Most offices do not decide to buy an access control system. They decide something else first — someone left and did not return their key, a suite got added down the hall, the landlord changed the lobby hardware — and then someone has to pick a credential. Card, fob, keypad code, phone, fingerprint, or the brass key that has worked fine for eleven years.
That choice is the one you live with. The panel in the closet gets touched once. The credential gets touched by every employee, every day, and it is what you will be dealing with on the Monday someone loses theirs. This is a comparison guide for that decision, written for the person who has to administer the thing rather than the person who signs the invoice.
Start with the door, not the technology
Before comparing credentials, list your doors and what is behind each one. A glass storefront entry, an interior server room, a stockroom with cash handling, and a shared restroom corridor are four different risk levels, and they do not need the same answer.
Federal guidance takes the same approach. NIST’s Guidelines for the Use of PIV Credentials in Facility Access frames physical access control as a risk-based selection — you match the strength of the authentication mechanism to what is actually being protected, rather than applying one standard everywhere. A small Dallas office can borrow that logic without borrowing the federal budget: strong credentials on the two or three doors that matter, simpler ones elsewhere.
The credential options, head to head
Six realistic choices, judged on the things that actually generate work for whoever administers the system.
Mechanical key
- Lost credential: cut a replacement cheaply, or rekey the cylinder if you are worried about where the key went. Rekeying an exterior door means everyone with that key gets a new one.
- Staff turnover: you are relying on the key coming back. If it does not, you rekey.
- Audit trail: none. You know a door opened; you never know who.
- Power or internet outage: completely unaffected. This is its quiet superpower.
- Hardware: keep what you have, assuming the cylinders are in good condition.
Keypad PIN
- Lost credential: nothing to lose — but codes get shared, written down, and shoulder-surfed, and worn keypads visibly reveal which digits are used.
- Staff turnover: if everyone shares one code, one departure means changing the code for the whole office. Individual codes fix this and are worth insisting on.
- Audit trail: only if each person has their own code and the lock logs events.
- Outage: standalone battery keypads keep working. Networked ones depend on how they are wired and powered.
- Hardware: often a straight swap for the existing lockset.
Proximity card
- Lost credential: deactivate it in software in seconds and issue another. This is the single biggest day-to-day advantage over keys.
- Staff turnover: revoke on the last day. No rekeying, no hardware visit.
- Audit trail: yes, per person, per door, with a timestamp.
- Outage: depends on the system design and backup power — ask this question before you buy, not after.
- Hardware: reader, controller, power and usually an electric strike or magnetic lock. This is real installation work on the door.
Proximity fob
- Behaves like a card technically, but lives on a keyring instead of in a wallet or badge holder.
- Practical difference: fobs get lost with car keys; cards get left at home in a jacket. Choose based on whether your staff already carry badges. Offices that do not badge in tend to prefer fobs.
- No photo ID on a fob, so it is worse if you also want visual identification of staff and visitors.
Mobile or Bluetooth credential
- Lost credential: people notice a missing phone within minutes, which is a genuine security advantage. Revocation is remote and immediate.
- Staff turnover: the cleanest of all — no physical object to chase down.
- Audit trail: yes, typically the most detailed.
- Outage: the phone and reader still talk to each other locally, but administration and remote unlocking may depend on connectivity.
- Watch for: dead batteries, staff who dislike work software on a personal phone, and visitors or contractors who need one-off access. Keep a small pool of cards or fobs as a fallback.
Biometric reader
- Lost credential: impossible — nothing to lose, nothing to lend to a colleague.
- Staff turnover: delete the enrollment.
- Audit trail: strong, and hard to dispute.
- Cost and friction: the highest of the group, plus enrollment time and the privacy conversation you will need to have with staff. Best reserved for the one or two doors that genuinely justify it — a server room, a cash room, a pharmacy cabinet — rather than the front entrance.
The four questions that decide it
- How often do people leave? High turnover pushes hard toward electronic credentials. Low turnover makes mechanical keys far more defensible than vendors will admit.
- Do you need to prove who opened a door? If the answer involves an insurer, a compliance requirement or a recurring inventory problem, you need logging, and only electronic credentials provide it.
- What happens at 2am with no power? Ask specifically: does the door fail secure or fail safe, how long does the backup last, and can you still get in with a key override?
- What hardware survives? Some doors take a keypad lock as a direct replacement. Others — aluminum storefront, glass, fire-rated openings — need an electric strike, a proper power supply and cabling. A site walk answers this in fifteen minutes and saves a rebudget later.
A credential is a record, not a response
This is the part that gets skipped. An access control system tells you that a specific credential opened a specific door at a specific time. It does not tell you who was holding the credential, and it does not put anyone on site. If your concern is after-hours activity, an occupied parking lot, or a tenant space that needs eyes as well as logs, that is a different service — firms such as Triumph Protection Group handle guard coverage, mobile patrol and remote video monitoring, and the two work well side by side. Access control decides who gets in; people and cameras decide what happens next.
Where a mechanical master key still wins
Plenty of Dallas offices are better served by a well-designed master key system than by readers on every door. It wins when you have many interior doors and few sensitive ones, when there is no power or cabling path to interior openings, when the budget is finite, or when you simply need one manager key that opens everything without a software license.
Restricted and patented key systems, including Mul-T-Lock, close the biggest weakness of mechanical keys: keys cannot be copied at a hardware store, so a key that walks out the door cannot quietly multiply. That is not the same as revocation, but for many offices it is enough. A hybrid is the most common sensible outcome — electronic credentials on the exterior and the two or three doors that matter, keys on everything else.
When you do not need access control
Honest answer: often. Skip it, at least for now, if you are a small team with stable staff and one entrance, if you lease a suite where the landlord already controls the building lobby and after-hours entry, if the doors themselves are the actual problem, or if the last incident was a propped-open door rather than an unauthorized key. No credential fixes a door that will not latch.
If your real issue is a failing closer, a bent frame, a worn strike or hardware that no longer secures properly, the fix is commercial locksmith and door hardware work, not a software subscription. Get the opening working first. Credentials can come later, and they will cost less on a door that is already sound.
Talk it through before you spend
The right answer depends on your doors, your turnover and what you actually need to prove. Best Locksmith installs and services the access control systems Dallas businesses rely on, as well as mechanical master key and high-security key systems, for commercial clients across Dallas, Plano, Allen, Murphy, Frisco, McKinney, Rockwall and the wider DFW metroplex. Working with both means there is no reason to steer you toward the more expensive option when the simpler one does the job.
Call (214) 600-9161 to walk your doors with someone who will tell you which ones genuinely need a reader and which ones do not. Licensed, bonded and insured — Texas Lic # B20409.