key system needs a naming convention so that anyone reading the key log knows at a glance where a key sits in the hierarchy. Many locksmiths use a coding style in which each level adds a character to the name of the level above it. For example:
- AA for the grand master.
- AA1 for a master under that grand master.
- AA1A for a sub-master under master AA1.
- AA1A1 for a change key under that sub-master.
Reading the code from left to right tells you exactly which keys above it will also open that door. The code is stamped on the key and recorded in the key log. The door name is not. A lost key stamped “AA1A1” tells a stranger nothing, while a lost key stamped “Server Room” tells them exactly what to look for.
On that note, the words “Do Not Duplicate” stamped on a standard key are a request, not a control. Many copy counters ignore them. Real duplication control comes from a restricted keyway, which the section above covers.
Two Walkthrough Examples
A hierarchy is easier to understand with real layouts. These are simplified examples of how a system might be planned, not templates to copy.
A two-story office building with four tenants
- Each tenant suite entrance gets its own change key, and each tenant can have interior office doors on sub-level change keys under a sub-master the tenant controls.
- The building’s common doors, such as the lobby, the mechanical room, and the roof access, sit under a separate sub-master held by building maintenance.
- The property manager’s master key opens every suite entrance and every common door.
- Janitorial staff may carry a key that opens the common restrooms and the janitor’s closets only.
A small apartment community
- Every unit has its own change key. Unit keys never open a neighbor’s door.
- Maintenance staff carry a sub-master for units, used only with notice to residents.
- Laundry rooms, the pool gate, and the mail area may be keyed so every resident’s unit key also opens them. This is an intentional exception discussed below.
- The office, the maintenance shop, and the equipment rooms are keyed separately from the resident side, under a level held only by staff.
Intentional Cross-Keying: Use It Sparingly
The article above explains accidental cross-keying, where keys open doors they should not because the system was expanded carelessly. There is also intentional cross-keying, where a door is deliberately set to accept several different change keys. The pool gate that every resident can open with their unit key is an example.
Intentional cross-keying is convenient, but it has a cost. Every cross-keyed cylinder accepts more than one combination, which adds shear lines and makes the cylinder easier to manipulate. It also makes the system harder to maintain, because rekeying a unit may require changes at the shared door too. A common alternative is to give shared amenity doors their own key or an electronic credential, so resident unit keys stay unique and uncomplicated.
Keyed-Alike Groups Within a System
Sometimes several doors should all open with the same change key. All the restrooms in an office, all the storage closets on one floor, or all the doors of one tenant’s suite are typical examples. This is keyed-alike within the system: those cylinders share one change key and still respond to the sub-master and master above them. It simplifies the key ring for the users of those doors without adding the extra shear lines of cross-keying.
Security Trade-Offs of Deep Hierarchies
Every level in a hierarchy adds master pins, and every master pin adds another combination that turns the cylinder. That makes the cylinder easier to pick or manipulate and increases the chance of unintended keys working. A deep hierarchy on a standard cylinder is therefore less secure, door by door, than a shallow one.
Good design keeps the hierarchy only as deep as the organization really needs. A single small building rarely needs a grand master. A tenant with three doors rarely needs its own sub-master. When a deep system is truly needed, pairing it with high-security cylinders helps offset the weakness that extra master pins introduce.
The Risk Concentrated in a Master Key
A master key is a convenience and a liability at the same time. If a change key is lost, one door is exposed. If a master key is lost, every door under it is exposed, and restoring security means rekeying every cylinder at that level and below. On a large property, that is a significant job.
This is why master keys should be held by as few people as possible, signed for, and never loaned casually. For routine work, maintenance staff can often carry a sub-master that covers only the area they are assigned to. A master that is rarely used can live in a locked key cabinet and be signed out when needed.
Planning for Growth
A good pinning chart leaves room for the future. When the system is designed, the locksmith can reserve unused change key combinations and unused sub-master groups for doors that do not exist yet. A property that later adds a building, divides a suite, or adds a new tenant can then bring new cylinders into the system without disturbing existing keys and without the ad hoc expansion that leads to cross-keying.
When you request a new system, tell us about any expansion you can foresee: an unfinished shell space, a planned renovation, or a second building on the same campus. Planning that capacity into the chart at the start is simple. Adding it later is difficult.
Doors That Should Stay Off the Master
Not every door belongs under the master key. Some rooms are sensitive enough that the property manager’s master should not open them: a pharmacy storage room, a tenant’s server room, a cash office, or an evidence or records room. These doors can be keyed completely outside the hierarchy, so only their own key opens them. The trade-off is that the manager cannot enter in an emergency without that key, so the key should be held by the tenant or department and a sealed copy kept in a secure place agreed on in advance. Many tenants, especially medical and financial ones, ask for this arrangement in their lease.
Emergency Responder Access
Many commercial buildings keep a rapid entry key box outside the main entrance for the fire department. The keys inside should be clearly tagged and should actually work. When the building is rekeyed or the master system is rebuilt, the keys in that box need to be updated too. It is one of the easiest steps to forget.
Interchangeable Cores
Some properties use interchangeable core cylinders. The core, which holds the pins, can be removed from the lock with a special control key and replaced with a different core in seconds. In a master key system, that means a door can be rekeyed by swapping cores, without removing the lock from the door. Properties with frequent tenant or staff changes often find that worth the additional cost of the hardware.
The control key is a powerful key and should be treated with even more care than the master, because it can remove the core from any cylinder in the system.
Construction Keying
In new construction or a major renovation, many people need to open doors before the owner moves in. Construction keying handles this. Cylinders are set up so a temporary construction key works during the build. When the owner takes possession, the construction key is permanently disabled, either by a simple step at each cylinder or by swapping temporary cores for permanent ones. The owner’s system then takes over, and every construction key in the hands of contractors stops working. If you are planning a build-out, ask how construction keys will be handled before cylinders are ordered.
Protecting the Pinning Chart
The pinning chart is the most sensitive document in the whole system. With it, someone can cut any key, including the master. The chart should be stored securely, with access limited to the property owner or the person responsible for key control, and a copy held by the locksmith who maintains the system. It should not be emailed around, left in a shared folder, or stored in the same office as the key cabinet without additional protection.
Compatibility With Existing Hardware
A master key system works only with cylinders that share the same keyway and pin format. If a property has a mix of lock brands, some locks may be able to accept compatible cylinders, and some may need to be replaced to join the system. During the design phase, we inventory the existing locks and identify which can stay, which need new cylinders, and which need replacement. That inventory usually becomes the door schedule the chart is built from.
Keeping the System Healthy
- Record every key issued, every key returned, and every rekey in the key log.
- Audit the log against actual key holders at least once a year.
- Rekey a cylinder as soon as its change key is unaccounted for.
- Route every new cylinder or key through the locksmith who holds the chart, so the chart and the building never drift apart.
- Do not let a maintenance vendor add cylinders with their own keys “just for now.”
We design and maintain master key systems for commercial and multi-tenant properties across Broward County, north through Boca Raton and Delray Beach to West Palm Beach for commercial clients, and south to Aventura, North Miami, Coral Gables, and Coconut Grove.