New Lease, Old Keys: Securing a Commercial Space on Move-In Day
Moving into a commercial property comes with plenty of details to manage, but I never treat the existing keys as a minor issue. The previous occupants, property managers, contractors, employees, or vendors may still have copies, and there is usually no reliable way for a new tenant to know exactly how many keys exist. When I help business owners think through this transition, Old Glory Locksmith recommends treating access security as one of the first move-in priorities. That is why new lease, old keys should immediately prompt a review of who can enter the property and how those credentials are controlled.
A commercial move-in is the right time to establish a clean starting point. Rekeying locks, replacing worn hardware, updating access codes, reviewing master-key arrangements, and identifying restricted areas can all be handled before employees begin using the space. I find that taking these steps early is much easier than trying to correct access problems after keys have already been distributed.
Key Takeaways
Existing keys should not automatically be trusted after a commercial lease changes hands.
Rekeying can preserve compatible hardware while changing which keys operate the locks.
High-security areas may need different access levels from ordinary offices.
Access records should be updated as employees and vendors change.
A move-in security review can identify weaknesses before daily operations begin.
Why Existing Keys Create a Security Question
When a business receives the keys to a commercial space, the immediate assumption is often that those keys represent complete control of the property. In reality, the keys only show that someone currently has access. They do not tell the new tenant who else may have copies.
Previous employees may have retained keys. Cleaning crews, maintenance workers, contractors, landlords, former managers, or neighboring businesses may also have had legitimate access at some point. Even if everyone involved is trustworthy, the new tenant usually cannot verify the complete history of every copy.
That uncertainty is the main reason I consider rekeying at move-in. Rekeying changes the internal configuration of a compatible lock so that previous keys no longer operate it. In many cases, the existing hardware can remain in place, which may make rekeying more practical than replacing every lock.
There is also a record-keeping advantage. Starting with a controlled key system allows the business to establish who receives which keys and which areas they can access. That becomes especially useful when a company has multiple employees, departments, offices, storage areas, or exterior entrances.
Rekeying Versus Replacing the Locks
The decision between rekeying and replacing hardware depends on the condition, security level, and function of the existing locks. If the hardware is relatively new, compatible, and functioning properly, rekeying may provide a straightforward way to eliminate uncertainty about old keys.
Replacement becomes more attractive when the existing locks are damaged, outdated, poorly matched, or unsuitable for the business's security requirements. I also look closely at doors that experience heavy daily traffic because worn cylinders, loose hardware, and damaged strike plates can reduce reliability.
A commercial property may have several different types of openings. Exterior entry doors, interior offices, storage rooms, mechanical areas, and emergency exits do not necessarily need identical hardware. Applying the same lock to every door can create unnecessary access or make future management more difficult.
Security standards can also influence the decision. ANSI/BHMA lock grades are commonly used to distinguish different levels of performance, with Grade 1 generally representing the highest commercial performance classification among the three standard grades. That does not mean every door needs Grade 1 hardware, but it is useful context when evaluating what is already installed.
Establish Access Control Before Employees Arrive
The next step is deciding who should have access to which areas. I prefer to think about the building in zones rather than treating every door equally.
For example, a receptionist may need access to the main entrance and general office areas but not a server room, records room, inventory cage, or mechanical space. A facilities employee may need access to areas that ordinary staff never enter. These distinctions become easier to manage when they are established before keys or credentials are handed out.
For businesses seeking commercial locksmith services in Phoenix, AZ, this type of access planning can be particularly useful when a new lease involves multiple entrances or shared commercial buildings. A clear access structure reduces confusion and makes future changes easier to document.
Master-key systems can also be useful when multiple access levels are required. A properly designed system can allow authorized personnel to access several areas while limiting individual employees to specific doors. The important point is that master keys should be issued selectively because losing one can affect more than a single entrance.
Electronic access control provides another option. Keypads, proximity credentials, mobile access, and other systems can allow businesses to change permissions without physically collecting every key. The right choice depends on the building, budget, operating habits, and security requirements.
Inspect Every Entry Point During the Move-In
I recommend walking through the property before the business settles in. Do not inspect only the front door. Exterior doors, rear entrances, side doors, loading areas, offices, storage rooms, gates, and other controlled openings should all be checked.
Look for doors that do not latch correctly, locks that feel loose, cylinders that stick, damaged strike plates, missing screws, and doors that can be bypassed because of poor alignment. A lock can be high quality and still perform poorly if the door and frame are not properly aligned.
Door hardware should also match how the opening is used. A busy employee entrance may require a different setup from a low-traffic storage room. Similarly, an exterior door exposed to weather may need hardware selected for that environment.
Businesses researching locksmith services should also consider emergency access. If a lock fails outside normal business hours, someone should know who to contact and where critical keys or credentials are managed. A security system is only useful when the business can maintain and operate it properly.
Move-In Security Checks
Test every exterior and controlled interior door.
Check door alignment, latches, cylinders, and strike plates.
Identify doors that require restricted access.
Decide which employees need physical keys or electronic credentials.
Document emergency access procedures before opening.
Build a Key Management System From Day One
Once the locks have been rekeyed or replaced, the next challenge is preventing the same uncertainty from returning. I recommend keeping a basic key-control record showing which employee or department receives each key.
Keys should be labeled carefully without exposing sensitive information. A key marked only with an internal identification number can be easier to manage than one that visibly identifies the exact room or security function.
Businesses should also establish a return procedure. When an employee leaves, changes departments, or no longer needs access, the business should know which keys or credentials must be returned or disabled.
Duplicate keys deserve attention as well. If employees can freely make copies, the business may quickly lose track of how many keys exist. A restricted key system can provide greater control when maintaining a documented access structure is important.
For electronic credentials, the same principle applies. Access should be removed promptly when an employee leaves or changes responsibilities. Keeping old credentials active creates unnecessary exposure.
Consider the Property's Existing Security Setup
A commercial space rarely relies on locks alone. Security cameras, alarm systems, access-control panels, gates, intercoms, and lighting may already be installed when a new tenant moves in.
I recommend determining which systems belong to the landlord and which belong to the previous tenant. A tenant should not assume that an existing access-control system has been completely reset simply because the lease has changed.
Codes and credentials should be reviewed wherever the new tenant has authority to manage them. Shared codes are especially worth examining because they can be difficult to track when many people know the same combination.
Physical security and electronic security should also work together. A camera pointed at a rear entrance cannot compensate for a door that does not lock properly, just as a strong lock does not provide much visibility into who is approaching the property.
Access Management Priorities
Rekey or replace locks before distributing new credentials.
Maintain a record of issued keys and access credentials.
Remove former employee access promptly.
Review inherited alarm and access-control settings.
Keep restricted areas limited to personnel who actually need them.
What to Do Before Opening the Business
I would complete the access review before the first normal business day whenever possible. This gives the owner or manager time to discover problems without employees waiting outside or operations already underway.
It is also useful to create a simple map of the property's access points. Marking exterior doors, restricted rooms, emergency exits, and key-controlled areas helps management understand the overall system.
A second practical step is keeping a small set of authorized spare keys in a secure location. Spares should not become an uncontrolled collection of copies. They should be documented and available only to designated personnel.
I also recommend scheduling a follow-up review after the first few weeks. New employees may reveal access gaps that were not obvious during the initial walkthrough. A business may also discover that a particular door needs a different access level once normal operations begin.
Common Move-In Mistakes to Avoid
One of the biggest mistakes is accepting all existing keys without changing anything. Even when the landlord provides them in good faith, the tenant may not know who previously had copies.
Another mistake is focusing entirely on the front entrance. Employees, contractors, and deliveries often use side or rear doors, which can become overlooked points of access.
I also caution against giving every employee the same level of access. Convenience can create unnecessary exposure when employees only need to enter certain areas.
Finally, businesses sometimes postpone key management until after moving in. That creates a record-keeping problem from the beginning. Establishing a controlled system before distributing new credentials is much easier.
Final Move-In Priorities
Change access before regular operations begin.
Review all exterior and restricted interior doors.
Record who receives each key or credential.
Disable access that no longer has a legitimate purpose.
Reassess the system after employees begin using the space.
Frequently Asked Questions
Should a business rekey a commercial property after signing a new lease?
Rekeying is often worth considering because the new tenant may not know how many copies of existing keys are in circulation. It can provide a clean access starting point without necessarily replacing compatible lock hardware.
Is rekeying better than replacing commercial locks?
Neither option is automatically better. Rekeying may make sense when existing hardware is in good condition and suitable for the property. Replacement may be more appropriate when locks are damaged, outdated, or inadequate for the required security level.
How many keys should a business keep for emergencies?
There is no universal number. I recommend keeping only the spare keys needed for designated managers, emergency contacts, or specific operational requirements. Every spare should be controlled and documented.
Should former employees' keys be collected?
Yes. Businesses should make reasonable efforts to recover physical keys when employees leave or no longer require access. However, recovering a key does not necessarily eliminate all copies, which is why rekeying may still be considered when access history is uncertain.
When should commercial locks be inspected?
The move-in period is an ideal time because the business is already evaluating the property. Additional inspections can be scheduled when hardware becomes difficult to operate, after security incidents, or when access requirements change.
Final Thoughts
I see a new commercial lease as an opportunity to reset the property's access system. Instead of assuming that inherited keys are secure, I prefer to establish a clear record of who can enter, which doors they can use, and how access will be managed going forward.
The right solution may involve rekeying, replacing selected hardware, creating a master-key system, installing electronic access control, or combining several approaches. The important part is matching the security setup to how the business actually operates.
For me, new lease, old keys is a simple reminder that possession of a property and control of its access are not necessarily the same thing. Addressing that distinction on move-in day can give a business a much cleaner starting point for managing its commercial space.
Secure the Property Before Opening
If you are taking possession of a commercial property, consider arranging an access assessment before employees begin using the space. A locksmith can review existing locks, identify worn hardware, discuss rekeying or replacement options, and help establish appropriate access levels. Share details about the building's entrances, restricted areas, employee access, and any existing security equipment. Addressing these issues before opening can reduce uncertainty and create a more controlled approach to commercial property security from day one.
