Master Key Systems Design

Why this matters

Master key systems are the highest-skill, highest-margin work in commercial locksmithing. A small apartment building system. A multi-tenant office building. The customer is paying for the design expertise + the documentation - NOT just the cylinders. Done well, the system serves the property for 10 - 20 years; done poorly, it has security holes that compromise tenants + create liability.

What a master key system is

A master key system lets multiple keys operate the same cylinder according to a designed hierarchy. The classic structure:

• Grand Master Key (GMK) - opens all locks (top-level facility manager)
• Master Key (MK) - opens a defined zone of locks (department head, building floor manager)
• Sub-Master Key (SMK) - opens a sub-zone (department within zone)
• Change Key (CK) - opens ONE specific lock (the apartment tenant, office occupant)

A grand-master can open any door; a tenant's key can only open their door. Each "level" of the hierarchy has different access scope.

Why customers want this

• Apartment building: tenant has their own key; landlord has master for emergency + maintenance access
• Office building: floor manager has master for their floor; building manager has grand master for the building
• Schools, hospitals, hotels: hierarchy lets staff access their zones; security has master access
• Storage facilities: each unit has unique change key; manager has master

The design ELIMINATES the need to carry 50+ keys + provides controlled access by role.

How it works mechanically

Pin-tumbler cylinders have driver pins + key pins. In a master key system, master pins are added between the driver + key pins at certain pin positions. This creates TWO shear lines - one for the change key + one for the master.

A 6-pin cylinder can have multiple master pins distributed across positions to create different shear lines.

Security implications:

• Master-keyed cylinder is INHERENTLY less secure than single-key cylinder
• Multiple shear lines = more ways a key can match
• Master-keyed locks fail to single-pick attacks easier than non-mastered
• Specialty high-security cylinders (Medeco, Mul-T-Lock, Abloy) compensate with restricted keyways + additional security pins
• For high-security customers, use these instead of standard master-keyed

Designing the system

1. Customer needs: total doors, access zones, who needs what, future expansion
2. Hierarchy: 2-level (CK+MK), 3-level (+SMK), OR 4-level (+GMK)
3. System size: 50 - 200 change keys feasible on 6-pin; restricted keyways for larger
4. Keyway: standard (cheap but duplicated anywhere) vs restricted (locksmith-controlled) vs proprietary
5. Bitting design: avoid combinations vulnerable to master-key decoding attacks; respect MACS rules; combinations spread across pins
6. Documentation: code list of every cylinder + bitting + location + label; access-controlled storage

Restricted keyways (the security upgrade)

For any customer with security expectations, restricted keyways are essential:

• Keys can only be cut by authorized locksmiths (the manufacturer issues key blanks ONLY to verified locksmiths)
• Customer cannot duplicate at hardware store
• Patent protection: key blanks legally protected from copying (15 - 20 year patent windows)
• Higher key cost but the customer's security IS the deliverable

Common restricted keyways:

• Schlage Everest (premium standard residential / commercial)
• Schlage Primus (premium with high-security features)
• Medeco (highest-security mechanical)
• Mul-T-Lock MT5+
• Abloy Protec2 (high-security disc detainer; specialty)
• Assa MK90 + MK100

Installation procedure

Step 1: Cylinder + key procurement

• Order cylinders + keys from manufacturer / distributor with bitting per design
• Lead time: 5 - 20 business days for restricted systems

Step 2: Existing lock retrofit OR new install

• Most knob, lever, mortise lock can accept replacement cylinders
• Some commercial doors require full lock replacement (older hardware)

Step 3: Cylinder install

1. Remove existing cylinder (knob: usually via screw at front; lever: depends on manufacturer; mortise: separate cylinder removal)
2. Install new master-keyed cylinder
3. Test each key in each lock against the design
4. Document any anomalies

Step 4: Key distribution + customer handoff

1. Distribute keys per assignment
2. Track who has which keys (customer maintains)
3. Train customer on key control procedures
4. Provide documentation of system + bitting

Re-keying + system maintenance

Lost master

• Major security event for the customer
• May require re-keying entire system
• Plan with the customer how to handle in advance

Employee turnover

• Standard: re-key the affected change keys
• Larger turnover: rotate master keys with replacements

Adding new locks

• Each new lock needs cylinder cut to fit the existing master + new change key
• Bitting designed per the system code list

Periodic re-keying

• Best practice: re-key major systems every 5 - 10 years
• Refreshes security against lost / unaccounted keys
• Premium ongoing service relationship

Common design mistakes

Skipping the documentation

• Customer takes over from a previous locksmith with no code list
• Each new lock added = guessing at the master pattern

Wrong cylinder choice for security level

• Standard keyway for a high-security customer = security hole
• Restricted keyway for a low-security customer = over-priced

No expansion planning

• 2-floor building grows to 4-floor; master key system doesn't extend cleanly
• Plan for 2 - 3x current size at design

Master key in tenant key blank

• Tenant key cut on a standard blank = anyone with a key cutter copies the master
• Restricted blank for the tenant key removes this risk

References

• ALOA Locksmith Certification programs
• Manufacturer documentation (Schlage, Medeco, Mul-T-Lock, etc.)
• "Master Keying for Locksmiths" reference texts
• Manuall internal: Rekey + Lock Change SOP, Smart Lock Installation Reference