What Key and Access Control Actually Means
Key and access control isn't the lock on the door. It's the system around every credential that opens that lock: the keys, the cards, the fobs, the codes, and the record of who holds each one. A property can have good hardware and still have no idea who can walk in, because the hardware was never the weak point. The tracking was.
Think of every credential as a small piece of access you handed out. Until you get it back or shut it off, it's still live. Do that a few dozen times over a few years of turnover, contractors, and lost keys, and the honest answer to "who can get in?" becomes "we're not entirely sure." That's the gap this is about.
Key control
- What it is
- The practice of tracking every key, access card, fob, and code that opens a property, including who holds each one and when their access ends.
- What it does
- It keeps a current record of who can get in, controls how credentials are issued and returned, and makes it possible to shut off access quickly when it should stop.
- Why it matters
- Access you can't account for is a door you can't really lock, so key control is what keeps a credential from outliving the reason it was issued.
The Risk You Don't See Until It's Gone
Most access problems don't announce themselves. A key doesn't set off an alarm when it isn't returned. A code doesn't stop working when the person who knew it leaves. So the risk sits quietly, a live credential with nobody accountable for it, until the day someone uses it. Then it stops being a paperwork gap and becomes a theft, a break-in, or a very hard conversation with your insurer.
That's what makes this different from most security risks. You can see a broken lock or a propped door. You can't see the fob a former vendor never handed back, or the master key that walked off two managers ago. The danger is invisible right up until it isn't, and by then the question isn't "who has access?" It's "how did they get in?"
Where Access Quietly Leaks
Access leaks slowly, not in one dramatic moment. It drains out through a handful of ordinary gaps:
- Turnover without collection: someone leaves and their key, badge, or code is never actually retrieved or shut off.
- Contractors and vendors: a temporary credential issued for a job that ended weeks ago, still live.
- Shared codes that never change: a gate or door code half the building knows, unchanged for years.
- The unlogged master key: a key that opens everything, with no record of who's carried it.
- Lost keys treated as small: a missing key written off as a minor annoyance instead of open access.
Any one of these looks minor on its own. Stacked up over a few years, they're the reason a property can't honestly say who can get in.
Cut Access the Moment It Should End
The one habit to get right is timing. When a role ends, a contractor finishes, or a credential goes missing, access should be cut right then, not "when someone gets around to it." Deactivate the badge, collect or disable the key, change the code, during or immediately after the reason for the access ends.
Later is where the risk lives. Every day a credential stays live past its purpose is a day it can be used by someone you're no longer tracking. The properties that stay clean aren't the ones with the fanciest locks. They're the ones that close access the moment it should close.
Access Nobody's Tracking Vs Access Under Control
| Where it shows | Access nobody's tracking | Access under control |
|---|---|---|
| Who holds what | A guess, or one person's memory | A current, written record |
| When someone leaves | Access ends eventually, if at all | Access is cut the same day |
| Contractors and vendors | Credentials stay live after the job | Issued, tracked, and collected |
| Shared codes | The same code for years | Rotated after turnover |
| A lost key | Written off as minor | Treated as open access and closed |
| The master key | Unlogged, unaccounted for | Tracked, with one accountable holder |
We don't get caught off guard on access, because we sort the credential out before we ever need it. On a detail, I don't want to be hunting for someone to let me through a door in the moment. So I plan it. I know which door, I've talked to the right people, and where I can, I get a temporary card that works for a set number of hours and then stops on its own. That last part matters more than it sounds. A card that expires by itself is a card nobody has to remember to collect, and it can't come back to bite you months later. That's the whole game with keys and access. It isn't really about the lock. It's about knowing exactly what can open your doors, who's holding it, and when it stops working.
Do You Know Who Can Get In Right Now?
Before you assume your access is accounted for, run through these:
- Is there a current list of who holds a key, fob, or code to your property?
- When someone leaves, does their access get shut off that day, or eventually?
- Do contractors and vendors return credentials when the job ends, and does anyone confirm it?
- Are shared codes changed after turnover, or still the same ones from years ago?
- If a key went missing tonight, would anyone know which door it opens and who had it?
- Does your provider treat tracking and cutting off access as part of the job, or leave it on your desk?
How We Handle It at ARDENT
We treat access as something you should be able to see and shut off at any time. Where we hold keys or credentials for a site, we track them: what exists, who has each one, and when their access ends. It goes in the post orders, so it isn't living in one person's head.
The part that's easy to skip is the ending. When a role ends, a contractor finishes, or a credential is lost, access gets cut right then, not when someone gets to it. Later is where the risk lives: the fob that still works, the code nobody changed, the old key nobody can place.
None of this is complicated. It's tracked instead of assumed. The goal is simple. At any moment, you can answer who can get into your property, and you can take that access back the day you need to.
Key Takeaways
- Key and access control is knowing who can get into your property, on what credential, and being able to shut it off.
- The real risk isn't a broken lock. It's the key, code, or card still out there with someone who shouldn't have it.
- Access leaks quietly, through turnover, finished contractors, shared codes never changed, and keys never returned.
- Cut access the moment the reason for it ends, not later. Later is where the risk lives.
- If you can't say who holds a key or code today, that access isn't controlled. It's just unaccounted for.
Frequently Asked Questions
What Is Key Control, and Why Does It Matter?
Key control is tracking every key, card, fob, and code that opens your property, who holds each one, and when their access ends. It matters because access you can't account for is a door you can't really lock. The danger isn't the forced entry you'd picture. It's a credential that was handed out and never taken back.
Someone Left Months Ago. Is Their Old Key Really a Problem?
It can be. A key, fob, or code that still works after the person's reason for having it ended is open access with nobody accountable for it. The safe assumption is that any credential not returned and confirmed is still live, which is why access should be cut on the day a role ends, not whenever it happens to be noticed.
Do We Need to Change Codes and Re-key After Turnover?
Often, yes, at least for shared codes and sensitive access. A code that never changes after people leave slowly becomes a code half the building knows. You don't have to re-key the whole property every time, but a plan for rotating codes and collecting credentials after turnover is basic access control, not overkill.
Whose Job Is Tracking Keys and Access, Ours or the Provider's?
A good provider makes it part of the service, not something dropped back on you. Where they issue or hold credentials, they should track them, flag what's outstanding, and cut access when it should end. If your provider has no idea who holds what on your site, that's a gap worth raising.