Rekeying a Business After Employee Turnover

The key that walked out with someone

Every business that has employees eventually has a departure where one question lingers: did every key come back? Sometimes the answer is a firm yes, backed by a signed log. More often the answer is probably, or I think so, or the person said they lost it years ago. That uncertainty is the real subject of this page.

A key is not just metal. It is the ability to enter a space whenever the holder chooses. When an employee leaves, that ability should end when the employment does. If the key is still in their pocket, a drawer or a car, the access remains. Most former employees never misuse it, but a business cannot rely on good will as its security plan.

Rekeying is the tool that fixes this problem at the lock. It changes the inside of the cylinder so that the old key no longer turns it, while new keys do. The door, the frame and the hardware stay in place. Our page on rekeying describes the work, and how rekeying changes who can enter explains the logic in plain terms.

When rekeying is the right response

Not every departure calls for new locks. A part time worker who leaves on good terms, returned a key that was logged when issued and never had access to sensitive areas is a case where collecting the key may be enough. The key register and a short conversation answer the question. If the record is clear, you may simply close the entry and move on.

Rekey when something is uncertain or serious. A key that was never logged, a copy that may have been made, a departure that ended badly, a person who held keys to cash, stock or records, or any situation where theft is suspected all point toward rekeying. Another trigger is a change in the business itself: a new owner, a new tenant or a merger.

Think of the cost on both sides. The expense of rekeying is known and limited. The expense of an incident involving a stolen key can be large and hard to predict. For doors that guard the most valuable things, the balance usually favors rekeying sooner. For a minor cabinet, it may favor waiting for a natural time. Your judgment, plus the record, decides.

• A departing employee cannot account for all the keys they were issued.
• The key register is incomplete or has not been kept up.
• The person held keys to cash, inventory, files or the main entrance.
• There was a dispute, a dismissal or a suspected theft.
• You are not sure how many copies exist.

Which doors come first

Rank the doors by what they protect. The main entrance, the back door and any door that leads to cash, stock, records or equipment should come first. Interior doors to ordinary work areas come next. Low value cabinets and supply closets can follow when convenient. A staged plan keeps the cost and the disruption under control. If budget is tight, finish the highest ranked doors first and schedule the rest, but do not leave the main entrance for later.

Do not forget the less obvious locks. A rear loading door, a roof hatch, a gate, a padlock on a shed, a file cabinet, a desk drawer, a cash drawer and a key cabinet itself may all share the same keys as the main door. If a single key opens many locks, that key is the first thing to retire.

Walk the building with a pencil and a sheet of paper, or ask a locksmith to walk it with you. Record every lock, its type and the key that opens it. This tour doubles as a security check, because you will notice a door that does not latch, a hasp loose on its frame or a lock that was added years ago and nobody remembers. See exit hardware and door lock basics if you manage doors with panic hardware.

Rekey, replace or move to a new system

Rekeying is usually the least disruptive answer, but it is not the only one. If the locks are old, damaged or low quality, replacing them may make more sense than rekeying. If the business has grown and keys are a constant headache, a master key system or an electronic system may fit better. Each option has trade offs.

A rekey keeps the hardware and changes the key. A replacement changes both. A master key system allows several levels of access with a hierarchy of keys, and it can be built by rekeying existing locks if they are compatible. An electronic system removes the key altogether, with codes or cards that can be changed or canceled. The article on lock replacement or rekeying compares the first two.

For larger sites, think about a restricted keyway. This is a key profile whose blanks are controlled, so a copy cannot be made at an ordinary counter. It does not make a lock impossible to open, but it makes unauthorized duplication much harder. Read restricted keyways and why they matter for what that means in practice.

Planning the day of the change

Rekeying a business is easier when it is planned. Decide which doors will be done and in what order. Choose a time when the space is least busy, and let staff know in advance. Tell everyone who will need new keys, and arrange where they will pick them up. Decide who will be present to let the locksmith in and to check the work.

You will be asked to show that you own or manage the property. A lease, a business registration or a letter from the owner may help. If the building is leased, check the lease and talk with the landlord or property manager first, since requirements vary and some leases limit lock changes. The locksmith explains the work and the price before starting, and tests the finished work with you.

Prepare the new key plan before the visit. Decide how many keys each lock needs and who will hold them. A common mistake is to ask for far more keys than needed, recreating the control problem on day one. Cut only what you will issue, keep a small number of sealed spares in a secure place and log everything.

Handling the transition for staff

A rekey affects people who are not leaving. Employees who depended on their old key will need a new one, and the handover needs a process. Issue new keys in person, record them in the register and collect the old ones. Do not hand out new keys until the old ones are accounted for, or you will end up with both in circulation.

Be open about why the change is happening. A short note that the business is updating its locks as part of regular security maintenance is honest and avoids blame. Staff understand turnover. They tend to respond well when the process is orderly and when it is clear that it applies to everyone, not just to one person.

Plan for the first morning. Make sure the people who open the building have working keys before they need them. Have the manager on site to solve any problem. A rekey that locks the opening shift out of the building is a poor first impression of the new system. Keep a labeled spare set in the manager's possession on that first day, ready for any key that does not behave as expected. The checklist in key handover checklist for managers is a useful template.

Think about the people who are staying but who are affected in a different way. A manager who used to carry a master key may now carry a restricted one. A long serving employee who always had the back door key may find the new system less convenient. Explain the reasons, listen to the practical concerns and adjust where it is sensible, because a system that frustrates the people using it invites workarounds such as propped doors and shared keys.

Alarm codes, safes and other things that are not keys

A locksmith can change locks, but the business also holds other secrets that departing staff may know. Alarm codes, keypad codes, safe combinations, door entry fobs, the wireless network password for the door controller and the gate code are all examples. Changing the lock without changing these is like locking the front door and leaving the window open.

Go through the list in the same way. Who knows each code? Who can change it? When was it last changed? Update the ones that matter, record who holds them and set a reminder to change them on a schedule. Safes can often be reset or recombined, and a locksmith can advise on that. Read safe types for home and small business for background.

If you use an alarm company, tell them about the staffing change and ask them to update the contact list and the user codes. A former employee on the call list is a quiet risk. Coordinate the timing so the new codes and the new keys come into effect together.

Mistakes that make a rekey less useful

The most common mistake is rekeying a single door and leaving the others alone. A key that no longer opens the front door but still opens the back is hardly a fix. The second is failing to collect old keys, because a returned key is one fewer in circulation. The third is making too many new keys and losing control in the first month.

Other mistakes are quieter. Treating the rekey as a favor and not recording who got which key. Reusing the same weak locks with a new pattern. Keeping the key plan only in the manager's head. Skipping the test of the new keys on all doors. Each of these makes the system weaker than it looks. A short written summary of what was done, which doors, which keys and who received them, takes ten minutes and saves hours when someone asks what changed.

The cure is a short plan and a little discipline. Write down the doors, the key counts and the holders. Test everything on the day. Keep the plan and the register in a safe place. If the work involves a master key system, have the key bitting records stored with someone you trust. The glossary at master key terms explains the vocabulary.

Businesses with unusual turnover patterns

Some businesses see people come and go in waves. A seasonal shop in a tourist area hires extra staff for the busy months and lets them go afterward. A restaurant cycles through line cooks and servers. A staffing office or a property management company deals with temporary workers, vendors and contractors all year. In those settings, rekeying after every departure is unrealistic, and the system has to be designed for turnover.

The answer is to keep the number of permanent keys small and to give most workers something that can be canceled easily. A door code that is unique to each person, a card that can be deactivated, or a key that opens only one area all limit what a departure puts at risk. Seasonal staff can be given access only to the areas and the hours they need, with an end date written down on the day they start.

For a storm prone region, add a plan for emergencies. After a hurricane warning, staff may need to reach the building at odd hours to protect stock and equipment. Decide in advance who has that authority and how it is recorded. Having an emergency list that is separate from the daily register helps, as long as it is kept up to date and kept private.

When the season ends, make the end of access a routine. Collect keys, cancel codes and check the register in one sitting. A pattern that repeats each year is easier to follow than a scramble, and it keeps the business from carrying forward a trail of old access that nobody remembers granting.

Keeping turnover from becoming a repeat problem

Rekeying every time someone leaves is costly. A better approach is to reduce what each departure puts at risk. Limit who holds keys to the doors they need. Use individual codes for electronic systems so they can be canceled one at a time. Keep a register and check it on a schedule. Make key return a standard step on the last day.

Consider the structure of the system. A master key system can let you rekey one level without disturbing others. An electronic system lets you cancel a credential in seconds. A restricted keyway prevents casual copying. The right choice depends on the size of the business and the rate of turnover. The checklist at key control policy for small offices helps you write the rules that go with the hardware.

Over time, you will find that most of the work is habit. A business that issues keys through a log, retrieves them at departure and checks the register every few months seldom faces a crisis. When one does come, the record makes the response simple.

Working with a locksmith on a business rekey

Start the conversation by describing what is happening. How many doors? What kind of locks? How many people have keys and how many have left? What do you need to protect? The more you share, the better the plan. A site visit may help when the building is large or the locks are mixed. Photos of the doors and a list of lock brands, if you have them, make the first conversation much more productive and help avoid surprises on the day of the work.

It also helps to bring the key register, any old key plan and a list of who has left, since these let the locksmith suggest a realistic scope. Expect the usual order. You call and describe the situation and where the business is. Ownership or authority is checked before rekeying. The plan and the price are explained before work begins. The finished work is tested with you on every door. You then receive the new keys and, ideally, a record of the key plan.

For related reading, see commercial locksmith for the full range of business services and commercial and business locks for details on the hardware. If you manage rental or investment properties as well, rental property rekey planning covers that side.

Questions people ask