A door lock looks like a small mechanical object, but it performs a difficult systems job: it must let authorized people pass while resisting accidental opening, casual manipulation, wear, weather and misuse. If you are asking how door locks work, how keys move lock cylinders, what a deadbolt does, why a latch is different from a bolt, how electronic access control works, why some locks fail when a door is misaligned, or what makes one locking system more secure than another, the useful answer is a combination of mechanics, identification, door geometry, materials and operating rules.

The central idea is controlled movement. A closed door is held by a latch, bolt or other locking element that engages the frame. The lock decides whether that element may move. A mechanical key presents a physical pattern that matches the lock’s internal mechanism. An electronic system presents a credential such as a card, code, phone or biometric measurement. If the system accepts the credential, it allows an actuator, cylinder or handle to release the door. Security therefore depends on both the credential check and the strength of the door assembly around it.

This guide explains door locks from first principles without teaching lock bypass. We will move through latches, bolts, cylinders, keys, pin and lever mechanisms at a safe conceptual level, deadbolts, mortise locks, padlocks, electronic strikes, magnetic locks, smart locks, access control, credentials, emergency egress, fire doors, frames, hinges, alignment, maintenance, key management, rekeying, failure modes, worked examples, misconceptions, diagnostics and practical security thinking. The goal is to understand how authorized access is engineered and maintained.

The simplest mental model: hold the door, verify permission, release movement

A lock system can be separated into three functions. First, hardware physically holds the door closed. Second, a mechanism checks whether the user presents an acceptable credential. Third, successful verification allows the holding hardware to move or disengage.

This model applies to a traditional keyed deadbolt and to a modern card-access door. The credential technology changes, but the system still needs a physical barrier and a controlled release.

Thinking in layers prevents a common mistake: evaluating only the lock cylinder while ignoring the door, frame, hinges or installation.

Latch versus lock

A latch keeps a door closed but may not provide strong security. Spring latches retract when the handle turns and usually extend automatically when the door closes.

A lock adds controlled authorization. It can prevent the latch or handle from moving, or it can use a separate bolt that does not retract simply because the door is pushed.

Many door sets combine latching and locking because people want a door that closes conveniently and can also be secured.

What a deadbolt does

A deadbolt is a bolt designed to extend into the strike or frame without being spring-loaded back by pressure on the door.

Because it cannot normally be pushed back simply by compressing a spring, it provides stronger resistance than an ordinary latch when properly installed.

Deadbolt performance still depends on bolt throw, material, strike attachment, frame strength and door construction.

Why the door frame matters

When a locked door is forced, much of the load travels from the bolt into the strike plate and then into the frame.

A strong lock mounted in a weak, split or poorly anchored frame can fail because the surrounding structure gives way first.

Door security is therefore a load-path problem. Force must be carried from the lock hardware into framing capable of resisting it.

Strike plates

The strike plate is the metal component mounted on the frame where a latch or bolt enters.

It protects the frame from repeated wear and distributes load over a larger area than raw wood or another soft material could.

Security strikes are designed with stronger material and anchoring appropriate to the door system, but installation quality is as important as the visible plate.

Door alignment

A lock works best when the latch or bolt enters the strike without binding. Sagging hinges, swelling wood or building movement can shift the door out of alignment.

Users may then need to lift, push or pull the door while turning the key. That extra force increases wear on the cylinder, latch and key.

Many bad lock complaints are actually geometry problems. Alignment should be checked before replacing the cylinder.

The key as a physical credential

A mechanical key carries a pattern of cuts, grooves or shapes that corresponds to internal lock geometry.

When the correct key is inserted, the internal components move into a state that allows the plug, lever or other mechanism to move.

The key does not provide security because its shape is mysterious. It provides security because only authorized copies should match the mechanism closely enough for normal operation.

Pin-tumbler cylinders at a high level

In a common pin-tumbler cylinder, small spring-loaded pin stacks sit between a rotating plug and the surrounding housing.

The correct key lifts the pins so their boundaries align with the plug’s rotation boundary, allowing the plug to turn.

This explanation describes normal authorized operation. Detailed bypass or manipulation techniques are intentionally outside the scope of this guide.

Why key cuts need tolerances

Mechanical locks cannot demand mathematical perfection because keys and components wear, temperatures change and manufacturing has finite precision.

The mechanism therefore accepts a small dimensional tolerance around the intended key shape.

Too much tolerance makes the lock loose and less selective; too little can make normal keys unreliable. Good lock design balances usability with discrimination.

Wafer locks

Wafer locks use flat spring-loaded wafers rather than pin stacks. The correct key positions the wafers so the plug can rotate.

They are common in cabinets, vehicles and lower-security applications because they can be compact and economical.

Different lock families exist because security, size, cost and durability requirements vary. One mechanism is not automatically best for every door.

Lever locks

Lever locks use shaped levers that must be raised to appropriate positions before the bolt can move.

They have a long history in doors and safes and can provide robust mechanical security when properly designed.

The core principle is the same: a credential positions internal elements into an allowed state, after which the locking member can travel.

Mortise locks

A mortise lock fits into a pocket cut within the edge of the door. The lock case can contain the latch, deadbolt and handle mechanism in one assembly.

Mortise construction can support durable commercial hardware and integrates well with heavy doors.

Because the lock depends on precise door preparation, installation quality and alignment strongly influence reliability.

Cylindrical locksets

Cylindrical or bored locksets fit through prepared holes in the door and are common in homes and commercial interiors.

The cylinder, handle or lever and latch interact through a compact assembly.

They are convenient to install in standardized doors, but the correct grade and function should match the security and traffic level of the opening.

Rim locks and surface hardware

Rim locks or rim-mounted devices attach largely to the surface of the door rather than being recessed deeply inside it.

Surface mounting can simplify installation or suit particular door constructions.

As with other hardware, the surrounding door and fasteners must be strong enough to transfer loads safely.

Padlocks

A padlock combines a removable lock body with a shackle that passes through a hasp, chain or other fitting.

The lock body may use a key cylinder, combination mechanism or electronic credential.

Padlock security depends on the entire connection. A strong padlock on a weak hasp provides only the strength of the weaker component.

Combination locks

A combination lock accepts a remembered sequence rather than a physical key.

Internal wheels, discs or electronic logic must align in the correct state before the lock releases.

Combinations remove the need to carry a key but create a different management problem: the code must remain confidential and be changed when exposure is suspected.

Mechanical keys and duplication control

Ordinary keys can often be copied by cutting a new blank to match the original.

Restricted key systems use controlled blanks, authorization procedures or specialized profiles to make casual duplication more difficult.

Key control is an administrative layer. Even a strong cylinder loses value if unauthorized copies are widely distributed.

Key hierarchies and master-key systems

Organizations sometimes use master-key systems so one authorized key can operate several doors while individual keys operate only selected openings.

This convenience requires careful design because expanding access relationships can increase the consequences of a lost high-level key.

The useful principle is privilege management: give each person no more access than the role genuinely requires.

Rekeying

Rekeying changes which key operates a lock without necessarily replacing the entire lock body.

A locksmith changes or reconfigures internal authorized components so the old key no longer matches and a new key does.

This is useful after staff changes, lost keys or occupancy changes when the hardware itself remains serviceable.

Replacing versus rekeying

Rekeying changes credential compatibility, while replacement changes physical hardware.

If a lock is worn, damaged, obsolete or too weak for the application, replacement may be the better solution.

If the hardware is sound but key control has been lost, rekeying can restore credential control more economically.

Lost keys

A lost key creates uncertainty because the owner may not know who can now present a valid credential.

The appropriate response depends on what the key opens, whether it can be identified with the location, and the consequences of unauthorized entry.

High-consequence keys deserve faster rekeying or credential cancellation than keys to low-risk spaces.

Electronic access control

Electronic access systems replace or supplement mechanical key verification with electrical credentials and controllers.

A reader captures a card, mobile, code or biometric credential. A controller checks whether that credential is authorized for that door and time.

If approved, the system releases an electronic strike, magnetic lock, motorized lock or other actuator for a controlled period.

Electronic strikes

An electronic strike replaces or modifies the frame-side component that captures the latch.

When powered in the authorized state, the strike mechanism allows the latch to pass without requiring the mechanical lock to be rotated in the usual way.

Electronic strikes are useful because existing door hardware can often remain mechanically familiar while access permission is controlled electronically.

Magnetic locks

An electromagnetic lock uses a powered electromagnet and an armature plate to hold a door closed.

When the magnet is energized and the plate aligns correctly, strong magnetic attraction resists separation.

Because power state is central to operation, magnetic locks require careful integration with emergency egress and fire-safety rules.

Fail-safe and fail-secure

Fail-safe hardware unlocks when power is lost. Fail-secure hardware remains locked from the secured side when power is lost, while still allowing required egress by appropriate means.

Neither philosophy is universally better. Life safety, security, fire strategy and occupancy determine the correct behavior.

These terms describe power-failure behavior, not overall quality.

Emergency egress

People inside a building must be able to exit according to applicable safety requirements even when access control is protecting entry.

Panic hardware, lever handles, exit sensors or emergency release logic can provide rapid egress without requiring a key or complicated knowledge.

Security design therefore distinguishes controlling entry from trapping occupants. Safe exit is a separate and critical requirement.

Fire doors and locking hardware

Fire doors are part of a compartmentation system intended to resist fire and smoke spread for a defined period.

Locks, latches, closers and access-control hardware on those doors must be compatible with the fire-door assembly and emergency strategy.

Drilling, modifying or adding unapproved components can compromise the tested door system, so changes belong under qualified guidance.

Panic bars

Panic bars or exit devices let occupants release a door by pushing a broad bar or touchpad in the direction of travel.

They are designed for intuitive operation under crowded or stressful conditions.

The hardware can still be connected to alarms or access control while preserving immediate authorized egress.

RFID cards and fobs

Many access cards use radio-frequency identification or related contactless technologies.

The reader exchanges data with the credential at short range and passes an identifier or cryptographic result to the controller.

Security depends on credential technology, backend authorization and how lost cards are revoked. The plastic card itself is only one layer.

Mobile credentials

Phones can act as access credentials using Bluetooth, NFC or other secure communication methods.

Mobile systems can simplify issuing and revoking access because administrators do not always need to distribute physical cards.

They also depend on device security, account protection, battery availability and software support.

Keypads and PIN access

A keypad accepts a memorized code. The controller checks the code and releases the door if permitted.

Codes are easy to issue but can be shared, observed or reused carelessly.

Good administration assigns individual credentials where possible and changes exposed codes rather than relying indefinitely on one shared secret.

Biometric access

Biometric systems compare a measured body characteristic such as fingerprint or face pattern with an enrolled template.

They can reduce the problem of shared cards, but introduce privacy, false-match, false-reject and accessibility considerations.

Biometrics should be treated as one authentication method within a broader access policy, not as magical proof of identity.

Two-factor access

High-security environments may require two different credential factors, such as a card plus a PIN.

The idea is that loss of one factor does not automatically grant access.

Two-factor systems increase security but also add time, support requirements and failure modes, so they are usually reserved for higher-risk openings.

Access-control schedules

Electronic systems can authorize a person only during selected hours or dates.

A staff card might work during normal shifts but not late at night, while security staff have broader access.

Time-based permissions reduce unnecessary privilege and can automatically adapt access to operational schedules.

Audit trails

Electronic access systems can record credential events such as accepted entry, denied entry, door held open or forced-door alarms.

Audit trails help administrators investigate incidents and diagnose faults.

Records should be protected and retained according to privacy and organizational requirements because access data can reveal people’s movements.

Door-position sensors

A magnetic or electronic contact can report whether a door is physically open or closed.

This lets a system distinguish a valid credential event from a door left propped open after entry.

Monitoring the door state closes an important gap between permission and physical reality.

Request-to-exit sensors

Some controlled doors use motion sensors, push buttons or hardware switches to indicate that a person is leaving.

The system can release appropriate hardware and avoid treating normal egress as a forced-door event.

Exit sensing must be designed so life safety does not depend on a fragile convenience feature alone.

Smart locks

Smart locks combine mechanical locking hardware with electronics, wireless communication and software.

They can support remote credential management, temporary guest access, activity logs and integration with home or building systems.

Connectivity also creates cybersecurity and battery-management responsibilities, so a smart lock is not automatically more secure than a well-managed conventional lock.

Battery-powered locks

Electronic locks on batteries need enough stored energy for motors, radios and sensors.

Low-battery warnings give time for replacement before access becomes unreliable.

Good products also define what happens when the battery is exhausted, using approved backup power or mechanical override arrangements.

Cybersecurity for locks

Networked access systems should use authenticated communication, secure updates and protected administrator accounts.

A physically strong lock can be undermined by weak software credentials if remote control is poorly secured.

Cybersecurity therefore becomes part of door security whenever access decisions travel through networks or cloud services.

The door leaf

A lock is mounted in a door leaf made from wood, steel, aluminum, glass assemblies or composite materials.

The door must resist loads around the lock preparation and remain dimensionally stable enough for alignment.

A high-grade lock installed in a badly damaged door can offer poor real security because the barrier itself fails first.

Hinges

Hinges carry the door’s weight and establish its alignment with the frame.

Worn hinges can make the door sag until the latch and strike no longer meet cleanly.

On outward-opening secure doors, hinge design may also include features that preserve security if exposed components are damaged.

Door closers

A door closer controls the door’s return to the closed position.

Closing speed must be strong enough to latch reliably but controlled enough to avoid slamming or accessibility problems.

If the door never reaches the latch, even an excellent lock remains ineffective because the door has not entered its secured state.

Weather and swelling

Wood doors can swell with humidity, metal components expand with heat and buildings shift slightly over time.

These changes alter clearances between latch, bolt and strike.

Seasonal binding therefore may be a geometry issue rather than a cylinder issue.

Lubrication and maintenance

Locks contain moving parts that benefit from appropriate maintenance specified by the manufacturer.

Using the wrong lubricant can attract dirt, gum up components or damage finishes.

Routine inspection should also include loose fasteners, strike alignment, door closer behavior and worn keys.

Worn keys

Keys gradually wear at their edges and cuts. A badly worn key may lift internal components inaccurately even when the lock itself is healthy.

If one key works smoothly while another identical key does not, comparing key condition can reveal the problem.

Copying from a worn copy can reproduce errors, so authorized replacements are best made from reliable key data or a good original.

Frozen or contaminated locks

Outdoor locks can be affected by water, ice, dust, salt and corrosion.

Forcing a frozen key can break the key or damage the cylinder.

Environmental locks need weather-resistant hardware and maintenance appropriate to the location.

Attack resistance at a high level

Locks can face physical attack, forced entry, credential theft and unauthorized duplication.

Security improves by using appropriate certified hardware, strong doors and frames, controlled keys or credentials, and monitoring where risk justifies it.

Detailed bypass methods are not needed to understand the principle: defensive design assumes more than one possible failure path and strengthens the whole assembly.

Security standards and grades

Lock and door hardware is often tested under national or industry standards for cycle endurance, strength, fire performance or attack resistance.

A grade provides a more useful comparison than appearance alone because it refers to defined tests.

The correct grade depends on traffic and risk. A bedroom privacy lock and a high-use exterior commercial door have different requirements.

Privacy locks versus security locks

Bathroom and bedroom privacy locks are intended to prevent casual entry, not to resist serious forced attack.

Exterior and high-security doors need stronger hardware and key control.

Using the word lock for both can hide important differences in intended function.

Door handing

Doors are described by the side on which their hinges and locking hardware operate. Hardware must match the direction and swing where the product is handed.

Using the wrong handing can make levers, latches or exit hardware operate incorrectly even when the parts seem mechanically similar.

Handing is therefore a geometry convention that allows manufacturers and installers to specify how the door moves before hardware is fitted.

Backset and door preparation

Backset is the distance from the door edge to the centerline of a lock cylinder or handle preparation.

Standardized backsets allow locksets to fit factory-prepared doors, but mixing incompatible dimensions can create misalignment or require improper modification.

Correct door preparation is part of security because oversized or poorly cut openings weaken support around the hardware.

Door thickness and spindle length

Locks are designed for a range of door thicknesses. Screws, spindles and cylinders must engage correctly across that thickness.

Hardware that is too short may not connect reliably; hardware that is too long can leave loose movement or exposed components.

Installation therefore starts with the door dimensions, not only with the appearance of the lock.

Cylinder guards and protective escutcheons

Some doors use reinforced trim or escutcheons around the cylinder to protect exposed hardware and spread loads.

These components can also improve weather sealing and protect the door surface from wear.

Protective trim should be compatible with the lock and door rather than improvised, because the wrong hardware can interfere with normal operation or fire certification.

Credential lifecycle management

Every credential has a lifecycle: it is issued, used, possibly changed, and eventually revoked or returned.

Mechanical keys are harder to revoke individually because copies cannot be disabled remotely. Electronic credentials can often be deactivated in software.

Organizations therefore need processes for staff departures, lost credentials, temporary visitors and periodic access review.

Visitor and temporary access

Electronic systems can issue credentials that work only for a limited time or selected doors.

This is useful for contractors, hotel guests or visitors because access can expire automatically rather than relying on manual key return.

Temporary access should still follow least-privilege principles: the credential should open only what the visitor legitimately needs.

Power supplies and backup

Electronic access-control hardware depends on power supplies sized for locks, readers, controllers and battery charging.

Backup batteries can keep selected functions operating during short outages, but behavior must match the building’s life-safety design.

Power design is therefore part of access design. A reliable reader is not enough if the lock power supply is undersized or poorly maintained.

Mechanical override and resilience

Some electronic lock systems include authorized mechanical or local override methods for maintenance, emergency or system failure.

These overrides need strong administrative control because they can bypass normal electronic logging and schedules.

Resilience is not about creating a secret shortcut. It is about defining a controlled recovery path that remains available when the primary technology fails.

Accessibility and lever handles

Door hardware must be usable by people with different strength, dexterity and mobility. Lever handles are often easier to operate than small round knobs because they need less grasping and twisting.

Opening force, handle height and clear approach space can matter as much as the lock mechanism itself.

Accessible security means preserving authorized control without making ordinary lawful use unnecessarily difficult.

Acoustic and weather seals

Exterior and hotel doors often use seals for sound, smoke, weather or air control. Those seals press against the door as it closes and can add resistance to latching.

If a closer is adjusted without considering seal compression, the door may stop just short of the strike.

Lock reliability therefore interacts with non-security components. A door assembly has to satisfy several functions at once.

Worked example: key turns only when the door is pulled

If the key works smoothly with the door open but binds when the door is closed, the cylinder is probably not the main problem.

The bolt may be pressing against the strike because the door has sagged or the frame has moved.

Correcting alignment reduces stress and restores normal locking without unnecessarily replacing the credential mechanism.

Worked example: access card is accepted but door stays locked

Suppose the reader beeps green and the access system logs an approved credential, yet the door does not open.

The authorization layer worked. The problem may be the electronic strike, wiring, power supply, door preload or mechanical latch.

Separating permission from actuation prevents administrators from blaming the card database for a physical failure.

Worked example: door is secure but never latches automatically

A closer may bring the door near the frame but not provide enough final force to engage the latch.

Air pressure, warped seals or strike misalignment can add resistance.

The correct repair restores reliable closure rather than relying on occupants to pull the door shut manually every time.

Common misconceptions about locks

A more complicated-looking key does not automatically mean the entire door is more secure. The frame, strike and installation matter.

Electronic locks are not automatically stronger than mechanical locks. They trade one set of risks for another and still depend on physical hardware.

A latch clicking into place is not the same as a deadbolt being extended. The two mechanisms serve different security functions.

More misconceptions: smart locks and master keys

A smart lock does not eliminate key management; it replaces some physical-key management with account, device and software management.

A master-key system does not mean one key physically fits every lock by accident. It is intentionally designed privilege structure and must be governed carefully.

Replacing a cylinder does not fix a weak door frame. Security should be evaluated as a complete opening.

A practical lock diagnostic method

First determine whether the problem occurs with the door open or only when closed. If it works open, alignment is the leading suspect.

Next separate credential recognition from mechanical movement. Does the key turn or card approve? Does the latch retract? Does the bolt enter the strike?

For high-security, electronic or fire-rated doors, use qualified locksmith or facility personnel rather than modifying hardware experimentally.

Frequently asked questions about door locks

How does a key open a lock?

The key positions internal components into the authorized alignment so the cylinder, lever or bolt-control mechanism can move normally.

What is the difference between a latch and a deadbolt?

A latch is commonly spring-loaded for automatic closing, while a deadbolt extends deliberately and is not normally pushed back by simple pressure on the door.

Why does my lock work when the door is open but not closed?

That pattern usually points to door or strike misalignment rather than a problem inside the key cylinder.

What is rekeying?

Rekeying changes which mechanical key operates a lock while retaining suitable existing hardware.

What is an electronic strike?

It is a controlled frame-side device that releases the door latch after an authorized electronic access decision.

What is a fail-safe lock?

It unlocks when electrical power is lost. This behavior is selected where life-safety or operating requirements call for it.

What is a fail-secure lock?

It remains secured from the controlled side during power loss while required emergency egress is preserved by the door system.

Are smart locks more secure?

They can improve credential management, but security depends on physical hardware, software, account protection, installation and operational practices.

Why do commercial doors use panic bars?

They allow fast intuitive egress by pushing in the direction of escape, which is valuable during emergencies and crowded conditions.

When should a lost key lead to rekeying?

When the uncertainty about who may possess the key creates unacceptable access risk, especially for exterior, high-value or widely privileged openings.

The bigger idea: a lock is an access policy made physical

Every lock expresses a rule: this barrier should stay closed until an acceptable credential or authorized action changes its state. Mechanical locks encode the rule in shaped metal and moving parts. Electronic systems encode it in credentials, software and actuators. In both cases, the rule succeeds only if the door, frame, hinges, power and people around it support the same security goal.

The deeper lesson is that security is layered. Strong authentication cannot compensate for a failing frame, and strong steel cannot compensate for uncontrolled credentials. Reliable access control comes from aligning permission, physical resistance, emergency egress, maintenance and human administration.

Useful routes from here

• Tell Me About Buildings for doors, structures and building services.
• Tell Me About Hotels for electronic keys and guest access systems.
• Tell Me About Cryptography for digital credentials and secure communication.