Keypad, Fob, or Badge? Choosing Access Control for a Small Business
Once a business has more than a couple of people needing entry on different schedules, a single brass key stops working — someone leaves and now every lock with that key needs rekeying, or you want to restrict a stockroom without restricting the front door. Three real options solve this differently, and each has genuine costs and genuine failure modes worth knowing before you buy.
Standalone keypad
Best for: a single door, a small team, a straightforward budget.
Real advantage: no cards or fobs to issue, lose, or replace — just a code. Installation is usually a same-day retrofit onto existing door hardware.
Real weakness: a shared code that isn't rotated when someone leaves is functionally the same problem as a shared key. And a short code without a lockout is genuinely brute-forceable — a 4-digit code with no lockout falls to an automated attacker in under a minute; add a lockout and it's days. Full math in how long a 4-digit keypad lock actually takes to crack, or run your own numbers in the Keypad Combination Calculator.
Fob / card system
Best for: multiple doors, a team that changes over time, needing to revoke access the moment someone leaves.
Real advantage: deactivating one fob doesn't touch anyone else's access — no rekeying, no code change that inconveniences the whole team. Cloud-managed systems let an owner deactivate a fob remotely, from a phone, the moment someone's employment ends.
Real weakness: higher upfront hardware cost than a keypad (a control panel or cloud reader per door, plus fobs/cards per person), and a lost fob is a small ongoing liability until it's deactivated (versus a keypad code, which can simply be changed for everyone at once).
Master key system
Best for: multiple doors that need tiered access — a manager who needs every door, staff who need only their area.
Real advantage: one key per person instead of a ring of five, with access tiers built into the pinning itself. See master key systems explained for how the tiers actually work.
Real weakness: a lost master key is an expensive problem — it can mean rekeying every door in the system, not just one. No electronic audit trail either, since it's purely mechanical.
Side by side
| Method | Upfront cost | Revoke one person's access | Audit trail | Best team size |
|---|---|---|---|---|
| Keypad | Low | Change the shared code (inconveniences everyone) | None on basic units | 1–5 people, single door |
| Fob / card | Medium–high | Deactivate one fob instantly | Usually yes, per-fob logs | 5+ people, multiple doors |
| Master key | Medium | Rekey affected tier if a key is lost | None — it's mechanical | Multi-tenant or multi-area property |
Cloud-managed vs. on-premise access control
Modern fob/card systems split into two management models worth understanding before buying:
- On-premise panel: a physical controller in a wiring closet manages who can open what. No recurring subscription, but changes require local access to the panel or its software, and it typically doesn't survive a fire or theft of the panel itself any better than a paper key log would.
- Cloud-managed: access rules live on a vendor's servers, editable from anywhere via an app or browser — genuinely convenient for a business owner who wants to deactivate a departing employee's access from home at 11pm, but dependent on that vendor staying in business and your internet connection being up for real-time changes to take effect (local hardware typically keeps working during a brief outage, syncing changes once connectivity returns).
Integrating access control with cameras
A fob or badge system's audit trail (who opened which door, when) becomes far more useful paired with camera footage of the same door at the same timestamp — confirming not just that a credential was used, but who actually used it. This is a common and worthwhile pairing for the exact doors carrying the most risk (cash handling, stock rooms) rather than something to build out for every door in a facility. See how many cameras a small business actually needs for sizing that coverage.
Installation and ongoing cost realities
A standalone keypad is close to a drop-in retrofit — comparable installation effort to a standard lock replacement, no wiring beyond the lock itself in most cases. A fob/card system typically needs low-voltage wiring run to each controlled door (or a wireless reader model, at a cost premium over wired), plus a control panel and either local software or a cloud subscription to manage credentials. Budgeting for a fob system should include not just per-door hardware but the ongoing cost of issuing and managing credentials as staff change — a cost keypad systems don't carry, since a keypad has no physical credential to issue at all.
A note on badge systems specifically
Badge systems (photo ID cards, sometimes combined with a proximity or smart-chip credential) add a visual-verification layer a plain fob doesn't have — useful specifically where staff need to be visually identifiable to customers or visitors, such as a reception desk or a regulated facility, beyond just the door-opening function. For a small business without that visual-ID need, a plain fob or key card typically accomplishes the access-control goal at lower cost, since the photo-ID production and management overhead isn't buying anything the business actually needs.
A practical starting point
Single door, small team: keypad with a lockout enabled. Multiple doors, team that turns over: fob system, worth the extra upfront cost for the instant-revoke alone. Multi-tenant or multi-area property: master key system, paired with Grade 1 hardware on every exterior door — see securing a small business for the lock-grade side of this decision.
FAQ
Can I combine a fob system with a master key as backup?
Yes, and it's a common setup — a fob system for daily electronic access with a mechanical master key kept secured as a manual backup for power outages or system failures.
What happens to a cloud-managed access system if the vendor goes out of business?
This varies by vendor and contract — some hardware falls back to basic local operation, others become effectively unmanageable. Worth asking directly before committing to a cloud-dependent system for critical doors.
Is a keypad ever appropriate for a business with 10+ employees?
Generally not as the sole access method — the shared-code problem gets worse as headcount grows, since more people means more frequent turnover and a higher chance the code circulates beyond current staff.
How quickly should access be revoked after an employee leaves?
Immediately, ideally the same day — this is the single biggest practical advantage a fob or badge system has over a shared keypad code or physical key.
Can a keypad and a fob system coexist on the same door?
Yes — many commercial access-control readers accept both a PIN and a fob/card credential, useful as a backup method if a fob is forgotten, though each method should still be individually managed (lockout on the PIN, per-fob revocation) rather than treated as one shared secret.
How do I decide between a wired and wireless fob reader?
Wired readers are generally more reliable and don't depend on battery life, but require running low-voltage cable to each door during installation; wireless readers install faster with no wiring but need periodic battery maintenance per reader — the right choice depends mostly on whether wiring is already in place or easy to add for the specific doors in question.