Key Takeaways
When an employee leaves your business, rekeying your locks is one of the most practical steps you can take to protect your property, your team, and your customers. It is faster and less expensive than replacing locks entirely, and it immediately cuts off access from any key that is no longer in your control. This applies whether the departure was friendly or not.
- Rekeying changes the internal pins of a lock so old keys no longer work, without replacing the hardware itself.
- You should rekey as soon as possible after an employee leaves, not days or weeks later.
- Master key systems, keypad codes, and access cards all need to be reviewed at the same time as physical locks.
- A licensed commercial locksmith can rekey an entire small business in a single visit in most cases.
- Rekeying is especially urgent after a termination that did not go smoothly.
- Asheville business owners should document every rekeying event as part of an ongoing access control log.
- A proactive rekeying schedule reduces liability and signals to employees that security is taken seriously.
Why Rekeying After Employee Departure Is Not Optional
Rekeying your business after an employee leaves in Asheville is a direct, affordable way to close a security gap that opens the moment someone walks out the door with a key in their pocket. When an employee leaves your business, whether through resignation, retirement, or termination, any key they ever held becomes an uncontrolled entry point. You have no way to verify that the key was returned, that it was not copied, or that it will not be used again. That uncertainty is the problem rekeying solves.
Many business owners in Asheville and across Western North Carolina treat rekeying as optional, something to get around to eventually. But waiting even a few days creates a window of vulnerability that is completely avoidable. Physical keys are easy to duplicate. A departing employee could have made a copy weeks before their last day without anyone noticing. The original key might be sitting in a drawer at home, shared with a spouse, or passed to a friend. Rekeying closes all of those scenarios in a single service call.
Rekeying is not about distrust for its own sake. It is about maintaining a clear, documented chain of custody over who can access your property. Even in cases where an employee left on excellent terms, good security practice means controlling access based on current roles, not past relationships. That is true for a solo-owned boutique on Merrimon Avenue and for a multi-location operation with dozens of staff members. For more information on workplace security best practices, see the U.S. Occupational Safety and Health Administration.
What Rekeying Actually Does to Your Locks
Rekeying modifies the internal pin tumblers of a lock cylinder so the existing key no longer operates it and a new key is cut to match the new pin configuration. The lock hardware itself stays in place. Only the internal mechanics change. This means you keep your deadbolts, your door hardware, and your existing locks while completely cutting off access from any previously issued key.
How does rekeying differ from replacing a lock entirely?
Lock replacement swaps out the entire hardware unit, including the cylinder, the body, and sometimes the strike plate. Rekeying only addresses the cylinder’s internal pins. For most post-employment security situations, rekeying is the right call because the hardware is not damaged or worn. You are simply resetting who can open it. Lock replacement makes more sense when hardware is old, damaged, or when you want to upgrade to a higher security grade at the same time.
How long does a commercial rekeying visit take?
A licensed locksmith can typically rekey a single lock cylinder in a matter of minutes. For a small business with five to ten locks, a full rekeying visit commonly takes one to two hours depending on lock types and whether a master key system is involved. Businesses with high-security cylinders, restricted keyways, or complex master key hierarchies may require more time. The locksmith will bring new key blanks and a pinning kit, so no advance ordering is usually necessary.
Will rekeying work on any lock brand?
Most standard commercial lock brands can be rekeyed by a licensed locksmith. Brands using restricted or patented keyways, such as Medeco or Mul-T-Lock, require keyway-specific blanks that the locksmith should stock or order in advance. High-security cylinders often come with key control features that make unauthorized duplication much harder, which is one reason some businesses upgrade to those systems at the time of rekeying. If your business uses electronic or smart locks, the access codes and credentials are changed digitally rather than through pin rekeying.
When to Call a Locksmith After an Employee Leaves
The right time to rekey your Asheville business after an employee leaves is as soon as that departure is confirmed. Many security professionals recommend scheduling the rekeying for the same day as the employee’s last shift, or no later than the following business day. Waiting longer than 48 hours without a verifiable key return creates an unnecessary gap.
Does it matter whether the departure was voluntary or involuntary?
Yes. When a termination is contentious, rekeying becomes urgent rather than simply advisable. A situation involving conflict, surprise termination, or a dispute over pay, performance, or workplace issues raises the probability that an employee might attempt to return to the property without authorization. In those cases, rekeying should happen before or immediately after the employee is notified if at all possible. For voluntary resignations and retirements on good terms, rekeying is still recommended but the urgency is somewhat lower, though the security rationale is identical. For information on proper termination procedures and employee relations, consult resources from the National Institutes of Health or your state labor department.
What if the employee says they returned all keys?
Key return is not the same as key control. A key can be returned and still have been duplicated. Unless your business uses a restricted keyway system where duplication requires written authorization from the key holder and the locksmith, a standard key can be copied at any hardware store in minutes. A signed key return form is useful for HR documentation, but it does not guarantee that no copy exists. Rekeying provides the actual security guarantee that the signed form cannot.
Should you rekey even if the employee had limited access?
Yes, if that employee had any key to any exterior door. Even a key to a secondary entrance or a storage room gives someone a point of entry. In many commercial buildings, internal doors provide access to offices, cash drawers, server rooms, and sensitive files. A key to any door in the building is worth rekeying after a departure.
The Step-by-Step Process for Rekeying a Business
Rekeying a business after staff turnover is not just about handing a locksmith a lock. A thorough process covers every access point and every credential type, not just the front door deadbolt.
Step one: audit every access point before the locksmith arrives
Walk your entire property and list every lock that could be opened by a key, code, or card the departing employee held. This includes exterior doors, interior offices, server or IT rooms, storage areas, cash handling rooms, and any shared spaces. Note the lock brand and model where visible. This audit takes 15 to 30 minutes in most small businesses and saves time during the locksmith visit. For guidance on physical security assessments, see Physical Security on Wikipedia.
Step two: inventory all credentials tied to the departing employee
Physical keys are the obvious concern, but do not stop there. If your business uses a keypad entry system, change that code immediately. If you use electronic access cards or fobs, deactivate the specific card assigned to that employee in your access control software. If that employee had alarm codes, change those through your alarm company. If they had keys to a company vehicle, those should be addressed as well. Each of these is a separate task but should happen during the same rekeying event whenever possible.
Step three: schedule the locksmith and communicate the new keys
Once rekeying is complete, new keys are cut to match the new pin configuration. Decide in advance how many copies you need and who receives them. Issue keys only to current employees who genuinely need them. Update your access log to reflect the new key numbers, recipients, and date of issue. Keep a copy of that log in a secure location. This documentation matters if you ever need to demonstrate due diligence to an insurer or in a legal proceeding.
Master Key Systems and Employee Turnover
Many Asheville commercial properties use master key systems that allow certain keys to open multiple locks while individual keys open only specific doors. These systems require extra attention after any employee departure because a master or sub-master key grants broader access than a standard individual key. Learn more about Master Key Systems on Wikipedia.
What happens to a master key system when you rekey one lock?
In a true master key system, rekeying one lock requires rebalancing the entire key hierarchy for that lock’s position in the system. This is more complex than rekeying a standalone lock and must be done by a locksmith with experience in master key design. If done incorrectly, the master key may no longer function properly. Always hire a locksmith certified in master key systems for this type of work. For additional guidance on security planning, the U.S. Environmental Protection Agency offers resources on facility security protocols.