Every keyed building eventually has the conversation. A ring goes missing — a departed employee’s, a contractor’s, a manager’s left on a truck bumper — and somewhere in it is a key that opens more doors than anyone is comfortable admitting. What happens next is the strongest argument for credentialed access that exists, because it isn’t hypothetical.
Currency one: the rekeying project
A lost badge is one click: revoke, reissue, done. A lost master key is a construction project. Every cylinder that key operates has to be rekeyed or replaced — and because master systems are hierarchical, the work fans out: new cores, new keys cut for everyone downstream, distribution, collection of the old ones, and the locksmith hours to do it across every affected door. In a multi-site operation, multiply by buildings. The direct spend varies with door count and hardware, but the shape of it doesn’t: it’s a project with scheduling, disruption, and a punch list — triggered by a single piece of lost brass.
And here’s the quiet part: because rekeying is painful, many organizations simply… don’t. The lost key stays valid for months or years. That decision is rarely written down anywhere, but a building full of locks that a missing key still opens is exactly what it sounds like.
Currency two: the exposure window
Between the loss and the rekey — however long that takes — the building is open to whoever holds the key, and you have no way of knowing whether that’s nobody or somebody. Keys don’t announce themselves. There’s no failed-attempt alert, no after-hours flag, no record of use. If the key was copied before it was lost — and keys are copied at any hardware store, “do not duplicate” stamp or not — the window never really closes at all.
Credentials invert every part of this. A revoked badge fails at the reader and logs the attempt — the lost credential becomes a tripwire instead of a liability. Schedules bound the exposure even before revocation: the badge that works weekdays 7-to-6 was never going to open a door at 2 a.m. Sunday.
Currency three: the questions you can’t answer
The costs above are at least visible. The third one surfaces later, in the worst meetings: after an inventory loss, an incident, an insurance claim, or a dispute, someone asks who was in the building? A keyed facility answers with recollection. Whoever had a key — which, after years of hires, departures, vendors, and copies, is a list nobody actually has.
An access-controlled facility answers with a record: which credential, which door, which minute. That audit trail is the difference between reconstruction and speculation — for HR, for insurers, for law enforcement, and for the version of you that has to make a personnel decision on partial information.
Where keys still make sense
Honesty cuts both ways: not every door earns a reader. Mechanical keys remain the right answer for low-traffic, low-consequence openings — the janitor closet, the roof hatch — and every access-controlled building keeps mechanical override for life safety. The design question isn’t keys or credentials; it’s which doors carry which risk. Typically the perimeter, entrances, and the handful of rooms that hold money, inventory, records, or servers justify control — and the interior office doors don’t.
Getting off the master system
The migration is less dramatic than most owners expect. Existing door hardware and cabling often carry forward; the work concentrates on the openings that matter; and it phases cleanly — perimeter first, sensitive rooms second, the long tail as budget allows. That sequencing decision is exactly what a no-obligation assessment produces: a door-by-door account of what deserves credentialed control, what pairs with camera coverage or entry screening, and what honestly doesn’t need anything.
The lost master key is a bad day either way. The difference is whether it costs you a click — or a project, a window, and an answer you don’t have.
Current as of August 2026. Costs and exposure vary by facility, hardware, and policy — this is an explainer drawn from field practice, not a quote or legal advice. For numbers specific to your building, the assessment is free.