Keys, Codes, and Lockboxes: How to Handle Client Access Safely

Managing client key access safely means never storing a physical key with a client's name or address on it, using unique lockbox or smart-lock codes per client that you rotate regularly, logging every access method in one secure place, and having a written plan for what happens if a key or code is lost. The goal is simple: you can always get in, and no one else can.

For a solo cleaner with three regular clients, access is easy to keep in your head. At fifteen or twenty clients, it's not. Keys get mixed up, old codes never get changed after a tenant moves out, and a lost keyring can mean twelve families need their locks rekeyed on your dime. The businesses that scale without an access disaster are the ones that treat entry methods as a system from day one, not an afterthought.

What's the safest way to handle physical client keys?

The safest way to handle physical client keys is to never label them with identifying information, store them in a locked box or safe when not in use, and track which key belongs to which client in a separate, secure record that isn't attached to the key itself.

Practical rules that hold up at scale:

• Use a numbered system, not names or addresses. Tag each key with a number or a code only you can decode. If a keyring is lost or stolen, a number tells a stranger nothing.
• Keep a master log separately. Match numbers to clients in a password-protected spreadsheet, a notes app with a passcode, or a CRM — never on paper taped near the keys.
• Store keys in a locked box in your vehicle or home, not loose in a bag or pocket. A small combination lockbox bolted inside a trunk panel is cheap insurance.
• Return keys at the end of service relationships. Make this part of your offboarding routine so old clients aren't still "in the system" a year after they cancel.

If you're building this out from scratch, it pairs well with the habits covered in the first-clean walkthrough and onboarding checklist — access setup should happen at that first visit, not after something goes wrong.

Should you use lockboxes, smart locks, or client-provided keys?

There's no single "safest" entry method — lockboxes, smart locks, and handed-off keys each work, but smart locks and lockboxes with rotating codes are generally lower-risk than loose physical keys because you can change access instantly without a locksmith visit.

| Method | Pros | Watch out for |

|---|---|---|

| Physical key, client gives you a copy | Simple, no batteries or wifi needed | Hard to revoke; lost key means a rekey |

| Realtor-style lockbox | Cheap, works without power or wifi | Code can be shared or shoulder-surfed; must be on a secure part of the property |

| Smart lock with unique code per cleaner | Instantly revocable, time-stamped entry logs on many models | Needs power/wifi; client must maintain the lock |

| Hidden key | Zero cost | Genuinely risky — avoid recommending this to clients |

| Client home at time of cleaning | No access logistics at all | Doesn't scale well for recurring, flexible scheduling |

For vacation rentals and turnovers, smart locks or app-based lockboxes are especially common because owners already need remote, revocable access for guests — the same system usually works well for your cleaning visits. If you clean short-term rentals, see running Airbnb turnover cleaning like clockwork for how access ties into tight scheduling windows.

How do you manage lockbox and smart-lock codes across many clients?

Managing codes across multiple clients safely means giving each property its own unique code, never reusing the same code across homes, and rotating or changing codes whenever a cleaner leaves your team, a client has a falling-out with a tenant, or you simply haven't serviced a property in a while.

A few rules worth building into your routine:

• One code per property, always. Reusing one code everywhere means a single leak compromises every client you serve.
• Rotate codes after any staff change. If someone leaves your crew, change every code they had access to the same week — not "eventually."
• Record codes in one secure, centralized place, not scattered across texts, sticky notes, and memory. A CRM where you keep client history and notes works well for this — see how CRM and follow-ups can hold access notes alongside the rest of a client's file, so the information lives with the account instead of in someone's head.
• Ask clients to change the code periodically, especially after a cleaner leaves or a lockbox has been in place for a year or more. Most smart lock manufacturers, including Schlage, publish guidance on changing and managing access codes that's worth sharing with clients who aren't sure how.

What should be written into your client agreement about access?

Your cleaning service agreement should spell out exactly how you'll enter the property, who else has a key or code, what happens if access fails on the day of service, and who's responsible for lock or lockbox maintenance.

At minimum, cover:

• The agreed entry method (key, code, lockbox location, or client present)
• What you'll do if you arrive and can't get in — wait time, a fee for a wasted trip, how you'll contact the client
• Whether pets will be loose and how that affects entry
• Who's responsible for lockbox batteries or smart lock maintenance
• What happens to keys/codes when service ends

This belongs in the same document where you cover liability and cancellation terms. If you haven't formalized this yet, what to include in a cleaning service contract walks through the broader agreement, and a clear cancellation policy helps when a locked-out visit turns into a missed appointment.

What do you do if a key is lost or a code is compromised?

If a key is lost, tell the client immediately and offer to cover a rekey if the key could reasonably be traced back to their address; if a shared code is compromised, change it the same day and notify everyone who uses that access point.

Speed and honesty matter more than anything else here. A client who finds out about a lost key from you, same-day, with a plan already in motion, usually stays a client. A client who finds out weeks later, or from a neighbor, usually doesn't. If the incident involves actual damage or a break-in tied to your access method, this is also where general liability coverage earns its keep — and if the fallout involves a disputed item or damage claim, the steps in handling a damage claim apply just as well to an access-related incident.

How does access management change when you hire help?

Once you bring on a helper or employee, every client's access needs its own revocable method, because you're no longer the only person who needs — or has — a key to someone's home.

Before adding staff:

• Move away from one shared master key toward individual lockbox or smart-lock codes you can change per employee
• Keep a written log of who has access to which property, updated the day someone joins or leaves
• Build arrival and sign-off steps into a job checklist so every visit documents who entered, when, and whether the property was properly locked up afterward
• Revisit insurance and bonding requirements, since adding staff changes your risk exposure — see should you hire help or stay solo for the bigger picture on that decision

The U.S. Small Business Administration also publishes general guidance on data and physical security practices for small businesses that's worth a skim as you formalize these systems — the same principles about limiting access and logging who has it apply directly to key and code management.

Frequently asked questions

Q: What's the biggest mistake cleaners make with client keys?

A: Labeling keys with the client's name or address. If the keyring is lost or stolen, a labeled key hands a stranger the exact address to let themselves into — use a numbered system with a separate secure log instead.

Q: Should I ever hide a key outside a client's house?

A: It's best avoided. Hidden keys (under mats, in fake rocks) are a known risk that burglars specifically look for; a lockbox with a code you can change is a safer alternative.

Q: How often should lockbox or smart lock codes be changed?

A: Change a code immediately after any staff change, and otherwise review codes at least once or twice a year, or sooner if a lockbox has been in place a long time without a reset.

Q: Who pays if I lose a client's key?

A: There's no universal rule — many cleaners offer to cover a rekey as a goodwill and liability measure, especially if the lost key could be traced to the address; check your service agreement and insurance policy for how this should be handled.

Q: Is it okay to keep a spare key to every client's house in my car?

A: Only if it's in a locked box, not loose, and keys are tagged by number rather than name or address — so a stolen or lost bag of keys can't be matched back to specific homes.

More from Cleaning Services