Most master key problems in multi-tenant buildings are not lock problems. They are planning problems that were solved with a key machine instead of a diagram. A property manager inherits a building, discovers that three suites share a key, that the janitorial contractor somehow opens the electrical room, and that nobody can say how many copies of the “building master” exist. At that point every fix is expensive, because the hierarchy was never designed in the first place.
If you manage office suites, a retail strip or a light-industrial park anywhere in the Dallas metroplex, the single most valuable hour you will spend is the one before any brass gets cut. This is a planning guide for that hour.
What a Master Key System Actually Is
A master key system is a keying plan in which one cylinder can be opened by more than one key, in a controlled and deliberate order. A tenant’s key opens only their suite. Your key opens their suite and every other suite. Nothing about that is magic – it is arithmetic done inside the cylinder, using stacked pins so that more than one key height will operate the plug.
That arithmetic has limits, and the limits are the reason planning matters. Every additional level of masking you add consumes usable key changes and adds shear lines inside the cylinder. A plan that is drawn once, cleanly, gives you room to grow. A plan that is improvised suite-by-suite over five years runs out of unique keys, starts producing accidental cross-keying (a key that opens a door it was never meant to), and eventually has to be torn out and started over. You can see how a properly structured system is built on our master key systems page.
The Access Hierarchy, Level by Level
Before you talk about hardware, write down your levels. Almost every multi-tenant property in Dallas fits into four, sometimes five:
- Grand master key (GMK) – opens every lock across a portfolio or campus. If you run three strip centers under one management company, this is the level that crosses buildings. Held by the owner or the senior property manager. In many buildings this level should simply not exist; create it only if you genuinely operate multiple buildings as one.
- Master key (MK) – opens everything in one building: all tenant suites, common areas, mechanical rooms, roof hatch, electrical and telecom closets. This is the building manager’s key. It is also the key that causes the most damage when it walks off, which is why the count of these should be small enough to name every holder from memory.
- Sub-master key (SMK) – opens a defined group. Common groupings: one floor, one wing, one tenant’s multi-suite footprint, all common areas but no tenant space, or all mechanical and utility rooms but nothing else. This is the level that does the real work in a well-designed system, because it lets you hand out useful access without handing out the building.
- Change key (CK) – opens one door, or one tenant’s doors. This is what the tenant gets. It should open nothing beyond their leased premises.
A fifth level worth defining separately is maintenance or utility access – mechanical rooms, roof access, sprinkler riser, electrical. Treat these as their own sub-master group rather than folding them into the general building master. That one decision makes vendor access far easier to control later.
Mapping the Building Before You Order a Cylinder
Walk the property with a floor plan and mark every door that locks. For each one, record four things: the door number, who must open it, who must never open it, and what happens operationally if that door is locked at the wrong moment. That last column is the one people skip, and it is where the real requirements live – the riser room a fire inspector needs, the trash enclosure the tenants share, the rear exit that must never be keyed in a way that defeats egress.
Then group the doors. Groups become sub-masters. If you cannot describe a group in one short sentence (“all second-floor common areas”, “all mechanical rooms”), the group is wrong and you should split it.
Only after the map is finished does hardware selection begin. Existing locks may or may not be suitable for masterkeying, and quality varies widely – builders hardware is graded under the ANSI/BHMA standards as Grade 1, 2 or 3, with Grade 1 the highest, and in a multi-tenant commercial building the entry and common-area hardware is where that difference is felt daily. Our commercial locksmith services cover the survey, the keying schedule and the installation as one job rather than three.
Design for Turnover, Because Turnover Is Guaranteed
Tenants leave. Suites get subdivided and combined. A master key system should absorb that without a re-key of the whole building, and that is purely a function of how it was planned.
Two rules do most of the work. First, keep spare unused change keys in reserve within each sub-master group, so a departing tenant’s suite can be rotated to a fresh key without touching anything else. Second, never let a tenant’s key be part of another tenant’s group. It sounds obvious, but it happens constantly when suites are combined and then split again years later.
Write into your lease template who pays for the re-key at move-out and how many keys the tenant receives. A keying schedule with no key-issue policy behind it degrades within a year.
Contractors, Trades and Vendor Access
This is where most well-designed systems quietly leak. Janitorial, HVAC, elevator, fire alarm, landscaping and plumbing crews all need to get somewhere, often outside business hours, and the path of least resistance is to hand someone a building master and hope.
Do not. Vendor access is exactly what the utility sub-master exists for. The plumber who needs the mechanical room at 6am to get to a water heater or a sewer line – a call that firms across the metroplex like Pact Plumbing, serving Plano, McKinney and the surrounding DFW cities, run constantly – needs the mechanical room and the corridor that reaches it. They do not need tenant suites. Issue a mechanical-room sub-master, log it out by name, and get it back.
For vendors who genuinely need entry into tenant space, the honest answer is often that a mechanical key is the wrong tool. A credential you can switch off at 8:01am, restrict to a weekday window, and audit afterwards solves the problem that a key cannot. That is the case for pairing your keyed hierarchy with electronic access control on the doors that see the most vendor traffic, while keeping mechanical keys for the rest.
Key Control: The Part That Fails at the Hardware Store
A perfect hierarchy is worthless if any key in it can be duplicated at a big-box store on a lunch break. Key control is what makes the plan real, and it has three parts.
- Restricted keyways. Restricted and patented keyways use blanks that are not sold on the open market and cannot be cut by a general retailer. Duplication requires authorisation. High-security cylinder lines such as Mul-T-Lock are built around exactly this idea, and they also add physical attack resistance to the cylinder itself.
- A key register. One spreadsheet or log: key stamp, level, who holds it, date issued, date returned, signature. If you cannot produce this document today, you do not know who can enter your building.
- An issue and return policy. Keys are issued to a named person, not to a company. Returned at termination. Reported lost immediately. A deposit helps, but the register is what actually works.
Stamp keys with a code, never with the suite or door number. A key marked “Suite 210” that is lost in a parking lot is an invitation.
Getting It Planned Properly in Dallas
The practical sequence is short: map the doors, define the groups, name the key holders, choose the keyway, then cut keys. Skipping straight to step five is what produces the buildings we get called into.
Best Locksmith works with commercial property managers across Dallas, Plano, Allen, Murphy, Frisco, McKinney, Rockwall and the wider DFW metroplex on master key design, rekeying, restricted-key cylinders, high-security hardware and access control. We are licensed, bonded and insured under Texas Lic # B20409, and available 24/7.
If you are planning a new system, inheriting one nobody documented, or dealing with a lost master key right now, call (214) 600-9161 and ask for a keying survey before any keys get cut.