Every rental property needs an auditable key register, strict issue and return controls with ID checks, secure blind coded storage, and a clear rule for when to rekey. These four elements form the backbone of defensible key management procedures. South Australian tenancy entry rules and regular audits shape exactly how and when those keys get used, and HOSO Real Estate apply this framework across its Adelaide managed portfolio every day.
TL;DR:
- Regular audits should include daily reconciliation, weekly follow-ups, and quarterly sample checks, with unpredictable dates for a more effective review process.
- Keys must only be issued after verifying identity and signing a clear agreement, with detailed records of each issue, return, and condition inspection.
- At lease end, verify all returned keys against the register, rekey immediately if master keys are missing or unaccounted for, and follow notice rules for lawful entry.
- Secure storage requires a locked cabinet or electronic safe with blind coding and separate off-site backup, avoiding property address labels to prevent theft.
- Smart locks should have dedicated management procedures, including owner control, emergency plans, and proper revocation at lease end, separate from physical key control.
Table of Contents
- What should a daily key register include?
- How should staff issue and return keys?
- What happens at vacate and when should you rekey?
- Where and how should office key sets be stored?
- How do smart locks fit into key control policies?
- Who should be responsible for key control?
- HOSO perspective: why disciplined key procedures protect your asset
- How HOSO Real Estate delivers audited key control for owners
- Sources
- FAQ
What should a daily key register include?
A key register is the single most important document in your key control policies, and it needs to work like a court exhibit, not a scribbled sign-out sheet. Every entry should capture the blind key code (never the property address), the property code, who issued and received the key, the stated purpose, date and time out, date and time back in, a signature, and any deposit details.
Best practice calls for maintaining this as a daily record, with regular audits that catch missing keys or unauthorised duplicates before they become a real problem, according to Harcor's guidance on key management systems. The audit rhythm matters as much as the register fields themselves.
A workable schedule looks like this:
- Daily office check: reconcile keys physically present against the register at close of business.
- Weekly follow-up: chase any key still out beyond its stated purpose or timeframe.
- Quarterly reconciliation: full stocktake plus a random sample check covering a substantial portion of the register.
Pro tip: Run the quarterly sample check on a different day each time. A predictable audit date is easy to work around; an unpredictable one isn't.
When a discrepancy turns up, the response needs to be immediate. Report it the same day, trace the last authorised holder through the register, and apply a decision tree that weighs whether the missing key was a master or a single-property key before deciding whether to rekey.
How should staff issue and return keys?
Reproducible steps protect everyone, including the tenant, the owner, and your own staff. Follow this sequence for every key movement:
- Verify identity first. Check photo ID against the authorisation on file before handing over any key, master or otherwise.
- Get a signed keyholder agreement. Limit the issue to a stated purpose and a stated return time, no exceptions.
- Prefer personal collection. If a courier is unavoidable, require a signed return receipt and prior manager authorisation.
- Generate a receipt on issue. This becomes part of the audit trail the moment the key leaves the office.
- Inspect condition on return and update the register immediately, not at the end of the day.
Agency practice notes suggest recording every item received down to the number of sets, remotes, and fobs, which prevents disputes later, according to Somners' guidance on securing property keys. This same discipline applies whether you're managing your own rentals or reviewing how your property manager handles security on your behalf.
Pro tip: Never let a contractor "borrow" a key without a signed check-out slip, even for twenty minutes. Short borrows are where most registers fall apart.
What happens at vacate and when should you rekey?
The vacate inspection is where sloppy key control finally catches up with you, which is why it's crucial to follow this checklist for an end of lease office clean. Before you hand back a bond or release a tenant from their lease, verify every returned key, fob, and remote against the register line by line. Missing items get flagged before, not after, the final inspection is signed off.
A simple risk matrix helps decide whether to rekey:
- Master key missing or unaccounted for: rekey immediately, no exceptions.
- Change key with certainty about copies: reissue is usually sufficient.
- Long-tenancy or high-value property with uncertain copy history: rekey as a precaution.
- Any dispute over tenant circumstances or liability: rekey and document the reason.
South Australian tenancy rules also govern when and how keys can be used for scheduled entry, since notice periods apply to inspections and maintenance visits under the Law Handbook's guidance on landlord entry. Keeping your key register aligned with those notice records gives you a defensible paper trail if a dispute ever reaches SACAT.
If a key is lost or stolen, act the same day: document the loss in writing, notify the owner, and rekey if the loss creates genuine risk. Restricted key systems make rekeying decisions easier because they limit how far a lost key's exposure can spread, a point echoed in guidance on best locks for rental properties.
Where and how should office key sets be stored?
Physical storage is where many otherwise good policies quietly fail. A locked metal cabinet or an electronic key safe with a built-in audit trail is the minimum standard for any office holding more than a handful of properties. Keep a spare set stored off-site, secured separately from the day-to-day cabinet, in case of fire or theft at the main office.
- Use blind coding on every tag, with the address mapping stored in a separately protected register.
- Restrict cabinet access to nominated staff only, and log every access event, not just key movements.
- Inspect physical keys periodically for wear and check the cabinet's environment for humidity or heat that could damage electronic components.
Avoid labelling keys with property addresses altogether. A lost bunch of keys tagged with a street name is a burglar's shortcut, while a blind coded tag tells them nothing.
Pro tip: Keep the address mapping register in a different location to the key cabinet itself. If one is compromised, the other still protects the property.
How do smart locks fit into key control policies?
Smart locks solve some problems and create others, so they need their own procedure rather than being bolted onto your physical key register. Appoint a single admin owner for each property's smart lock account, and keep that ownership recorded separately from the physical key register.
- Provide tenants with written handover instructions covering the app, backup codes, and what to do if the lock fails.
- Maintain an emergency override plan and a physical key fallback for every smart lock installed.
- Revoke access promptly at tenancy end, whether that means expiring a time-limited code or transferring admin rights.
- Record every access change in the same audit discipline you apply to physical keys.
Smart locks can simplify changeovers, but they introduce new failure points, including battery failure, disputed account ownership, and lost phones holding active access credentials, according to Malvern Lock Service's assessment of smart lock risks. Landlords managing remote access should also read our guide to remote access for SA landlords before installing any electronic system.
Who should be responsible for key control?
Every portfolio, no matter how small, needs a named Key Control Authority. This person authorises issues and returns, runs the audit schedule, and owns the policy itself. Comprehensive key control guidance recommends this appointment specifically so that no key movement happens without a clear line of accountability, as outlined in the Lockweb key control design guide.
Records worth retaining include:
- Key register exports, kept on a rolling basis rather than archived once a year.
- Signed authorisation forms for every issue.
- Incident and rekeying reports, with dates and reasons.
- Full audit logs from each quarterly review.
Review the policy annually and refresh staff training at the same time. Clear responsibility, backed by paperwork, is what separates a defensible position from a costly one if a dispute over rental inspection rights ever escalates.
HOSO perspective: why disciplined key procedures protect your asset
Across Adelaide portfolios, the failures we see are rarely dramatic. They're uncoded tags, keys issued on a verbal promise, and audit trails that exist in someone's memory rather than on paper. Each one is a small gap, and small gaps are exactly what turn a routine dispute into a liability claim. Fixing this doesn't require a big investment. It requires a register, a named person accountable for it, and a habit of checking it weekly rather than hoping nothing goes missing.
— HOSO
How HOSO Real Estate delivers audited key control for owners
HOSO Real Estate is the alternative to piecing together key procedures yourself while juggling a full-time job or managing from interstate or overseas. Our Full Property Management, Tenant Placement, Rent Collection and related services build documented key handovers, audit exports, and a named contact into the way we manage every property, so you're never chasing a spreadsheet to prove what happened to a set of keys. Inspections, compliance handling, and maintenance coordination all run through the same accountable system, which means the register we keep on your property is one you could hand to SACAT tomorrow without a second thought. If you're weighing up whether your current arrangement would survive that kind of scrutiny, get a rental appraisal and talk to us about bringing your key control procedures up to a standard your insurer, and your tenants, can trust.
Sources
- What to look for in a key management system — Harcor
- Law Handbook — landlord entry and tenancy rules (SA)
- Key control design guide — Lockweb
- Best locks for rentals — Night & Day Locksmiths
FAQ
What Are the Core Key Management Procedures for Landlords?
Keep an auditable key register, verify identity before issuing keys, store keys with blind coding in a secure cabinet or electronic safe, and rekey when risk indicates it's necessary.
How Often Should a Key Register Be Audited?
Check it daily at the office, follow up weekly on any outstanding keys, and run a full quarterly reconciliation with a random sample check.
Should I Rekey a Property Every Time a Tenant Leaves?
Not always. Rekey when a master key is unaccounted for, when there's genuine doubt about how many copies exist, or when the property carries higher liability risk.
Do Smart Locks Replace the Need for a Key Register?
No. Smart locks need their own separate procedure, including admin account ownership and a physical key fallback, alongside your existing key register.
Can HOSO Real Estate Manage Key Control for My Property?
Yes. HOSO Real Estate builds documented key handovers, audit trails, and named accountability into its property management services for Adelaide owners.