You cannot remotely wipe a brass key. A missing laptop gets erased, a missing access card gets deactivated, but a missing key leaves you deciding whether to rekey every lock it opened - or to live with not knowing who can walk through your doors. That asymmetry is why keys, the cheapest objects in the building, carry some of its most expensive failure modes. This guide covers building a key register, tagging keys without advertising what they open, and a sign-out routine that holds up for staff and contractors alike.
What you will learn
- What a lost key actually costs
- Building the key register
- Tagging keys without revealing what they open
- Sign-out and return, every time
- Audits, offboarding and lost keys
- From sign-out sheet to system
- FAQ
What a lost key actually costs
The price of the blank is irrelevant. The real costs are:
- Rekeying. A lost individual key might mean one lock and one locksmith visit. A lost master means every cylinder on the suite, plus reissuing keys to everyone.
- Not knowing. Worse than a lost key is an unaccounted key. If you cannot say who last held it, you cannot say whether it is lost, unreturned or sitting in a drawer - so you either rekey defensively or accept the risk blind.
- Third parties. Cleaning crews, landscapers and trades hold client keys routinely; a key you cannot account for is a conversation you do not want to have with a client or an insurer.
- The drawer of mystery keys. Every office has one. Each unlabelled key in it is a door somewhere that may or may not be secure.
Most of these costs come not from losing keys but from losing track of them - which is fixable with a register and a habit.
Building the key register
A key register is a small dataset with a strict shape:
| Field | Why it matters |
|---|---|
| Key code | The stamped or tagged ID people quote - it must mean nothing to an outsider |
| Door or lock it opens | Held in the register only, so a found key is useless without it |
| Key type | Individual, sub-master or master - sets how tightly it is controlled |
| Copies in circulation | You track a population per code, not a single object |
| Current holder | The answer to the only question that matters on a Friday evening |
| Issue date + return due | Turns a borrowed key into a commitment with a deadline |
| Status | In cabinet, issued, lost, retired (lock changed) |
The “copies” field is what separates key tracking from most asset tracking: code FD-12 might exist as four physical cuts, each individually issued. Number the copies (FD-12/1, FD-12/2) so each one has its own custody trail.
Tagging keys without revealing what they open
The cardinal rule: never write the address, building or door name on the key or its tag. A key labelled “Server room” or “14 Mill Lane - rear” is a gift to whoever finds it. The tag carries the code; the register maps the code to the door.
In practice:
- Use sturdy key tags - metal-rimmed or solid plastic - on rings that do not pop open in a pocket.
- A QR label with the code printed beneath works well on larger tags; the code alone is worthless without your register, and scanning lets staff pull up the right record at the cabinet instead of squinting at stamps.
- Stamp or engrave high-value keys directly, since tags can be swapped or shed.
- Replace unreadable tags immediately. An untagged key decays into the mystery drawer within a month.
Sign-out and return, every time
Key control is a check-in/check-out discipline with zero tolerated exceptions:
- Issue: record who took which key code (and copy number), when, and when it is due back. Open-ended issues are for permanent holders only - everyone else gets a date.
- Contractors: issue to a named individual, not “the electricians”, with the due date tied to job completion. Count keys back before the final invoice is signed off.
- Return: log the return and rehang the key. The empty hook and the open checkout must always agree.
- The cabinet: one home for all keys, hooks numbered to match codes. Anyone can then spot the mismatch between a missing key and a register that says it is in.
Tip: put the cabinet where issuing is convenient. A key cabinet two floors from reception guarantees informal lending, and informal lending is the start of every key-control failure.
Master keys deserve the strictest version of all of this - the shortest possible holder list and the most frequent confirmation. They are worth treating as their own category; see master keys for the specifics.
Audits, offboarding and lost keys
- Offboarding: the leaver’s open checkouts are the checklist. Collect every key before the last day, and log the returns - “handed something to reception” is not a record.
- Routine audits: count the cabinet monthly against the register; reconcile issued keys yearly by asking holders to confirm. Investigate gaps immediately, while memories are fresh.
- Lost keys: mark the copy lost, keep the record, and decide on rekeying by type - one door for an individual key, the whole suite for a master. The register turns that decision from a guess into a list of affected doors.
From sign-out sheet to system
The paper sheet by the cabinet, or its spreadsheet cousin, works exactly as long as nobody is in a hurry. Sheets record promises, not events: there is no overdue view, no history once a page is replaced, and no way to know on a Friday evening which contractor still holds FD-12/3 - the reasons are the same ones that make spreadsheets fail for asset tracking generally.
An asset management tool like AMPthilly runs the register properly: every key copy gets its own record with holder, due date and full history; issues, returns and transfers are timestamped events in an audit trail; printable QR labels work as key tags in sizes that fit them; and an overdue list shows every key past its return date without anyone walking to the cabinet. The free plan - 3 users and 25 assets, no card - comfortably covers a small key cabinet, which makes it an easy way to retire the paper sheet this week.
FAQ
What should a key register include? Key code, the door it opens (in the register, never on the key), key type, copies in circulation, current holder, issue date, return due date and status.
What can I use instead of a paper key sign-out sheet? A digital check-out system that logs issues and returns as timestamped events against named people, with an overdue view the paper sheet can never give you.
How do I track keys issued to contractors? Named individual, return date tied to the job, keys counted back before sign-off, and any deposit or agreement noted on the issue record.
What should happen when a key is lost? Mark it lost - never delete it - and decide on rekeying by key type: one lock for an individual key, the full suite for a master.
How often should keys be audited? Cabinet count monthly, issued-key reconciliation once or twice a year, master-key holders confirmed quarterly, and always at offboarding.
The takeaway
Key control is not about locks; it is about records. Give every key copy a code that means nothing to strangers, keep the code-to-door mapping in a register, sign every key out to a named person with a date, and audit the cabinet often enough that gaps surface while they are still explainable. Done that way, a lost key is a contained, known problem - not a building-wide question mark.