Physical security chapter

Locks, Keys & Access Control

Locks do not secure a collection by themselves. They regulate who may cross a boundary, under what conditions, and with what evidence afterward. Their real value depends on the strength of the surrounding door, frame, cabinet, safe or room, the control of keys and credentials, and the behaviour of everyone who uses them.

For a collector, the practical question is not simply whether something is locked. It is whether the complete arrangement delays the relevant attacker, restricts legitimate access to the smallest necessary area, reveals misuse, supports a credible response, and remains safe during fire, power failure or emergency salvage.

Foundation

What access control is meant to accomplish

A useful access-control system performs several functions at once. Focusing on the lock alone misses the human and administrative controls that determine whether the boundary works in practice.

Authorisation

Who is allowed through?

Define who may enter each boundary. Entry to a home, office or shared building should not automatically grant entry to the collection room, cabinets or safe.

Authentication

Is the person genuine?

A key, card, code, phone, biometric or human check must establish that the person requesting access is the authorised person, not merely someone claiming the role.

Restriction

How far may they go?

Access should stop at the smallest appropriate zone. A cleaner may enter a hallway, a photographer a prepared work area, and an emergency contact the building without receiving safe access.

Accountability

Can use be reconstructed?

The system should show, as far as proportionate, who held a key or credential, when access occurred, and whether permissions were changed, shared or revoked.

Delay

Does the boundary create useful time?

A lock matters when it increases the effort required to reach the collection and gives alarms, occupants, neighbours, guards or police time to notice and respond.

Control

Does ordinary access remain managed?

Many losses begin with a person who was legitimately admitted. Good control limits freedom, information, handling and unsupervised time even when the initial visit is genuine.

Layered defence

Build progressively stronger collection boundaries

The aim is not to fit a lock to everything. It is to create several proportionate boundaries so that one lost key, weak cabinet or open door does not expose the whole collection.

Layer 1

Outer approach

Gates, communal entrances, garages and property boundaries discourage casual approach and create the first opportunity for observation or detection.

Layer 2

Building shell

External doors, windows and accessible openings protect the premises. A strong front door does not compensate for a weak side door, garage, roof route or adjacent glazing.

Layer 3

Collection zone

A dedicated room separates collection activity from ordinary household, office or visitor circulation and conceals where the most valuable objects are kept.

Layer 4

Secure storage

Cabinets, drawers, safes and vaults provide category-level or object-level protection and can segment risk within the collection area.

Layer 5

Item restraint

Case locks, concealed fixings, security screws, mounts and restraints can slow individual removal or make it more conspicuous, provided they do not damage the object.

Hardware judgement

Common lock types and what their names do not tell you

Lock categories describe mechanisms or formats. They do not, by themselves, establish resistance, installation quality, key control or suitability for a particular collection boundary.

Latch

Useful for keeping a door closed, but not necessarily for resisting forced entry. A door that merely clicks shut should not be treated as securely locked.

Deadlock or deadbolt

Potentially meaningful delay when the bolt, keep, frame, cylinder protection and installation are all strong enough. Bolt depth alone is not a complete measure.

Mortice lock

The lock body is recessed into the door. This construction can support substantial hardware, but the word mortice is a format, not a security grade.

Euro-profile cylinder

Common in modern and multipoint doors. Security depends on resistance to snapping, pulling, drilling, manipulation and unauthorised duplication, plus correct sizing and protective furniture.

Multipoint lock

Several locking points can resist spreading and levering, but only when the door, frame, cylinder and mechanism remain aligned, maintained and fully engaged.

Cam lock

Common on display cases and drawers. Many low-cost examples control casual opening only because the surrounding material, cam, retaining nut and keying are weak.

Padlock

Judge the shackle, body, exposed length, corrosion resistance, key control, hasp, staple and anchor as one assembly. A premium padlock on a thin screwed latch is an unbalanced system.

Combination lock

Avoids a removable key but creates risks from predictable codes, observation, sharing, written records, wear patterns and weak emergency override keys.

Electronic lock

Can provide individual permissions, rapid revocation, time limits and logs, but adds dependencies on power, software, administration, network security and emergency release design.

Threat model

How locks and access systems fail

Collectors do not need operational knowledge of defeating locks, but they do need to recognise the main categories of failure so that purchasing and procedures address the real risk.

Physical

Destructive attack

Force may be applied to the lock, cylinder, handle, bolt, frame, glazing, hinges, cabinet, wall, floor anchorage or container itself. The attacker may ignore the lock entirely.

Technical

Manipulation or credential compromise

A mechanism may be operated without the authorised key, while keys, cards, codes, phone credentials or registration data may be copied, photographed, cloned or shared.

Behavioural

Tailgating and propping

A controlled door provides no protection when an unauthorised person follows a legitimate user or when the door is held open for convenience.

Human

Social engineering and insider misuse

Couriers, contractors, buyers, household visitors, staff and partners may gain excessive access through persuasion, familiarity, trust or weak verification rather than forced entry.

Administrative

Control failure

Old credentials, unknown duplicates, default administrator codes, unreviewed logs, unreturned keys and installer access can undermine otherwise strong hardware.

Governance

Key control is the neglected half of lock security

Every additional key creates another opportunity for loss, theft, copying, lending or forgotten possession. The fewer keys there are, the easier it is to know who can reach the collection.

Register and authority

Give every controlled key or credential an identifier.
Record what it opens, who holds it, when it was issued and when it was returned.
Name the person responsible for duplication, issue, audit, loss response and disposal.
Use signed issue records for staff, volunteers or recurring contractors where proportionate.

Copies and spares

Keep copies to the minimum justified by a real operational need.
Store spares in a container appropriate to the authority of the keys inside it.
Separate high-level, override, change and safe keys from ordinary household or office keys.
Do not keep a spare inside the room it is needed to enter or beside identifying paperwork.

Identification and exposure

Do not label keys with an obvious address, room or collection description.
Keep keys out of photographs, video tours, sale listings and social-media backgrounds.
Separate keys from address tags, alarm details, storage-unit numbers and destination paperwork.
Protect registration cards, key-pattern data and supplier records as security information.

Audit and withdrawal

Periodically confirm that every recorded copy exists and the holder still needs it.
Recover keys and disable credentials immediately when access ends.
Investigate unexplained keys, missing seals or uncertain duplicate counts.
Rekey when custody cannot be proved rather than relying on assurances or memory.

Credential choice

Restricted keys, codes, cards and biometrics

Different credentials move risk rather than eliminating it. The correct choice depends on who needs access, how quickly it must be revoked, whether evidence is needed and what happens when the primary method fails.

Credential	Useful strength	Main collector risk	Control priority
Mechanical key	Simple and durable	Loss, copying, unknown duplicates	Register, minimise, audit, rekey
PIN or combination	Easy to change	Sharing, observation, predictable codes	Individual codes, change after exposure
Card or token	Rapid revocation and zoning	Cloning, lending, forgotten deactivation	Named issue, time limits, prompt revocation
Mobile credential	Convenient and configurable	Account compromise, device loss, cloud dependency	Strong accounts, remote revocation, supported apps
Biometric	Convenient individual factor	False matches, spoofing, privacy, weak override	Use with another factor; secure fallback

Electronic systems

Use electronic access control for precise permissions, not technological theatre

Electronic systems are valuable when access changes frequently or when individual accountability matters. Their benefits disappear when users share codes, administrators retain default access, logs are ignored or the networked system is poorly secured.

Individual credentials

Use a separate credential for each regular user. A shared PIN may open the door, but it cannot show which person used it and cannot be revoked selectively.

Least privilege

Limit permissions by door, zone, day, time, purpose and duration. Adding access should not preserve old permissions that are no longer required.

Prompt revocation

Disable access when a role, relationship or visit ends, or when a card, phone or credential may have been compromised.

Meaningful logs

Record granted and denied entry, forced or held-open doors, overrides, administrator changes and unusual out-of-hours use. Logs must be accurate, protected, retained and reviewed.

Power and failure mode

Understand backup duration, low-battery alerts, manual override and which doors unlock or remain secure during power or network loss. Life safety takes priority over property protection.

Cybersecurity

Remove default passwords, control installer accounts, patch supported systems, protect remote access and avoid making the access controller an internet route to the collection.

Collector scenarios

Control legitimate access without treating every person as an intruder

Good security does not require hostility. It requires clear boundaries, limited disclosure, proportionate supervision and prompt withdrawal of access when the reason for it ends.

Household

Trust is not the same as universal access

Residents may need building entry without needing cabinet keys, safe combinations or a full inventory. Children, guests and relatives can disclose or damage objects without malicious intent.

Cleaner or carer

Keep the collection outside the working route

Where possible, schedule work so collection rooms remain locked, keys are not left unattended, and exceptional access is supervised or recorded.

Tradesperson

Prepare the space before arrival

Verify the appointment, secure loose objects and keys, conceal inventories and shipping labels, restrict the work zone, then check doors, windows, sensors and credentials after the job.

Buyer or researcher

Show the object, not the collection system

Prepare selected objects in a controlled viewing area. Supervise handling, limit unnecessary photography, control bags and never leave the visitor alone with unrelated stock or security details.

Employee or volunteer

Access follows the role

Apply joiner, mover and leaver controls. Issue individual credentials, remove obsolete permissions, recover keys promptly and review recent activity when a role ends.

Event or fair

Temporary premises need explicit ownership

Define who holds case and stand keys, who opens and closes, where keys remain overnight, how shift handovers work, and what happens if a key or credential is lost.

Secure containers

Safes, cases and cabinets must be judged as complete systems

A safe is not merely a heavy box with a lock, and a lockable display case is not automatically a security case. Rating, construction, anchoring, override arrangements and the surrounding room all affect the result.

Key-locking safe

Simple and independent of batteries, but the risk transfers to key custody, copying, spare storage, discovery and possible coercive surrender.

Mechanical combination safe

Avoids a removable key and can be durable, but security depends on code secrecy, dial discipline, observation control and secure emergency records.

Electronic safe

Allows rapid entry, code changes and sometimes multiple users or logs, but low-quality electronics, weak override keys, default codes and battery failures can dominate the real risk.

Incident response

Treat a lost or unaccounted-for key as a security incident

The important fact is not whether the original key later returns. It is whether the key, its pattern or its authority may have been exposed while control was lost.

Assess

Identify the exposure

Establish what the key opens, whether it is identifiable, whether it is a master, when it was last secure, who knew of the loss, and whether targeted theft is plausible.

Contain

Protect the collection now

Restrict access, increase monitoring, move portable high-value objects, alter alarm arrangements and disable associated electronic credentials where the risk warrants it.

Recover

Rekey and document

Rekey or replace affected cylinders when custody cannot be trusted, record the incident and actions, and notify the insurer where policy conditions or likely loss require it.

Operations

Opening, closing and emergency access are part of the locking system

Strong hardware is often defeated by routine behaviour. A short written check is more valuable than relying on memory, especially where several people share responsibility.

Closing sequence

Confirm all visitors, contractors and staff have left controlled areas.
Return objects and lock cases, cabinets, rooms, windows and secondary routes.
Account for keys and disable temporary credentials.
Set alarms and record maintenance exceptions or unresolved anomalies.

Opening sequence

Inspect for signs of forced entry before disturbing the area.
Enter through a designated route and protect codes from observation.
Review overnight alarms, forced-door events or unexplained openings.
Confirm emergency keys and overrides remain accounted for.

Myth versus reality

Common assumptions that weaken collector security

These claims are appealing because they simplify a complex system into one object or feature. Each becomes dangerous when it prevents the collector from examining the whole boundary.

Myth: A locked door means the room is secure

Reality: The door, frame, glazing, hinges, walls, ceiling, floor and operating routine must provide comparable resistance. The easiest bypass defines the boundary.

Myth: The most expensive lock is always the best upgrade

Reality: Premium hardware can be wasted on a lightweight door, flexible cabinet, exposed hinge or weak fixing. Balance matters more than a single specification.

Myth: Restricted keys cannot be copied

Reality: Controlled blanks and ordering reduce casual duplication, but no key should be treated as permanently or absolutely copy-proof.

Myth: Electronic access removes key risk

Reality: It replaces some physical-key problems with credential, software, power, installer, cloud and administrative risks.

Myth: A biometric lock means only one person can enter

Reality: Overrides, administrators, sensor limitations and weak fallback locks often determine the practical security of the system.

Myth: The alarm compensates for weak locks

Reality: Detection can report an event, but the physical boundary must create enough delay for any response to matter.

Proportionality

Match access control to the collection's risk level

Not every domestic collector needs commercial access control. The appropriate level depends on value, portability, visibility, occupancy, number of users, previous incidents and the consequences of loss.

Level 1

Modest domestic collection

Prioritise sound external locks, controlled spares, a lockable room or cabinet, rekeying after moving, no visible keys and a simple emergency arrangement.

Level 2

Significant specialist collection

Add a dedicated collection zone, separate household and collection keys, better cabinet or safe locks, a key register, door detection, and written visitor or contractor routines.

Level 3

High-value or highly portable collection

Add a professional survey, certified boundaries and secure containers, strict master-key limitation, individual credentials, audit logs, formal opening and closing checks, and insurer agreement.

Level 4

Dealer, archive or private museum

Use role-based access, joiner-mover-leaver control, separation of duties, central key custody, after-hours restrictions, visitor management, incident response and cybersecurity for networked systems.

Improvement order

A practical access-control hierarchy

Work from assets and routes toward technology. Buying hardware first often produces a strong lock on the wrong boundary or a sophisticated system that nobody administers correctly.

Identify the protected assets

Record value, portability, visibility, replacement difficulty, sentimental or cultural importance, attractiveness to thieves and preservation sensitivity.

List legitimate users

Include household members, employees, cleaners, contractors, buyers, researchers, conservators, insurers, delivery personnel and emergency contacts.

Map every route

Inspect normal doors, windows, garages, lofts, basements, shared walls, ceiling voids, service penetrations, connecting doors and emergency exits.

Define security zones

Separate visitor space, household or office space, collection work areas, general storage and high-security storage.

Match lock and boundary strength

Upgrade the complete doorset, cabinet or container rather than concentrating on the visible cylinder or padlock.

Reduce keys and credentials

Remove unnecessary access before adding technology. Fewer active credentials reduce loss, copying, sharing and audit complexity.

Record issue and authority

Know who may order duplicates, who holds each credential, what it opens, and who can authorise exceptions.

Add detection and review

Monitor important doors, cabinets and safes, then ensure alerts and logs reach someone who will recognise and act on abnormal events.

Plan loss and emergency response

Decide in advance what happens when a key is missing, power fails, an override is used or responders need urgent access.

Test real behaviour

Confirm that people actually lock doors, scramble combinations, return keys, disable temporary access and complete opening or closing checks.

Evidence

Document the system without exposing it

Good records support maintenance, insurance, incident response, rekeying and succession. They should be protected from casual access and should not be stored only beside the collection they describe.

Hardware evidence

Lock, cylinder, safe and doorset specifications
Installer invoices, certificates and commissioning reports
Photographs of installed hardware and anchoring
Maintenance, repair and battery-replacement records

Access governance

Current key and credential register
Issue, return and revocation records
Restricted-key registration and ordering authority
Named custodians, administrators and emergency contacts

Operating evidence

Opening and closing procedure
Visitor and contractor access procedure
Lost-key, compromise and rekeying procedure
Audit-log review and exception records

Insurance and incidents

Relevant policy security conditions and endorsements
Insurer or broker confirmation of proposed changes
Incident reports and corrective actions
Evidence that prescribed locks and alarms were maintained and used

Review

Collector checklist

Use this as a periodic review after moving, changing staff or household access, increasing collection value, buying a safe, suffering an incident or altering the display and storage arrangement.

Locking hardware

Important locks suit the door, cabinet, case or safe they protect.
Frames, hinges, keeps, glazing, fixings and secondary routes are not weaker than the lock.
Cylinders are correctly sized and protected against exposed attack.
Inherited or second-hand locks have been rekeyed where prior key custody is unknown.
Emergency overrides are identified, protected and included in the risk assessment.

Keys and credentials

Every authorised copy is known and justified.
Master keys and override credentials are strictly limited.
Spares are secure and separated from identifying information.
Former users are removed promptly and shared PINs are avoided.
There is a clear response for lost, stolen or photographed credentials.

People and procedures

Visitors and contractors are verified, restricted and supervised where necessary.
Opening and closing responsibilities are explicit.
Doors are not routinely propped and locks are actually engaged.
Temporary access is time-limited and removed after the task.
Household members or staff know what to do when access appears compromised.

Systems and evidence

Electronic systems have protected administration, adequate backup power and secure overrides.
Forced-door and held-open events are detected where the risk warrants it.
Logs are accurate, retained and reviewed rather than merely collected.
Security changes are recorded and checked against insurance conditions.
Emergency entry does not create a permanent weakness afterward.

Specialist threshold

When professional advice is warranted

The strongest result comes from describing the collection, building, threat, access pattern and operational constraints - not merely asking for the strongest available lock.

The collection would cause severe financial, cultural or reputational loss if compromised.
One master-key system spans several important rooms, cabinets or buildings.
Access is shared among staff, volunteers, tenants, contractors or business partners.
A safe room, vault, certified doorset or complex anchoring arrangement is proposed.
Electronic access control must integrate with alarms, remote management or building systems.
Fire escape, accessibility, conservation or listed-building requirements appear to conflict with security.
A master key, override or high-risk credential has been lost or retained by a former associate.
The number of existing keys and duplicates cannot be established.
An insurer specifies approved equipment, installation or operating conditions.
Networked locks or cloud-based physical-security administration are being considered.

Relevant specialists may include an independent physical-security consultant, a competent security locksmith, alarm and access-control engineers, fire-safety professionals, structural engineers, conservators, insurers and specialist brokers.

Core principles

The durable rules

1.Secure the boundary, not merely the keyhole.
2.Give each person only the access genuinely required for their role and time.
3.Keep the number of active keys and credentials as low as practicable.
4.Treat master keys, overrides and administrator accounts as concentrated risks.
5.Record who holds access and remove it promptly when circumstances change.
6.Do not confuse convenience, certification, insurer compliance and complete security.
7.Assume legitimate visitors and contractors can create risk without criminal intent.
8.Plan for lost keys, power failure and emergencies before they happen.
9.Use detection and audit to support physical delay, not replace it.
10.Review the system whenever the collection, premises, technology or people change.

The strongest collector access-control system is not necessarily the one with the most sophisticated lock. It is the one in which the physical boundary, credentials, people, records and daily behaviour reinforce one another.

Continue learning

Doors, Windows & Physical Barriers

Review the structural boundaries that must support any lock or access-control system.

→

Back to Physical Security

Return to the full physical-security chapter and its connected topics.

→

Alarms & Detection Systems

Continue to the detection layer that should operate alongside physical delay and controlled access.

→