Opening a Second Location: Locks, Keys, and Who Gets Access

The first location ran on a simple access control system: you. You opened, you closed, you knew every person who held a key because you handed each one over personally. The second location ends that era on day one. You cannot be behind two counters at once — which means, for the first time, doors will be opened and closed by people you trust at one remove, on days you never see.

Most expansion checklists cover the lease, the build-out, the hiring, the signage. Keys get a line item somewhere below “order shelving,” and it shows: we regularly walk into second locations whose access story was improvised in the last week before opening. This guide is the missing chapter — locks, keys and who gets access, decided like the business decision it is.

The real problem is absence, not hardware

At one location, informal works. Keys live in known pockets, and any question about access gets answered by the owner’s memory. The second location breaks the model not because the locks are different but because the owner is now absent from at least one site at all times. Access has to survive without you watching it — which means it has to become a system: written, standardized, and maintained by habit rather than by personality. Buildings learn this lesson too, usually the hard way; our guide to key control logs that survive staff changes is the same medicine at building scale.

Don’t photocopy the first location’s chaos

Expansion is the one moment when you get to design access from a blank sheet — the new space has no key history, no mystery copies, no accumulated favors. The mistake is importing the old mess out of momentum: cutting a stack of keys “like at the first shop” and handing them out the same informal way. Do the opposite. Design the new location cleanly, then use the occasion to audit the old one against the new standard: collect the floating keys, count what exists, and bring both shops onto the same page. Two locations run on one discipline are easier to manage than one location run on none.

Decide who opens what — on paper, before the build-out

Take fifteen minutes with a sheet of paper before any cylinder is ordered. Down the side: every keyed opening the new space will have — front door, back door, office, stockroom, cash room or safe, gate, mailbox, utility closet. Across the top: every role — owner, manager, shift lead, staff, cleaner, landlord if the lease requires it. Fill the grid with yes and no. That grid is your access policy, and every hardware decision below is just an implementation of it.

Two structural choices come out of the grid. First: should the owner carry one key that opens both locations? Keyed-alike setups (both shops share one key cut) are convenient and fragile — one lost owner key exposes two addresses at once. A small master key system answers the same wish more safely: each location keeps its own keys, staff keys open exactly their own doors, and the owner’s master opens everything at both sites. Second: what happens when a staff key walks away? On hardware-store keyways, any key copies at any counter, and your grid is a wish. A restricted keyway — where blanks are controlled and cutting requires authorization — is what makes the paper policy enforceable in metal; our high-security cylinder comparison covers the usual suspects.

Make the two shops twins

Standardize the hardware across locations, aggressively. Same cylinder family, same deadbolt models, same exit devices, ideally the same finish. The payoffs compound: staff who transfer between shops already know every door quirk; spare parts interchange; one commercial locksmith holds the pinning charts and hardware history for the whole business, so any call about either address starts from knowledge. Chains standardize this way as policy — a two-location business gets the same benefit for the same reason, just sooner.

Standards also mean the second shop inherits the first one’s scar tissue for free. Whatever the original location learned the hard way — the latch guard after the pry attempt, the alarm kit on the back door, the gate cylinder upgrade — build it into the new location on day one. Our storefront break-in guide and panic bar basics cover the two doors that deserve the most thought: the one customers use and the one nobody watches.

Start the log on day one

The new location opens with something the old one never had: a clean key history. Keep it clean. Every key issued at the new shop gets a line — who, which key, what date, signature — starting with the manager’s set on opening day. Write the two policies that make the log matter: departures mean same-day key return or a rekey of what the key opened, no exceptions and no personalities; and quarterly, someone counts the keys against the record. Fifteen minutes a quarter. The alternative is becoming the first location all over again, and you already know how that story goes — the turnover playbook exists because nobody keeps the log.

What about codes and smart locks instead of keys?

Fair question at expansion time, because codes solve the absent-owner problem elegantly: a departing employee’s code gets deleted from a phone, no brass changes hands, and the audit trail writes itself. For interior doors — office, stockroom — a commercial-grade keypad lock is often a genuine upgrade for a multi-site business. Two sober notes, though. Entry doors still need mechanical integrity underneath the electronics: a smart credential on a weak cylinder and a bent frame is a fast way in with extra steps. And batteries, connectivity and shared codes (“everyone knows 2580”) come with their own maintenance culture — we covered the honest trade-offs in our smart locks guide, and the physics apply to shops the same as apartments. Electronics extend a well-designed mechanical foundation; they do not replace it.

The mistakes we see at every ribbon-cutting

• Inheriting the previous tenant’s cylinders. The space came with keys; nobody knows how many exist or who kept one as a souvenir. Rekey everything the day you take possession, before a single box of inventory arrives — this is the commercial version of the first rule of moving.
• Letting construction keys live forever. During the build-out, contractors legitimately need access — and build-outs leak keys like a sieve. Either run temporary construction cylinders and swap to the real ones at handover, or rekey at handover. The day the space stops being a job site, the job-site keys must die.
• Forgetting the minor openings. Mailbox, gate padlocks, utility closets, the roof hatch the HVAC contractor uses. Minor doors with unknown keys are how “the shop was locked” and “someone got in” coexist.
• Giving the landlord’s copy no rules. If the lease grants the landlord access, note which key they hold and log it like any other holder. Ambiguity here surfaces at the worst moments.

Opening a second location is the graduation from running a shop to running a business. The locks are a small line in that project — but they are the line that decides who can stand in your stockroom at midnight, in the building you are not in. Decide it on paper, build it in metal, log it from day one, and the doors will be the one part of expansion that never calls you on a Sunday.

---

Written by Mykhailo — NYC DCWP-licensed locksmith, FixMate Locksmith. Serving all five boroughs, around the clock.