If you work in access control or security, you’ve likely come across a key that reads “DO NOT DUPLICATE.” But does this really make a key restricted? And what’s the purpose of a restricted key to begin with?

A key on a wooden table

Restricted keys are keys that are restricted to only one manufacturer. They are usually used to obtain greater control of one’s keys and who has them.

Yet the path to a restricted system can look different, and not all methodologies accomplish the same level of security. One must take a deeper look into what makes a restricted key restricted and determine what form of restricted key works best for their needs.

How do restricted keys work?

As mentioned above, a restricted key prohibits acquiring a duplicate key from anyone other than the manufacturer. However, the existence of key duplication machines, locksmiths, dealers, and other manufacturers may not honor your wishes to keep your key system restricted.

The solution that key manufacturers have provided is to take different approaches to make key duplication difficult.

Keyways and patented designs

One of the most common paths to creating a restricted system is to create a unique keyway or patented design.

Exploded image of a medeco x4 core and key

Image courtesy of medeco.com

For new keyways, the manufacturer usually holds the sole rights to produce certain keyways. These are usually keyways that have been designed by that manufacturer, which other manufacturers can’t replicate.

A similar alternative is to develop a patented feature instead of a new keyway. This patented feature usually resides within the key’s core. The core and key themselves are not patented, but rather the new feature itself.

The result is a keyway that may be familiar, but with a unique design added that prevents a standard key from operating it.

Dealer-controlled duplication

When a key is made to be unique through a patented feature or unique keyway, the manufacturer must protect these keys. Limiting access to key blanks is the most common method.

Manufacturers will either require that key blanks be purchased directly from them or, more commonly, from select dealers. These dealers will have ultimate discretion as to who will be able to access key blanks.

Authorization requirements

Even though the keys may be controlled externally, a healthy restricted key system needs to be controlled internally as well. That is where authorization requirements come in.

It’s common for people to request more access than they need. School coaches will request a key be made for their players so they can attend practice outside school hours. Or a surgeon will request access to all the rooms in their hospital wing for ease and simplicity.

Authorization requirements require that the requesting party obtain authorization (usually in the form of written approval) from a single person or office. This removes the awkwardness of case-by-case decisions and ensures your key system is restricted inside and out.

Key stamping and identification

Another layer of protection that ensures that restricted keys remain restricted is to stamp keys with codes instead of labels. For instance, instead of labeling a key “Grand Master,” a key should be labeled with a randomized code, such as “ALP305.” Having randomized codes to ID keys instead of labels removes the desire to have certain keys duplicated or lost keys copied.

Who uses restricted key systems?

Restricted keys are not for everyone. The restricted distribution entails a hire cost for keys, which can add up when a facility has hundreds or even thousands of doors. For many, the additional expense is an unnecessary one.

A building at a university

The two dominant factors when deciding whether a restricted key system is necessary are the number of doors you have and the level of security that is necessary.

For instance, large facilities like universities have a duty to protect the students who are housed on campus or attend class. There are a large number of doors on campus with a huge number of keyholders. Therefore, the risk of undocumented key duplication is high, and the result of a security breach could be devastating.

On the other hand, a bank also requires a high level of security, but there are very few doors, and the keyholders are likely to be very few. Despite the need for a high level of security, there’s likely a low risk for undocumented key duplication, and wouldn’t likely need a restricted key system.

Other facilities that may be candidates for restricted key systems include:

  • Hospitals
  • K-12 Schools
  • Corporate Offices
  • Military Bases
  • Airports
  • Long-term Care Facilities
  • Multi-Tenant Office Buildings
  • Manufacturing Plants
  • Distribution Centers
  • City Offices
  • Law Enforcement Facilities
  • Student Housing
  • Community Centers

How to Tell If a Key Is Restricted

Contrary to popular belief, a “DO NOT DUPLICATE” inscription on your key does not indicate that your system is restricted, or even prohibits your key from being copied. The inscription is often simply a request made to the user, letting them know the key should not be duplicated.

The most assured way to determine if your key is restricted is to look up the key brand or serial number. Keys like the Medeco X4 are all restricted keys. The most surefire way, without having to research your key for yourself, is to reach out to your manufacturer or attempt to duplicate the key.

Can Restricted Keys Be Copied?

Restricted keys can absolutely be copied, but only by those authorized to do so. Most manufacturers extend the rights to duplicate restricted keys to a set number of dealers/locksmiths. It is then their duty to determine who can duplicate their keys.

A locksmith making a copy of a key

An important note to make here is that while a manufacturer may be concerned with restricting the duplication of keys, a dealer may be motivated to sell as many key blanks as he can. Understanding the duplication process and how many key dealers have access before committing to a system is pivotal.

At Oak, we remove this concern by only selling key blanks ourselves, directly to the consumer. In fact, we buy back the key blanks for our restricted OAKPLUS key system once a customer is ready to rekey for a new system.

How to Get a Replacement for a Lost Restricted Key

If a replacement key is needed for a restricted system, simply follow the process your facility has in place. In fact, many manufacturers have an online portal or form that must be completed to verify your identity and secure more keys. For OAK, you can call us to verify your account, and we can distribute either key blanks or cut keys.

Is a Restricted Key System Right for Your Facility?

The decision to switch key systems is a huge one, even without considering whether to use a restricted system. When it comes to deciding if a restricted system is right for you, affordability and security are both huge factors. Patented keyways provide a high level of security but the patented features can be expensive.

A key inserted into an OAK key cylinder

Oak has produced our own restricted key system, OAKPlus, to help make the decision easier. With keys you can’t find at the store OR at any locksmith, our system is secure, contains no patented features that can fail, and offers a better price for your budget. If you’re unsure of whether a restricted key system is the right fit, give us a call at 317-391-3203.