raimundo wrote:reading Evans answers, makes me think that master key systems are even more insecure than I had previously thought,
think of the implications of that second to last paragraph for someone who lives in an apartment building on the schlage C keyway.
I knew that a lot of master key systems are insecure but after reading that, its worse than I thought.
Which is exactly the reason why Schlage stopped selling the "C" keyway as its default keyway quite a while ago, if you had ordered factory masterkeyed locks from Schlage prior to the introduction of the Everest keyway families you would have received the "E" keyway... But the same worries apply as the "E" keyway is also very common... What do you think will become of the new Everest C123 and C145 keyways in about 10 more years or so ? They will become as ubiquitous as the Schlage classic keyways by then and there is NO restriction as to who can buy those open C family blanks...
When you use a well established locksmith shop for your masterkeying you will be sure that you are not getting a duplication of any other system which that shop has set up in your area... When you invest in a dealer only keyway on a lock product they can guarantee that no one else in your area will have keys which will open your locks...
True security with masterkeyed locks is something which needs to be investigated at the manufacturer level to seek out either a restricted or patented keyway rather than the default, stock or standard keyways you will get from a hardware distributor or general contractor...
I can think of a few keyways I would
NEVER use or specify for
masterkeyed locks:
Arrow "A" keyway or the 1C and 1D SFIC keyways;
Best SFIC single letter keyways which are all old and widely available;
Corbin-Russwin L, D, H, or 59 keyway families;
Kwikset KW1 or KW10;
Sargent L, R, or C keyway families;
Schlage Classic anything;
Yale paracentric E1R keyway, or the GA multiplex keyway...
If you have masterkeyed locks on any of those keyways you have taken your life in your hands because they are very popular pretty much anywhere and you can not expect to have any sort of key control whatsoever as such keys can be duplicated anywhere there is a key machine...
It is better to use something along these lines:
Arrow: one of the 6-pin sectional keyways, for SFIC they have many others besides the two default available;
Best: "Premium" keyways which are Wx or Wxx, or "Peaks" or the latest offering "CORMAX";
Corbin-Russwin: Pyramid keyways or the F, J, 62, 39, 93 factory restricted keyway families;
Sargent: any one of the A, B, G, K, N, or V factory restricted keyway families;
Schlage: an Everest Primus D restricted keyway, Everest D restricted or Everest Primus C open family keyway;
Yale: something from the S, T, V, Y or Z keyway families or their "security" product with the side bar...
There really isn't any valid excuse to install or specify the default keyway when you are constructing a new building... Ordering a more obscure or factory restricted keyway will require slightly more lead time from order to delivery but will allow the physical locks you use to have a longer useful lifespan... Using an "open" or "stock" or "default" keyway means that your locking hardware will offer much less security than if you had invested a little time and energy in exploring your options with the lock manufacturer you chose to create a restricted keyway system... It often costs no more than the normal stock keyways and will allow you a more secure "hardware" platform for your master keying system "software"...
You have to at least give yourself and your building a fighting chance of your keyblanks not being available at Home Depot or Walmart for 15 or so years... If you buy and install locks using keyways which are widely available immediately upon installation then you will never have a secure keying system and those to whom you issue keys can have them copied anywhere that has a key machine...
It is recommended that even a successfully controlled and managed master key system be totally replaced after about 15 years in service which is considered the maximum usable lifespan for a keying system... Frequently used "high traffic" cylinders should be inspected and re-pinned even if it is to the same bitting at least every other year to maintain security of that cylinder... During assessment for replacing the keying system you can physically inspect a sample of your cylinders for wear and decide whether or not to replace the cylinders also (which means upgrading to a new keyway or new high security product which is still under patent) or accommodate the cylinder wear into the design for the new keying system (which might mean using a 3-increment progression and reducing the total capacity of the new system)...
~~ Evan