SAFES
Lock code hierarchy
Whilst forced code changes for Users can manage the security implications of default opening codes , there still exists a risk with default codes set for other users . A proud new safe owner may be given an opening code of 123456 , dutifully change it to something secure , but neglect to change the other default codes that might exist in the lock .
In many safe locks available on the market , there are Users who can open , and other users , often referred to as Master / Manager / Administrator , who perform other tasks .
In some instances , such users can open the lock . In many instances , the Master cannot open , but has the ability to create a subordinate user code who CAN open the lock . This is often referred to as ‘ Manager Management ’.
“ Ability to create a subordinate User who CAN open …”
This ability is , in effect , an opening code because it has the power to create an opening code .
It is vital to advise safe lock owners that all default codes must be changed , including any listed Master or Manager codes . In situations where a service company holds toplevel codes as part of their service contract , the code should be unique to each site .
Sharing codes Whilst we are on the subject , it also seems that many users of electronic safe locks are sharing codes . Perhaps this is inherited from the use of mechanical safe locks where only one code can exist , which might be the cut of a key or the numerical code for a mechanical dial combination lock .
One of the main advantages of electronic safe locks , is that they offer multiple codes and an audit facility to trace who has accessed the lock . If multiple users need to access a safe , then a lock with multiple codes should be selected so that each user can have their own code , and the audit accurately represents who has opened the safe .
Easy management Management of the safe lock is far easier when users have their own codes . If one person leaves , only their code needs to be deleted , rather than changing the shared code for all .
Preventing lockouts
Users having their own code also protects against lockouts . Where a single opening code is shared , any person who knows the code has the ability to maliciously change the code and therefore prevent access to the safe by others .
Keypad wear
In the movies , we see the villain using a fingerprint duster to work out the code by dusting the keypad ’ s buttons . In real life , the use of shared codes , or codes which are never changed , will inevitably result in wear to the buttons over time , providing a permanent clue as to the composition of the code .
Easy to guess
We all do it , but using birthdays , phone numbers , any personal information , or a code pattern based on the orientation of the buttons , is highly inadvisable . Common 4-digit codes used for our smart phones are 1234 , 0000 , 2580 , 2512 , 1111 , 5555 . The most common 6-digit codes are 123456 , 654321 , 111111 , 000000 , 123123 , 121212 , 112233 , 789456 .
Penalty
The ‘ penalty ’ in an electronic safe lock is a period during which the lock cannot be operated , which is initiated by the entry of four incorrect codes . This security measure is intended to prevent brute-force attacks where burglars try to guess at the code . It does not however protect against the use of easy-to-guess codes or codes related to personal information .
Code expiry
Some locks in our portfolio have a code expiry function , which can mean either ; that if a code is not used for a set ( configurable ) period , it self-deletes , OR that a user is forced to change their code after a set ( configurable ) period .
In conclusion
Default codes should be changed immediately , codes should not be shared , and codes should not be easy to guess or work out . When the code is changed , the safe door should be in the open position .
“ How to change code …”
Our website has user operating instructions for every lock we supply , which include the procedures to change code . Over time , we are adding ‘ How to change code ’ videos to our You Tube channel , so there really is no excuse ! Do it now !
Safelock Systems Ltd . Tel : + 44 ( 0 ) 20 8949 1005 Email : sales @ safelocksystems . com Web & online store : safelocksystems . co . uk
MAR / APR 2022
53
Magazine Sponsor Issue Takeover locksmithjournal . co . uk