Skip to content
LokalMatch

Access Control

Access Control near you

Access control is the part of home security that answers a different question from an alarm or a camera: not what happened, but who is allowed in, through which door, at what hours, and how you take that permission back. In a house it usually means keypads, fobs, phone credentials or a fingerprint reader on an exterior door, wired to a controller that keeps a log. In a duplex, a garage apartment or a small multifamily building it becomes a management system for several people's credentials at once.

Tell us about your access control project and we’ll help you find local security installers who serve your area.

Free for homeowners · No obligation to hire

On this page

Two rules shape the American version of this work, and neither is about the hardware. The first is that the door still has to let people out. The residential code as adopted in Seattle, following the model code that most states adopt in some edition, requires that egress doors be readily openable from inside the dwelling without the use of a key or special knowledge or effort. Any lock, strike or reader on a required exit door has to live inside that sentence.

The second is that a fingerprint or a face scan is regulated differently from a PIN code in some states. Illinois requires a private entity to inform the subject in writing that a biometric identifier is being collected, to state the specific purpose and length of term in writing, and to obtain a written release before collecting it. If you are asking residents, a nanny or a tenant to enroll a fingerprint, that is a duty somebody has to meet.

Credentials a residential access control system can use

  • PIN codes at a keypad: cheapest to issue and revoke, easiest to share without telling you, and worth giving to each person individually so the log means something.
  • Fobs and cards: physically handed over and physically returned, which suits contractors and short stays, and easy to disable if one goes missing.
  • Phone credentials: convenient and revocable from anywhere, dependent on the phone having charge and on the household being comfortable installing an app.
  • Fingerprint readers: fast in daily use, unreliable with wet or cold hands, and the credential that brings state biometric privacy duties with it.
  • Face recognition at the door: the same privacy duties, plus lighting and angle sensitivities that a demonstration in a showroom will not reveal.
  • A mechanical key override: the thing every installer should still leave you with, for the night the controller fails or the power stays off.
  • Vehicle credentials at a gate or garage, which are a separate subsystem and often the one nobody audits for years.

Egress comes first: the exit door must open without a key

Before anything clever goes on a door, the door has to satisfy the building code as adopted where you live. Seattle's residential code, quoting the model text, requires not less than one egress door for each dwelling unit and states that egress doors shall be readily openable from inside the dwelling without the use of a key or special knowledge or effort. That is a fire and life-safety rule, and an access control design that puts a keypad or a keyed cylinder between an occupant and the outside on a required exit door is a design to reject.

The practical consequences are specific. A double-cylinder deadbolt that needs a key on the inside does not belong on a required egress door. An electric strike or maglock has to be arranged so the inside lever always retracts the latch mechanically, independent of power and independent of the controller. A stack of locks that a guest, a house-sitter or a child would have to be taught to operate is exactly the special knowledge the sentence rules out.

Adopted code text differs by state and by edition, and amendments are common. Seattle's wording is quoted here because the city publishes it, not because it governs your address. Confirm the edition and any local amendments with the building department where the work will be done, and get the answer before the door is modified rather than at inspection.

Fingerprint and face readers carry state privacy duties

Biometric credentials are the one part of a home access control system with a body of state law behind it, and Illinois has the most demanding version. Under the Biometric Information Privacy Act, a private entity in possession of biometric identifiers or biometric information must develop a written policy with a retention schedule and guidelines for permanently destroying that data when the initial purpose has been satisfied or within three years of the individual's last interaction, whichever comes first.

Before collection, the Act requires that the subject or their legally authorized representative be informed in writing that a biometric identifier is being collected or stored, be informed in writing of the specific purpose and length of term for which it is being collected, stored and used, and that a written release be received from the subject. Those are three separate steps, and a fingerprint reader enrolled in five minutes at the front door has met none of them.

Whether a particular household falls within a statute like that is a question for a lawyer, not for an installer or a guide. The point for a homeowner is narrower and useful: if you are enrolling other people's fingerprints or faces, particularly anyone employed in the home or renting part of it, find out what your state requires before enrollment, put the notice and the release in writing, and ask the vendor where the biometric template is stored and how it is deleted when a person leaves. A system that keeps templates on the door rather than in a company's cloud is a much shorter conversation.

Licensing: who may install access control in your state

There is no national access control license, and the credential that matters is the one issued where the work happens. New York licenses the individual: a security or fire alarm installer is a person who holds themselves out as able, or offers or undertakes, to install, service or maintain a security or fire alarm system to detect intrusion, break-in, movement, sound or fire, the license runs for two years, and the education requirement is four fifteen-hour modules plus one twenty-one-hour module with an examination for each. New York does exempt a purchaser or owner who installs a system on their own property.

Other states license the company, the trade, or both. California requires an alarm company operator license from the Bureau of Security and Investigative Services for a business that sells at the buyer's home, installs, monitors, maintains, services or responds to alarm systems, requires the qualified manager to pass an examination, requires employed alarm agents to be registered, and puts operators, qualified managers and agents through criminal history background checks with the state Department of Justice and the FBI. Tennessee licenses alarm systems contractors and registers qualifying agents and employees under its Detection Services Licensing Program.

Where the work is treated as electrical rather than security, the credential is different again. Washington's limited energy system specialty, the 06 certificate, covers the installation, repair, replacement and maintenance of signaling and power-limited circuits and related equipment, expressly including intrusion alarms, fire protection signaling, lighting control and energy management systems. Ask which credential your installer holds, ask which categories it covers, and verify the number with the issuing agency rather than trusting a logo.

Alarm permits: what your city expects before police are dispatched

If any part of the system can summon police, a forced-door alert or an intrusion sensor tied into the same panel, then a second local obligation applies, and it usually falls on the owner rather than the company. Phoenix states that within the city a permit is required for alarm systems monitored by an alarm company as well as those that are not, and that a property owner without the required permit may be assessed a charge for each burglar alarm activation that police respond to. Phoenix also assesses a charge for subsequent false burglar alarms once there has been more than one within a consecutive 365 day period.

Roseville, California, requires an alarm permit for everyone operating an alarm system within the city, commercial and residential alike. Operating without a valid permit there is a class one civil infraction, false alarm fees rise step by step within a rolling twelve-month period, and the ordinance allows police response to alarm calls to be suspended altogether. That last consequence is the one worth reading twice: the penalty for a badly maintained system is eventually that nobody comes.

Some cities have gone further and changed who registers and who is billed. Seattle puts the licence and the fees on the alarm monitoring company rather than the homeowner, bills that company for false burglar alarms and for false panic, duress or robbery alarms, and since October 1, 2024 dispatches officers only to calls from alarm companies with supporting evidence, such as audio, video, panic alarms or eyewitness evidence that a person is illegally entering or attempting to enter the property. Motion or sensor activation alone no longer brings a patrol car. Ask your own city or county what it requires, whether the permit renews, and what evidence it expects before it dispatches.

Commissioning: credentials, the audit trail and a clean handover

  • Every person gets their own code or credential, because a single shared PIN turns the log into a record that somebody opened the door.
  • The administrator account is created in your name and your email address at the start, never the installer's, with any remote support access switchable off.
  • Temporary credentials for trades and sitters are issued with an end date rather than a promise to remove them later.
  • The installer's own commissioning credential is deleted in front of you before they leave, and the default master code is changed.
  • The mechanical override key is tested, labeled and stored somewhere you can reach when the system is dead.
  • Somebody in the household who is not you is shown how to admit a visitor and how to disable a lost credential.
  • The controller's clock is set correctly, since a log with the wrong time answers no question at all.

Failure modes: power loss, lockouts and fail-safe versus fail-secure

Ask what each door does when the power goes out, and get the answer per door rather than for the system. A fail-secure device stays locked without power, which protects the opening but can strand somebody outside, while a fail-safe device releases, which helps people leave but leaves the door unsecured through the outage. On a required exit door the inside lever has to work mechanically either way, so the question is really about what happens on the outside.

Battery backup is the usual answer, and it is worth being specific. How long does the controller run without mains power, what happens when that reserve is exhausted, and does the system tell you before it fails rather than after? A standalone battery lock has the opposite problem: it keeps working in an outage but dies silently when its cells go flat, which is why a low-battery warning that reaches a phone is worth more than an extra credential type.

The other common failure is human. Credentials accumulate, nobody ever removes them, and three years later the list contains a former tenant, two contractors and a fob that was never returned. Treat the credential list as something you read rather than something you add to, and set a fixed date twice a year to go through it.

Keeping the credential list and the hardware honest

  • Read the full credential list on a schedule and delete anything you cannot attribute to a named person.
  • Change the administrator password whenever the household changes, since an app login outlives a returned key.
  • Install firmware updates on the controller and the readers, visiting the manufacturer's site when a device does not update itself.
  • Test the mechanical override on each door at least yearly, because a key that has never been turned is often a key that no longer turns.
  • Replace batteries on a calendar rather than on a warning, particularly on exterior doors in cold climates where capacity drops.
  • Check exterior readers for water ingress and corroded contacts after winter, and reseal penetrations that have opened up.
  • Export or photograph the current credential list and keep it somewhere outside the system, so a controller failure does not erase the record of who had access.

What an access control quote actually prices, and how LokalMatch helps

Using LokalMatch, you describe the doors once: how many, what kind of credential you want, whether anyone other than the household needs access, and your ZIP code. Installers who work in your area receive that and the ones with capacity reach out. The pros pay for the requests; there is no charge to the homeowner for posting one. LokalMatch does not do installation, does not hold your credentials, does not set or negotiate prices and does not vet, rank or recommend any company, so verifying the state license and insurance is still on you. Nothing here is legal advice.

  • The number of controlled doors and gates, since each is its own power supply, reader, strike and cable run.
  • Whether the doors are existing and finished or being replaced, because retrofitting an electric strike into an old frame is joinery as much as wiring.
  • Credential type, as fingerprint and face readers cost more than keypads and bring configuration and privacy work with them.
  • Whether the system stands alone at each door or reports to a central controller with a shared log and shared schedules.
  • Battery backup and standby duration, which is an equipment decision and a cabinet-space decision at the same time.
  • The state credential the work requires, since a job that includes intrusion detection may need a licensed alarm installer rather than a general trade.
  • Commissioning and training time, which is the line homeowners cut and then miss within the first month.

Access Control: frequently asked questions

Does my home have to meet ADA requirements for doors and entries?

No, and it is worth being clear about why. Title III of the Americans with Disabilities Act covers businesses and nonprofits that serve the public, and the Department of Justice's list of covered entities is a list of businesses: restaurants, hotels and motels, shops, movie theaters, private schools, doctors' offices and private hospitals, day care centers and gyms. A private residence is not on it. For housing, the relevant federal statute is the Fair Housing Act, whose design and construction requirements apply to covered multifamily dwellings of four or more units built for first occupancy after March 13, 1991, and include an accessible entrance on an accessible route and doors wide enough to accommodate wheelchairs. If a contractor cites the ADA for work on your single-family house, ask what they actually mean.

Can I put a keypad lock on my only exterior door?

Usually yes, provided the inside always opens mechanically. The residential code as adopted in Seattle, following the model text, requires egress doors to be readily openable from inside the dwelling without the use of a key or special knowledge or effort. A keypad on the outside with a plain lever on the inside satisfies that; a double-cylinder deadbolt needing a key from within does not. Codes and amendments differ by state and by edition, so confirm the requirement with your own building department before the door is modified.

Is a fingerprint reader a good idea for a rental unit I own?

It is the option with the most strings attached. Illinois, for example, requires a private entity to inform the subject in writing that a biometric identifier is being collected, to state the purpose and length of term in writing, to obtain a written release before collection, and to maintain a written retention and destruction policy. Other states have their own rules. Codes or fobs avoid the question entirely while giving you the same ability to issue and revoke access per tenant. If you do want biometrics, ask where the template is stored, how it is deleted when a tenant leaves, and what your state requires before anyone enrolls.

What happens to my locks in a power outage?

It depends on the device and it should be specified per door, not assumed. Fail-secure hardware stays locked without power and fail-safe hardware releases, and each has a cost. Battery-powered standalone locks keep working through an outage but fail quietly when their cells run down. Ask for the standby duration of any controller battery, ask what warning the system gives before it runs out, and insist on a mechanical key override that you have tested yourself, because the alternative is a locksmith call at the worst possible time.

How does LokalMatch work for access control?

You post the job once, listing the doors involved, the type of credential you have in mind and anything unusual such as a gate, an in-law suite or a tenant. Access control and low-voltage installers covering your ZIP code see the request and the interested ones contact you. They are charged for the requests they take; the homeowner pays nothing to post. LokalMatch does not install, does not hold keys or credentials, does not set prices and does not vet or rank companies, so licensing, insurance and references are yours to check.

Sources

  1. 740 ILCS 14/15: Illinois Biometric Information Privacy Act
  2. 2021 Seattle Residential Code, Chapter 3 (R311.2 egress door)
  3. New York Department of State: security or fire alarm installer
  4. New York Department of State: security or fire alarm installer qualifying courses
  5. New York Department of State: security or fire alarm installer FAQs
  6. California BSIS: alarm company operator, qualified manager and alarm agent
  7. Tennessee Alarm Systems Contractors licensing program
  8. WAC 296-46B-920: Washington specialty electrician scopes of work
  9. US Department of Justice: the Fair Housing Act
  10. ADA.gov: Title III, businesses and nonprofits serving the public
  11. City of Phoenix: preventing false alarms and alarm permits
  12. City of Roseville, California: alarm permits
  13. City of Seattle: alarm system monitoring regulations

Written by the LokalMatch editorial team. Last reviewed September 21, 2026. How we write and check our guides

Find security installers by city

Alaska

Show 1 cities

California

Show 186 cities

Delaware

Show 1 cities

Florida

Show 82 cities

Maine

Show 1 cities

Texas

Show 79 cities

What affects the cost of access control

Prices depend on the details of your project. We only publish price ranges when they’re backed by real LokalMatch quote data or reliable sources. Until then, here’s what usually changes the price:

  • Number of cameras, sensors or devices
  • Wired or wireless installation
  • Monitoring and subscription fees
  • Running cables through finished walls or ceilings
  • Size and layout of the home
  • Integration with other smart home or network equipment

How to compare security installers before you hire

  • Choose an installer who looks at your home in person and explains where cameras, sensors or access points should go.
  • Ask whether monitoring is included, whether it's optional and what the contract length and cancellation terms are.
  • Find out whether you'll own the equipment or lease it, and whether it works with other systems.
  • For hardwired systems, make sure any electrical work is done by a licensed electrician.
  • Ask how they'll set up passwords, apps and network security, and make sure you get the admin access.

Questions to ask security installers before you hire

  • Will I own the equipment, or is it leased or tied to a contract?
  • Is monitoring required, and what are the cancellation terms?
  • Where will the cameras point, and will they capture my neighbours' property?
  • Who will have access to the video and the account?
  • Will this work with my existing Wi-Fi, locks or smart home devices?
  • What warranty covers the equipment and the installation?

Access control permits and local rules

Some access control work needs a permit or has to meet local bylaws. Rules vary by municipality, so ask your pro whether a permit is needed and who will apply for it — and check with your city or town if you’re unsure.

Permits and licensing

Ready to get access control quotes?

Tell us about your access control project.

Do you offer access control services?

Join LokalMatch to get matched with homeowners in the areas you serve.