Restricted Keyways and Key Control: Stopping Unauthorized Key Copies in Calgary Buildings

A standard key can be copied at almost any hardware counter in Calgary in under five minutes, no questions asked. A restricted keyway uses a patented key blank that store cutters cannot legally stock or cut, so every copy has to come from the locksmith who issued the original, under a signed authorization on file. That single change is what turns a building's keys from an open liability into a controlled asset.

Property managers usually reach this point after a specific moment: a departed tenant still has a working key months later, or a staff member admits they cut a copy for a friend who was "just watching the space." The lock still works fine. The problem was never the lock. It was that nobody controlled who could make a key that opens it.

What is a restricted keyway, and why can't it be copied at a hardware store?

A restricted keyway is a patented key profile that a lock manufacturer licenses to a small number of authorized locksmiths, rather than releasing to the open market. The blank shape itself is protected, so a retail key-cutting kiosk has no matching blank in stock and no legal path to source one, even if a customer walks in with the original key.

That is the entire mechanism. It is not a stronger lock or a harder-to-pick cylinder, though restricted cylinders are often built to a higher commercial grade too. It is a supply-chain restriction on the blank itself. A standard residential keyway, by contrast, uses a blank that's stocked at nearly every hardware store and big-box counter in the city, which is exactly why anyone holding a standard key can walk in and leave with a copy the same afternoon.

Patent protection on keyways runs for a set term set by the manufacturer's licensing program, not something this article can cite by number. What matters for a building owner is simpler: as long as the patent holds and the local locksmith stays an authorized dealer for that keyway, uncontrolled copying stays closed off.

How does key control actually work as a system?

Key control is the set of records and rules that decide who may hold a key, who may request a copy, and how both are tracked over the life of the building. The restricted keyway blocks the hardware-store route. Key control is what stops someone from getting a copy through the *authorized* route without permission.

In practice that means three things exist and are kept current: a signed authorization list naming who can request a key on the account, a key log recording every key issued, to whom, and on what date, and a standing rule that the locksmith on file will not cut a copy for anyone not on that authorization list, no matter how convincing the reason. A property manager who calls in asking for "just one more copy for the new guy" without being on the list should be told no, not accommodated.

This is where restricted keyways fail if a building treats the hardware as the whole solution. A patented blank stops the corner store. It does nothing if the authorized locksmith will cut a copy for anyone who shows up with the right story. The system only holds if the authorization list is enforced as strictly as the blank itself is protected.

Who should be authorized to order a key, and how is that enforced?

The authorization list should name specific individuals by role, not "whoever calls from the office," and it should be short. For most Calgary commercial buildings that is the property manager or owner, and one designated backup, never the full management team and never a tenant company's own staff list.

Every name on that list should be confirmed against the account before a key is cut, not assumed from a phone number or an email that looks right. A locksmith operating real key control will ask for the account reference and match the caller to the signed list every time, including for someone who has ordered keys before. That friction is the point. It is the same friction that makes the system worth paying for.

Update the list the moment a signing authority changes, not at the next renewal or annual review. A departed property manager who stays on the authorization list for six months because nobody updated it is a gap in the system exactly as real as an unrestricted keyway would be. The list is only as current as the last time someone remembered to touch it.

What does converting a building to a restricted keyway cost?

Converting an existing building runs on two cost lines: new cylinders or lock cores for every door on the system, and the patented keys themselves, which cost more per key than a standard cut because of the licensing built into the blank. Individual restricted keys typically run in the tens of dollars rather than the few dollars a standard copy costs, and commercial-grade cylinders or cores are priced per door.

A full building conversion, cylinders and an initial key set together, has landed anywhere from under a thousand dollars for a small office suite to several thousand for a building with many doors and a full keying schedule to plan around. The real driver is door count, not the keyway itself: a five-door tenant space and a forty-door commercial building are not pricing the same job even with identical hardware.

Get an exact number from a walkthrough. A locksmith needs to see the door count, the existing hardware, and whether the building also needs a keying hierarchy set up at the same time, which is a related but separate project. Any figure given before that walkthrough is a starting range, not a quote.

Restricted keyway conversion versus just rekeying: which one does the building actually need?

Rekeying changes the pins inside the existing cylinder so old keys stop working, and it is the right call when the problem is a specific set of keys that need to be invalidated, like after a tenant turnover or a lost master key. It does nothing to stop the next person from copying whatever key gets issued afterward, because a rekey on a standard cylinder still uses a standard, copyable blank.

Restricted keyway conversion solves a different problem: not "these particular keys need to stop working" but "nobody should be able to make a working key without going through us." A building that rekeys every time a key goes missing but never closes the copying route is repeating the same fix on a loop. A building that converts to a restricted keyway and pairs it with a real authorization list closes the loop once.

The honest answer for most buildings is both, at different points. Rekey now if there's an active, specific exposure, like a key known to be in the wrong hands today. Plan the restricted keyway conversion as the fix that stops this from being a recurring call. A single multi-tenant building with high staff turnover justifies the conversion cost faster than a small owner-occupied office with two long-term staff.

What happens to key control when an employee or tenant leaves?

The moment someone with a key leaves the organization, their name comes off the authorization list and their key gets logged as outstanding until it is returned or the affected cylinders are addressed. On a restricted keyway, that outstanding key cannot be silently duplicated by whoever's holding it, which buys time that a standard key never gives.

Collecting the physical key back at offboarding is still worth doing, but it is not the control that matters most. The control that matters is that the departed person can no longer walk into any locksmith, including the authorized one, and get a fresh copy cut, because they're off the list. A building that only tracks "did we get the key back" and never touches the authorization list is one unreturned key away from a real gap.

For buildings with frequent staff or tenant turnover, this is where the cost of restricted keyway conversion earns itself back fastest. A standard keyway means every departure is a judgment call about whether to rekey. A restricted keyway with a current authorization list means most departures need no hardware change at all, only a five-minute update to who's on the list.

How should multi-tenant and leased commercial buildings handle key records?

Multi-tenant buildings need key records kept at two levels: the property manager's master authorization for common areas and building-wide hardware, and each tenant's own authorization for their unit, kept separate so one tenant's staff turnover never touches another tenant's keys. Mixing these into a single list is the most common way key control breaks down in leased buildings.

A lease should state plainly who is authorized to request keys for that unit, and that authorization should transfer or terminate cleanly with the lease itself, not linger past move-out. When a tenant vacates, their line comes off the list at the same time the unit is prepped for the next tenant, not weeks later after someone notices the old company's name is still active.

This is also where a building weighing key control against a full hierarchy should read what a hierarchy actually solves. Key control decides who can get a key made. A master key system decides which key opens which doors across a building with different access levels. Many multi-tenant buildings need both, but they are separate decisions with separate costs, and this article only covers the first one.

Get key control set up right the first time

Uncontrolled keys are the kind of exposure that sits quietly until something forces the question, a break-in with no sign of forced entry, or a tenant dispute over who still has access. Restricted keyways and a real authorization list close that gap before it becomes a problem rather than after.

Key And Lock Solutions is a family owned and operated locksmith serving Calgary and the surrounding area, working on all major lock brands with no shortcuts and no unnecessary upsells. A commercial locksmith walkthrough is the right starting point for any building considering a restricted keyway conversion: it confirms door count, current hardware, and whether the building's turnover pattern justifies the cost now or later. Related reading on securing a commercial space is covered in Commercial Locksmith Calgary: Door Security, and landlords managing tenant turnover specifically should see Rekeying Between Tenants: Calgary Landlords.

Get in touch to book a walkthrough and get an exact figure for the building in question, or call for anything urgent, including after-hours lockouts, through emergency locksmith service.