How to Manage Property Keys and Access Securely

Every property your agency manages has keys — and every key represents a security responsibility. Lose a key and you have a security breach. Issue a key without recording it and you have no accountability. Fail to collect keys at the end of a tenancy and you have an access control problem that may persist for years. This is the core problem with managing property keys and access securely: keys are physical objects that move between people, and without a system to track their movement, they inevitably go astray. This guide walks you through how to build that system.

The scope of the problem

Key management sounds simple. In practice, it's one of the most common sources of operational frustration in a letting agency. Consider a typical week: a new tenant moves in and receives two sets of keys, a fob for the communal entrance, and a garage remote. A plumber needs access to fix a leak and borrows a set from the office. A landlord drops off a spare set. A tenant loses their keys and needs a replacement. A viewing is scheduled and an agent needs the keys to a vacant property.

Each of these events involves a key changing hands. Without a log of who has which keys at any given moment, your agency has no way of knowing where they are — until someone needs one and it cannot be found. (This usually happens at 4:47 p.m. on a Friday.)

A missing key is more than an inconvenience. It's a security incident, a compliance risk, and often a cost — locksmith fees, re-keying, deposit disputes. For agencies managing portfolios of dozens or hundreds of properties, the cumulative impact can be significant.

Building a key register

The foundation of managing property keys and access securely is a key register — a record of every key held by your agency, which property it belongs to, and who currently has possession of it.

Your CRM or property management system should support a key register linked to each property record. For each property, the register should note:

The number and type of keys held (front door, back door, communal entrance, garage, postbox)
The physical location of each set (key cabinet, issued to contractor, held by tenant)
The history of who has had possession and when

When keys are issued — to a contractor for maintenance, to an agent for a viewing, to a tenant at move-in — the register is updated. When keys are returned, the register is updated again. This creates an audit trail that answers "where are the keys to number 14?" at any given moment.

A well-maintained key register takes minutes to populate per property and hours to set up initially. It saves weeks of search time across the year and eliminates the guesswork about whether a lost key represents a genuine gap or just poor admin. Proper property portfolio management depends on it.

Key issue and return process

Every key handover should follow a defined process. This doesn't need to be bureaucratic, but it does need to be consistent.

When keys are issued, record:

The date
The recipient (by name and role)
The reason (maintenance job, viewing, move-in)
The expected return date
Ideally, a signature or acknowledgement

Have the recipient sign for the keys — physically or digitally. If keys are issued to a contractor, link the handover to the job reference so the key movement is tied to the specific maintenance visit. This takes a minute per handover and creates accountability on both sides.

When keys are returned, record the date and confirm that all issued keys have been returned. If keys aren't returned by the expected date, an automated reminder should prompt follow-up. This isn't nagging — it's the difference between a resolved key and a missing key. For agencies managing block management and shared access, this becomes even more critical, as multiple properties and tenants may depend on the same key set.

Tenant key management

At the start of a tenancy, the number and type of keys issued to the tenant should be documented in the tenancy agreement and in your CRM. At move-out, all keys should be collected and checked against the original record.

If keys aren't returned at the end of the tenancy, the cost of replacement or re-keying can be deducted from the deposit — but only if you can demonstrate what was issued and what wasn't returned. The TDS adjudicator guidance on missing keys confirms that a key register provides this evidence, which is essential when defending a claim through a government-approved tenancy deposit scheme.

Lost keys during a tenancy are the tenant's responsibility, but your agency often needs to facilitate replacement — arranging a locksmith, issuing replacement keys, updating the register. A CRM that tracks these interactions alongside the original key issue data makes the whole process traceable.

Contractor access and digital solutions

Contractors need access to properties regularly — for maintenance, inspections, and viewings. Managing this access while maintaining security requires clear protocols. When managing contractor and supplier relationships, consistency matters — the same sign-in/sign-out process every time.

For routine maintenance, the most common approach is to issue keys from the office and collect them on completion. The key register tracks this handover. For urgent maintenance outside office hours, alternative arrangements may be needed: a key safe at the property, access via a digital lock, or coordination with the tenant to provide access directly. Whatever the method, your CRM should record how access was provided for each visit. This audit trail protects the agency if a security issue arises.

Physical key management is increasingly supplemented by technology. Key safes, electronic lockboxes, and smart locks offer alternatives to traditional key handover.

Key safes are particularly useful for properties with frequent access — vacant properties being marketed, properties with regular maintenance. The combination can be changed after each use, and access can be granted remotely without anyone needing to visit the office.

Smart locks take this further, allowing access via a smartphone app. Access codes can be time-limited, ensuring a contractor has access only during the scheduled visit. Every entry is logged electronically, creating a detailed access history. For agencies working with commercial properties, this level of audit trail is increasingly expected by landlords.

If your agency uses these technologies, your CRM should integrate with them or at least record the access codes and entry logs alongside the property record. This keeps all property-related information in one structured system, which matters when you're investigating access or resolving disputes.

Security and compliance

Key management is fundamentally a security function. The keys your agency holds provide physical access to landlords' properties — properties that may contain valuable furnishings, personal belongings, or sensitive documents.

A key loss is a security incident and should be treated as one. If a set of office keys is lost, the affected properties should be re-keyed. If a contractor fails to return keys, follow-up should be immediate, not a "nice to do" item.

Key storage in the office should be secure: a locked key cabinet, ideally with restricted access. Keys should be labelled with a code rather than a property address, so a lost key cannot be easily linked to a specific property by a third party.

For agencies operating under redress schemes (which you should be under the Tenant Fees Act), a complete, up-to-date key register demonstrates that your agency has proper controls in place. An auditor reviewing your systems will expect to see evidence of how you track access to properties — key registers are that evidence.

Your CRM should be able to produce a report showing the current status of keys for any property: how many sets exist, where each set is, and the history of possession. This report should be producible on demand, not after hours of searching a filing cabinet.

Frequently Asked Questions

How many sets of keys should I hold for each property? This depends on your agency's model and the property type. Most residential properties need 2–3 sets in the office (for viewings and emergency access), plus sets held by the tenant and landlord. Document what you issue to the tenant in the tenancy agreement, and keep the office copies in a secure cabinet. If you're managing multiple branches, standardise this across all offices to avoid confusion when staff cover each other's properties.

What if a contractor loses keys? This should be treated as a disciplinary matter with the contractor and a cost to them, not your agency. Clarify in your contract with any regular contractor that lost keys result in re-keying costs. Document every key handover so you can prove what was issued. It also helps to use a key safe or digital lock for urgent maintenance, so contractors never hold the master key.

Can I use smart locks for all my properties? Smart locks work well for vacant properties, routine maintenance access, and properties with frequent turnovers. For occupied properties, many tenants prefer traditional locks for privacy reasons — and they have a point. A hybrid approach (smart lock for contractor access, traditional key for tenant occupation) is common. Ensure your CRM integrates with your access technology so entry logs sync with your property records.

How long should I keep key-access records? Keep records for at least the duration of the tenancy plus 3 years, in line with standard tax and regulatory record retention. This covers dispute resolution through deposit schemes, complaints to ombudsmen, and any security investigations. If a theft occurs 18 months after a tenant moves out, you may need to demonstrate who had access — historical records prove it wasn't your tenant.

What if I find an old key and don't know which property it belongs to? This is a security risk. You cannot assume it's inert. Change the lock on the property it might belong to, or issue a new key to the current occupant and destroy the old one. (This is rare if your register is accurate, but it happens.) It's cheaper than the alternative — finding out a stranger has been letting themselves in.

Should I label keys with property addresses? No. Use a code system instead — colours, numbers, initials — anything that doesn't reveal the property address to a third party if the key is lost. A lost key labelled "42 Smith Street" has just given someone a map to a property; a lost key labelled "RN-07" tells them nothing.

Who has access to the key cabinet? Restrict access to staff who genuinely need it — usually the lettings team and a backup administrator. Not the whole office. Document who accessed the cabinet and when using a simple sign-out sheet or CRM audit trail. If a key goes missing, you'll know who last removed it.

Can I use digital key-sharing apps instead of a physical key register? Digital sharing apps (Bluetooth key access, cloud-based unlock codes) are useful for day-to-day contractor access, but they don't replace a key register. They complement it. You still need a record of which properties have physical keys, where they're stored, and who has possession. Treat the digital access logs as an additional layer of the audit trail, not a replacement.

Getting it right

Managing property keys and access securely isn't glamorous. It's not a feature that impresses your landlords or tenants. But it's the unglamorous stuff that distinguishes a professional agency from one that's constantly firefighting.

A good key register takes a few hours to set up and minutes to maintain per property. The return comes from avoiding security breaches, deposit disputes, compliance issues, and the staff time wasted searching for missing keys. A CRM that supports property-level record-keeping — including key registers, maintenance logs, and access history — keeps all of this information structured and traceable.

Keys go missing. People forget to return them. Contractors need urgent access at odd hours. These things are normal. The difference is having a system that catches them, documents them, and protects your agency's security posture and reputation.

Try Relentify free for 14 days and see how a structured CRM simplifies key management alongside all your other property operations.